Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32342d3234203d3e203138303539.roa
File:                     3230332e3137332e39322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          REILyaSokMmtfY1GPEjVE30EEWS8C6NqSXQprVpL9jQ=
Subject key identifier:   75:7C:17:08:C4:AA:00:AE:DF:1E:87:4D:51:90:3C:59:DA:4F:64:33
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       7B215E6CFE039C200AA438C628D973B6BFDA86D1
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:03:02 +0000
ROA not before:           Fri 26 Sep 2025 03:58:02 +0000
ROA not after:            Fri 25 Sep 2026 04:03:02 +0000
asID:                     18059
IP address blocks:        203.173.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:21:5e:6c:fe:03:9c:20:0a:a4:38:c6:28:d9:73:b6:bf:da:86:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:58:02 2025 GMT
            Not After : Sep 25 04:03:02 2026 GMT
        Subject: CN=757C1708C4AA00AEDF1E874D51903C59DA4F6433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:24:d2:0f:94:91:bd:13:d8:71:b8:7f:aa:
                    09:d7:a7:15:89:70:3f:0b:65:09:f3:e7:7e:47:be:
                    e3:d3:a4:17:18:51:b7:b4:05:ca:d5:73:9e:3a:f1:
                    8a:fe:ff:13:e8:61:0c:a3:f3:60:ac:8d:23:67:52:
                    01:2d:d0:e8:e9:e8:54:3d:e3:4d:10:e2:a8:d9:3a:
                    b4:6b:10:27:bf:dd:a6:24:e9:ee:62:3a:79:a2:0f:
                    4a:3f:d6:57:ae:12:89:6f:17:bf:62:4c:a8:ef:b0:
                    02:e8:35:b3:d6:65:7c:04:34:57:c0:2e:58:93:fa:
                    e3:a7:9d:fc:74:6b:30:57:2b:f5:5e:da:9f:5c:60:
                    3d:31:39:11:da:05:bb:99:00:81:05:82:72:a5:56:
                    1c:f5:c2:ae:f6:d8:2a:81:b4:e7:28:22:0b:c2:fe:
                    8d:e3:eb:9f:4a:87:15:ae:ac:03:d8:bc:7f:8e:91:
                    62:59:45:47:bd:e4:58:6b:91:fe:fa:6d:6f:78:f4:
                    b3:bf:ec:bf:40:a0:a8:95:de:d6:76:cd:a2:8f:45:
                    45:97:7c:c3:a6:94:c0:60:ed:2d:ac:69:f6:cc:d2:
                    44:33:d7:16:70:eb:7d:cd:9a:54:0c:d2:cf:b8:e9:
                    4c:92:4f:a9:61:e0:44:5d:8e:67:c6:70:63:2e:48:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:17:08:C4:AA:00:AE:DF:1E:87:4D:51:90:3C:59:DA:4F:64:33
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c7:be:7b:a3:49:26:77:82:09:4a:e3:2c:54:62:94:c1:6a:
         24:b6:d7:31:fa:1f:f5:dd:76:d5:ec:f4:67:07:df:89:86:4a:
         cd:b2:19:c2:b0:ef:57:4c:d9:84:37:8b:ea:a4:6a:25:1e:16:
         74:80:66:2f:c4:84:65:18:1c:48:85:c6:fa:29:9c:ae:0d:31:
         45:f8:23:7e:ce:7d:3b:7e:3a:4e:e0:b4:44:55:f3:32:e3:83:
         b4:9e:53:6d:0b:6e:7b:b4:6f:fe:91:16:58:17:8c:35:c1:44:
         c1:df:e2:d0:18:50:0f:58:1a:cb:27:07:40:d0:08:09:b2:38:
         e5:eb:b1:5b:c1:0c:88:a2:65:67:57:fb:8a:37:5a:b1:2b:67:
         73:af:09:86:f4:f3:d2:de:b5:df:75:d1:3e:a9:18:da:bf:85:
         0c:2f:3d:33:bb:c1:e4:63:82:b3:aa:84:55:7d:e9:f6:8c:59:
         80:cb:4d:a8:df:78:f3:f7:24:dd:a5:28:38:b5:be:90:68:4b:
         a5:6c:33:5d:18:29:fe:26:97:ee:8c:0a:2d:2c:f6:8c:25:37:
         93:00:da:7b:84:2a:dd:ec:17:c8:9b:a4:39:83:87:92:e8:b4:
         2f:ae:cd:5d:fe:df:65:10:96:e8:86:0a:2a:7a:88:a3:94:ca:
         78:44:d0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:10:34 2025 by rpki-client