Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39352e302f32342d3234203d3e203138303539.roa
File:                     3230332e3137332e39352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          dmExeZStV0GU+8Pkm1EqYR0/rj4XFLiWbo7JXLT6UtA=
Subject key identifier:   73:2A:6F:C3:EB:9A:53:B2:B5:AC:E6:6C:96:2C:8E:CA:14:C8:08:C1
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       700B9152A0FC9A45C9087E2E13292CFDC1B3983F
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39352e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:03:00 +0000
ROA not before:           Fri 26 Sep 2025 03:58:00 +0000
ROA not after:            Fri 25 Sep 2026 04:03:00 +0000
asID:                     18059
IP address blocks:        203.173.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0b:91:52:a0:fc:9a:45:c9:08:7e:2e:13:29:2c:fd:c1:b3:98:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:58:00 2025 GMT
            Not After : Sep 25 04:03:00 2026 GMT
        Subject: CN=732A6FC3EB9A53B2B5ACE66C962C8ECA14C808C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:05:df:0d:15:8e:42:59:48:60:50:b8:7f:
                    5e:4d:6c:0e:4d:a6:83:aa:56:d1:50:e6:aa:84:68:
                    c6:e4:42:f3:89:ea:ac:07:c2:ea:c3:82:9f:c5:01:
                    eb:89:9f:8c:6d:71:bd:cf:68:d8:4f:ba:10:97:a8:
                    df:cf:f4:80:d6:49:03:f4:87:b2:64:59:31:c5:d0:
                    51:f6:7f:3a:91:41:42:09:aa:62:4b:f9:f8:dd:87:
                    ba:d2:c1:4b:b3:a7:2d:83:d5:82:fc:8a:ec:f7:a7:
                    c8:ad:38:15:bc:cc:14:a3:00:88:4e:f2:51:67:fc:
                    a6:e4:b3:2e:10:ac:2e:33:d7:b2:b5:5c:53:a5:2f:
                    07:8c:55:83:bd:62:85:fb:dc:17:d7:15:83:c8:e0:
                    95:2d:f2:11:b3:09:18:f9:78:6a:6a:88:1e:58:df:
                    65:53:31:1d:e1:c1:b5:97:65:48:44:01:36:10:47:
                    ad:7c:d8:be:ec:68:4a:de:43:04:81:6d:33:8f:5c:
                    2f:86:65:c6:61:aa:84:3f:e6:0c:1a:81:3d:d6:ba:
                    ee:a5:c3:77:93:fd:f7:89:15:a7:c0:09:dd:ab:64:
                    e6:49:26:ea:16:9c:26:ed:40:4b:a5:4b:9e:de:11:
                    7e:d0:4b:2d:48:54:ef:c3:22:ca:db:ec:9c:e1:4e:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:6F:C3:EB:9A:53:B2:B5:AC:E6:6C:96:2C:8E:CA:14:C8:08:C1
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:29:e8:c2:ac:70:8e:1c:94:92:fd:88:c2:3a:5f:9a:b7:
         8e:03:ed:17:dc:38:c1:bf:a0:b2:fc:28:b6:23:bb:96:c8:92:
         ae:95:a7:03:7b:5c:29:ab:e0:05:8b:08:eb:99:3f:03:b9:4b:
         14:22:de:ee:ea:e8:33:09:5f:17:d9:93:e8:de:6a:28:3d:28:
         98:79:25:d5:8c:53:8e:36:e7:7f:95:75:4f:70:04:0b:2a:ea:
         df:a9:29:e8:d5:58:a0:46:76:fd:ba:15:59:9d:47:74:eb:2b:
         e5:36:4e:79:a2:76:6d:5d:eb:41:fe:ac:35:10:e5:eb:7c:47:
         de:84:a1:39:c9:29:a0:60:04:a7:64:58:bb:cf:3a:52:d6:fc:
         7b:0b:f0:dc:4f:03:bf:80:70:57:9b:fd:13:d1:ed:49:d8:99:
         8e:9d:5e:a4:f5:cf:7d:ef:63:d4:77:34:87:3c:89:76:f4:19:
         c5:fe:a0:6e:47:1d:6e:fd:e7:31:48:ff:5e:6d:b0:a3:c4:6d:
         55:37:32:e6:38:56:b3:9e:5c:09:24:1d:46:3a:ec:f1:4f:a2:
         f9:65:4c:03:db:fd:7e:6e:d6:29:25:55:3b:cf:fb:20:f9:c2:
         37:9c:c9:97:0a:87:f4:2f:96:95:fd:fc:fa:dd:d7:99:5a:91:
         d3:ee:b0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:34 2025 by rpki-client