Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          4LTx4Ox+H6HTjwtHtdD0nVmmcDVaXj1pGwVOaA9o88E=
Subject key identifier:   C0:86:45:78:AD:28:06:6D:35:3B:4C:AB:3B:1E:A9:8C:55:86:DA:7C
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       62916D9D7E0F8B9C4FDB10750FD715C6398F85B4
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:55 +0000
ROA not before:           Fri 26 Sep 2025 03:57:55 +0000
ROA not after:            Fri 25 Sep 2026 04:02:55 +0000
asID:                     18059
IP address blocks:        202.78.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:91:6d:9d:7e:0f:8b:9c:4f:db:10:75:0f:d7:15:c6:39:8f:85:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:55 2025 GMT
            Not After : Sep 25 04:02:55 2026 GMT
        Subject: CN=C0864578AD28066D353B4CAB3B1EA98C5586DA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:1c:b9:e2:14:eb:6c:4d:da:ee:f3:cb:a2:
                    78:e3:9f:fd:6d:0f:a8:90:74:81:54:47:97:42:2d:
                    0c:6e:ff:af:5b:21:fd:69:38:2f:3f:1b:9e:01:a0:
                    7d:d2:72:f5:28:43:29:a1:18:49:df:8c:17:c4:5c:
                    bd:d5:37:6d:82:6b:af:79:e8:76:62:93:41:e0:7e:
                    67:23:96:4e:8a:fa:bc:b6:51:c3:34:09:7c:fe:4c:
                    e3:75:ed:af:62:52:23:61:69:ed:7d:9a:df:f2:46:
                    a1:65:63:74:91:77:57:7f:2e:e6:79:4d:20:9e:c5:
                    dc:9f:78:31:60:9c:53:59:12:61:f9:8a:1e:aa:1b:
                    f8:95:93:17:0d:c5:bb:e0:93:ef:fd:4a:1a:52:67:
                    90:90:91:1b:82:59:ce:aa:3c:ad:70:9b:09:de:18:
                    62:73:2f:33:b0:61:d1:04:32:65:7a:1d:3d:34:db:
                    9b:72:3b:e0:e1:7f:75:65:1a:9d:7d:35:03:dd:bb:
                    07:90:f3:e2:c3:ce:c8:b0:16:fe:4a:d3:78:1e:47:
                    7e:b6:3f:5d:62:9e:08:dc:2f:26:de:f6:ef:ff:39:
                    21:21:c5:68:00:99:af:d7:ab:1a:f2:41:de:22:34:
                    3d:25:c3:79:5d:24:ae:af:67:06:85:86:79:dd:1a:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:86:45:78:AD:28:06:6D:35:3B:4C:AB:3B:1E:A9:8C:55:86:DA:7C
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:2e:5b:9a:12:36:0d:1b:de:77:66:00:aa:84:4c:ee:55:
         cc:24:32:31:af:c7:8e:13:06:8e:ca:08:90:91:11:ac:73:b4:
         b6:25:82:25:7e:84:ad:49:98:ec:14:33:5f:2a:ca:dd:ba:5f:
         41:96:7c:a4:7f:54:ec:b5:a0:22:0f:93:e6:2c:8f:cb:33:6f:
         b3:9a:60:f4:00:bd:3c:19:2c:27:dc:9e:1c:06:52:57:7a:9f:
         9a:4b:b8:50:0a:6e:b4:9e:c5:0a:7d:2e:b4:7d:b7:a3:67:df:
         56:92:0d:13:af:83:2a:2a:7e:42:72:d3:ab:ed:b8:a9:58:39:
         6b:a3:df:e1:aa:81:b6:42:10:6c:34:8c:38:26:a0:5e:0d:48:
         84:9e:e2:eb:ad:ed:ac:d4:f7:b4:5c:92:eb:f0:fa:e6:02:e8:
         14:db:27:76:cd:b6:00:b7:08:e2:2e:30:7c:47:f0:61:ea:7a:
         95:2d:72:d5:84:1f:39:74:94:f4:6a:00:78:72:08:29:84:c0:
         50:1a:f6:cf:25:56:65:e6:24:d0:32:6f:6e:11:43:43:b7:de:
         9f:32:2e:82:ef:0d:33:1c:92:25:a7:80:dd:62:b5:ab:09:4d:
         8a:12:02:73:69:a8:a6:12:a9:28:9e:4e:bd:3b:10:a7:d9:4e:
         4d:df:72:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:57 2025 by rpki-client