Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39332e302f32342d3234203d3e203138303539.roa
File:                     3230332e3137332e39332e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          ZBWmh5phbUZL77FJwe5fOl0hbGn8YFHknXyTiNnbumk=
Subject key identifier:   99:33:BB:95:43:DE:59:24:97:40:38:AF:4C:99:0A:DF:C6:15:E1:42
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       7FE52BF094457E4A586DF78ECF255E5D5A40F0DE
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39332e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:57 +0000
ROA not before:           Fri 26 Sep 2025 03:57:57 +0000
ROA not after:            Fri 25 Sep 2026 04:02:57 +0000
asID:                     18059
IP address blocks:        203.173.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e5:2b:f0:94:45:7e:4a:58:6d:f7:8e:cf:25:5e:5d:5a:40:f0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:57 2025 GMT
            Not After : Sep 25 04:02:57 2026 GMT
        Subject: CN=9933BB9543DE5924974038AF4C990ADFC615E142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:c7:80:f0:22:13:43:c8:0d:f0:df:5d:ee:
                    0c:d1:44:f8:07:b6:ed:81:60:e6:25:1d:3f:1e:05:
                    da:d2:75:9a:16:0c:87:c6:87:ee:7b:5e:83:9d:6e:
                    d2:1f:c1:2f:1a:e8:69:85:38:b8:10:c5:74:df:29:
                    f2:60:ad:7e:e0:11:c7:6a:a4:0e:9f:ba:e2:be:44:
                    a3:cb:09:af:8d:d1:d9:08:6b:5a:25:d3:fe:ee:72:
                    fb:00:f7:f3:a9:06:82:b3:e6:1c:bf:6d:0f:26:4c:
                    51:bd:0e:3f:6c:5f:54:af:bf:75:b5:d0:e1:11:2f:
                    c9:50:3c:50:44:74:3e:50:65:f7:cc:75:2f:5e:49:
                    b0:59:6d:11:00:ad:57:57:d1:76:3b:9e:c1:4d:df:
                    b2:18:15:96:80:af:89:ae:2f:15:70:59:eb:c3:df:
                    25:7f:36:f9:db:71:cf:96:bf:03:32:89:34:7b:3e:
                    a1:e6:74:fd:37:45:4e:2a:13:50:e8:66:9f:ce:12:
                    88:d7:2f:03:05:3b:86:d3:0d:0d:d0:66:b2:e8:1a:
                    d6:73:d9:ba:70:2f:1d:5b:01:19:4b:a7:30:b7:47:
                    34:7d:81:de:ce:ba:c1:14:ae:62:42:bb:24:58:ba:
                    23:0d:f0:a5:a8:96:04:1d:ba:51:55:0e:77:7f:28:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:33:BB:95:43:DE:59:24:97:40:38:AF:4C:99:0A:DF:C6:15:E1:42
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39332e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fd:58:1e:62:a3:ae:02:34:b1:02:42:ef:93:01:42:8b:f5:
         45:63:fa:19:80:27:4f:8e:51:9d:81:03:93:94:55:1b:4b:7c:
         a0:e3:a0:65:5a:ca:8e:05:ae:54:9c:8a:73:af:b5:20:af:23:
         f1:37:03:29:72:7f:c4:a5:06:55:38:dc:77:07:ae:db:60:b8:
         a4:77:46:56:e8:b7:c4:59:59:0c:be:e2:da:7c:7a:a2:88:31:
         8b:85:cc:3c:c6:28:36:aa:bc:82:eb:29:78:48:b6:fe:32:db:
         fc:d4:fb:1d:55:08:ba:ec:78:cb:97:cb:17:29:98:b8:a2:0d:
         66:49:9e:7d:3a:99:3a:ff:0b:3a:d3:f2:62:d3:2a:43:be:00:
         7c:ae:7e:f2:64:62:b8:b6:1e:d2:1d:cb:18:d0:34:f4:cf:b2:
         84:ec:66:11:c7:a5:1b:6b:26:21:57:53:ca:59:84:eb:29:16:
         b2:b9:ba:13:df:e6:1f:e4:4d:b0:b7:bb:ce:f1:a2:65:6d:f1:
         74:74:77:e2:af:bb:98:ee:17:c3:fb:47:e5:cd:d9:b1:b4:ee:
         c0:71:13:fd:76:7a:52:be:bc:2c:43:d4:db:21:42:e8:5f:92:
         aa:43:37:78:67:6a:a9:ab:81:96:fc:a7:77:fd:f0:4e:b0:a9:
         11:19:7e:5d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUf+Ur8JRFfkpYbfeOzyVeXVpA8N4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yNTA5MjYwMzU3NTdaFw0yNjA5MjUwNDAyNTdaMDMxMTAvBgNV
BAMTKDk5MzNCQjk1NDNERTU5MjQ5NzQwMzhBRjRDOTkwQURGQzYxNUUxNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkK8eA8CITQ8gN8N9d7gzRRPgH
tu2BYOYlHT8eBdrSdZoWDIfGh+57XoOdbtIfwS8a6GmFOLgQxXTfKfJgrX7gEcdq
pA6fuuK+RKPLCa+N0dkIa1ol0/7ucvsA9/OpBoKz5hy/bQ8mTFG9Dj9sX1Svv3W1
0OERL8lQPFBEdD5QZffMdS9eSbBZbREArVdX0XY7nsFN37IYFZaAr4muLxVwWevD
3yV/Nvnbcc+WvwMyiTR7PqHmdP03RU4qE1DoZp/OEojXLwMFO4bTDQ3QZrLoGtZz
2bpwLx1bARlLpzC3RzR9gd7OusEUrmJCuyRYuiMN8KWolgQdulFVDnd/KBsfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmTO7lUPeWSSXQDivTJkK38YV4UIwHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzNzMzMmUzOTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMutXTANBgkqhkiG
9w0BAQsFAAOCAQEAn/1YHmKjrgI0sQJC75MBQov1RWP6GYAnT45RnYEDk5RVG0t8
oOOgZVrKjgWuVJyKc6+1IK8j8TcDKXJ/xKUGVTjcdweu22C4pHdGVui3xFlZDL7i
2nx6oogxi4XMPMYoNqq8guspeEi2/jLb/NT7HVUIuux4y5fLFymYuKINZkmefTqZ
Ov8LOtPyYtMqQ74AfK5+8mRiuLYe0h3LGNA09M+yhOxmEcelG2smIVdTylmE6ykW
srm6E9/mH+RNsLe7zvGiZW3xdHR34q+7mO4Xw/tH5c3ZsbTuwHET/XZ6Ur68LEPU
2yFC6F+SqkM3eGdqqauBlvynd/3wTrCpERl+XQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:39 2025 by rpki-client