Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233342e302f32342d3234203d3e203138303539.roa
File:                     3230332e3133342e3233342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          S59GeJ8DtRlN7VoyE3HvPUBipfD2++1ewdZYoQuHt0c=
Subject key identifier:   2C:6F:3A:F0:17:F6:82:5E:BE:06:0E:7F:03:C4:58:23:1E:62:7A:0B
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       0BAD6879BEFF5B7FEA895C8E714AFE5B5474EBA6
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 05:00:01 +0000
ROA not before:           Fri 26 Sep 2025 04:55:01 +0000
ROA not after:            Fri 25 Sep 2026 05:00:01 +0000
asID:                     18059
IP address blocks:        203.134.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ad:68:79:be:ff:5b:7f:ea:89:5c:8e:71:4a:fe:5b:54:74:eb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 04:55:01 2025 GMT
            Not After : Sep 25 05:00:01 2026 GMT
        Subject: CN=2C6F3AF017F6825EBE060E7F03C458231E627A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:ee:af:e3:12:bd:6e:8d:3f:e7:62:20:9b:
                    79:e0:21:5b:b5:58:cc:e0:44:29:43:32:44:f1:a3:
                    06:37:fd:c1:af:2a:f2:19:e0:a1:7b:5e:d1:ab:eb:
                    92:8b:77:6f:0d:8c:69:65:56:aa:a2:f9:5f:7c:24:
                    0c:08:94:ae:2d:e3:00:7c:2d:86:3d:84:a9:c6:cb:
                    04:2c:74:a2:e8:e5:a4:ea:c4:59:ee:ca:96:5d:74:
                    4e:ef:b7:d2:37:c4:5d:16:a8:d6:5c:dc:9d:63:4a:
                    84:5b:16:ba:56:f4:fd:13:33:74:f0:a5:61:34:5d:
                    20:11:8f:9a:19:81:59:3d:0c:6d:c2:c4:7b:cf:b1:
                    b5:22:da:34:00:24:e5:60:1b:0f:26:77:17:24:74:
                    47:14:96:ee:4e:c4:1b:6e:21:6d:50:22:8e:d5:f3:
                    86:bc:63:92:14:64:82:f4:57:f5:12:4f:3d:56:73:
                    33:47:05:2d:6e:15:49:b3:4b:88:90:d7:53:c4:5f:
                    66:5f:59:98:4e:21:88:2f:d7:5d:92:2d:f3:e6:25:
                    c8:36:e3:ad:ef:79:4b:77:30:85:bd:30:21:6f:5e:
                    8b:dd:3f:e0:e0:7d:81:5f:be:9a:15:80:5b:32:00:
                    af:fb:4d:c4:f7:bc:a5:8b:88:99:f3:10:cb:cf:92:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6F:3A:F0:17:F6:82:5E:BE:06:0E:7F:03:C4:58:23:1E:62:7A:0B
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.134.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:4f:6f:3a:f6:00:9a:60:98:41:92:5e:58:b9:a2:0d:01:3e:
         15:a0:16:61:33:44:29:c5:ec:85:9c:00:22:8e:9e:95:f8:e9:
         d3:b3:f7:1c:4f:5a:04:99:d7:76:62:05:8c:09:a9:0d:07:21:
         f8:d0:f2:d0:0b:e1:c2:62:de:78:23:0f:3a:40:a1:b5:53:b6:
         a8:12:a8:4f:59:d6:d6:cf:1a:75:58:64:d8:43:f1:e3:2c:27:
         9b:f8:12:17:c4:19:12:93:cf:28:d0:09:64:f3:d3:07:15:2e:
         28:14:1a:8c:f4:76:1a:02:d0:75:9e:5e:ad:54:af:cb:09:17:
         4f:44:d6:11:29:c5:64:e8:fa:d8:c2:ff:d7:8a:bb:45:ea:5f:
         12:93:a0:8f:68:2c:9e:b7:ce:17:b4:fd:ef:40:a7:56:2e:b0:
         c8:aa:ae:ae:99:3e:61:e4:29:2c:2a:cc:84:22:cb:30:5b:4b:
         aa:a5:94:9b:7a:ea:95:64:21:71:2f:e7:32:cf:da:61:c6:8d:
         74:e8:c0:fa:8e:6e:53:68:9f:57:ed:12:a8:89:92:9e:d9:b4:
         36:71:05:ac:91:8c:45:6b:f9:2c:62:6d:4f:6a:bb:eb:49:b8:
         55:96:d7:d5:d3:82:27:ad:52:ac:d3:7c:d1:2f:79:12:13:40:
         ee:34:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:38 2025 by rpki-client