Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34362e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=
Subject key identifier:   9B:0D:59:39:7B:98:E0:EB:49:0D:C5:CA:D5:35:0E:2A:FF:7D:E7:17
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       4047D940EA19070FF3B1101DD1B43EF6AC69617A
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34362e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 07 Oct 2025 09:00:38 +0000
ROA not before:           Tue 07 Oct 2025 08:55:38 +0000
ROA not after:            Tue 06 Oct 2026 09:00:38 +0000
asID:                     45325
IP address blocks:        122.248.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:47:d9:40:ea:19:07:0f:f3:b1:10:1d:d1:b4:3e:f6:ac:69:61:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Oct  7 08:55:38 2025 GMT
            Not After : Oct  6 09:00:38 2026 GMT
        Subject: CN=9B0D59397B98E0EB490DC5CAD5350E2AFF7DE717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:1f:60:32:4a:77:9a:35:a4:83:a1:a2:f2:
                    25:08:d0:3b:2a:0a:bb:71:a1:02:65:db:12:a0:2d:
                    8e:d6:91:59:3e:66:da:53:77:7d:c0:0c:36:e0:42:
                    2a:3b:e8:86:d1:c9:85:c4:4f:e4:07:29:ce:55:61:
                    a1:e1:50:de:ba:7c:4d:7e:17:83:8d:4d:80:7b:7c:
                    85:4d:27:cb:ea:77:79:8e:68:79:74:3b:87:fa:27:
                    aa:07:2f:d8:e3:6f:a2:d8:3f:50:84:39:a9:58:22:
                    8f:e1:09:36:42:8d:9d:60:49:97:48:61:77:3a:55:
                    9f:69:18:ac:6e:86:c9:63:3a:8f:cd:f6:e4:88:19:
                    81:3b:e6:6f:94:72:e0:a9:70:fd:d5:91:11:2e:a8:
                    ab:6c:dc:a3:a2:c8:c9:3a:39:e5:0f:75:b2:ea:b2:
                    2b:c5:36:fd:55:c1:e9:76:e3:81:f3:7f:a7:63:79:
                    f4:30:01:7f:59:5d:0c:61:8c:0e:0a:ed:7e:82:92:
                    be:e0:ce:9f:2a:b8:fc:02:97:f5:b6:bf:09:46:c0:
                    22:40:90:a1:5c:27:ad:51:76:e5:ae:e8:c2:94:6d:
                    d3:b5:af:15:63:7e:83:aa:31:fb:ec:7b:b4:38:4f:
                    21:e2:63:eb:32:d8:62:0b:f8:cc:f8:77:8c:be:e8:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:59:39:7B:98:E0:EB:49:0D:C5:CA:D5:35:0E:2A:FF:7D:E7:17
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34362e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:01:d0:39:0f:df:9f:5d:e2:11:c1:ff:4b:c9:2c:4d:87:
         d4:f5:a0:65:13:d2:65:6c:53:02:e3:1c:ec:bf:72:b6:1c:25:
         a6:cb:0b:39:d6:32:9d:60:77:18:a4:ea:a8:b6:28:b8:7e:a4:
         82:d8:12:ac:6c:49:1b:6c:94:4f:6c:83:02:66:c1:8e:e3:ad:
         a0:ce:28:24:23:c5:63:94:ef:3c:de:aa:d9:30:33:cb:6c:93:
         c7:16:76:b6:af:8a:f3:77:c7:f7:8f:ce:06:55:7a:a2:ca:3b:
         e5:a4:09:74:9b:a4:73:ad:53:2a:36:4c:28:00:9d:d6:c6:db:
         c6:e2:82:8f:a8:f8:33:99:b2:33:13:f3:d8:ca:6c:71:47:6b:
         0a:79:fa:98:52:95:a6:60:61:40:34:05:d8:2a:49:76:9e:db:
         72:60:52:d2:04:b8:33:c1:b0:c8:3f:f2:40:98:8e:52:42:29:
         a3:08:5b:f0:d8:b2:d5:f6:2f:2f:9e:38:04:64:5f:73:5b:f7:
         fd:9b:d0:42:00:7d:35:2c:3b:96:e6:df:31:64:8a:da:c6:46:
         c5:51:20:a4:4d:47:b9:5c:a3:6c:75:04:20:97:27:3b:49:0e:
         27:08:05:a9:e8:cc:53:37:d0:7d:fa:ca:46:ca:85:a3:e7:62:
         59:64:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:57:18 2025 by rpki-client