Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
File:                     3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (raw, json)
Hash identifier:          q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=
Subject key identifier:   9B:AF:62:D4:9B:5D:A1:04:F5:7D:B7:54:7B:A3:5D:FB:94:CF:81:7A
Certificate issuer:       /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB
Certificate serial:       6F2FE4CDF17F366C1485F31C75F69989B84404F1
Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
Signing time:             Tue 14 Oct 2025 07:00:02 +0000
ROA not before:           Tue 14 Oct 2025 06:55:02 +0000
ROA not after:            Tue 13 Oct 2026 07:00:02 +0000
asID:                     45295
IP address blocks:        203.145.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl
                          rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 08:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2f:e4:cd:f1:7f:36:6c:14:85:f3:1c:75:f6:99:89:b8:44:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB
        Validity
            Not Before: Oct 14 06:55:02 2025 GMT
            Not After : Oct 13 07:00:02 2026 GMT
        Subject: CN=9BAF62D49B5DA104F57DB7547BA35DFB94CF817A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:37:7a:cf:31:5d:83:55:87:9d:84:60:9d:
                    09:bd:30:55:75:6d:a9:6c:57:25:59:26:6e:e3:cc:
                    04:b8:7b:a1:0c:34:ee:89:91:85:19:b9:57:fa:75:
                    92:77:76:b7:75:bc:0d:a7:7a:82:76:89:32:68:23:
                    4a:bf:62:58:8d:af:56:61:3d:2a:9f:cf:e7:b6:42:
                    2c:2b:45:88:fc:bd:92:a7:f5:de:ad:14:47:d2:c4:
                    83:30:02:dc:5f:c3:13:a0:15:f4:7f:da:97:8c:1c:
                    e9:5e:48:79:8b:1d:51:95:be:03:16:13:a5:b7:0e:
                    69:06:0e:14:86:c7:75:2e:e2:8d:df:71:23:a3:7f:
                    85:5a:68:9d:68:ae:49:db:70:1f:cf:17:a7:c0:cb:
                    95:8a:ee:aa:7a:49:21:1a:f9:90:e1:a8:52:db:f0:
                    71:82:11:c9:0e:d7:bd:dc:7a:a0:ff:4e:17:95:b4:
                    02:d2:bf:85:b2:ae:c7:bf:b1:74:d5:83:6a:f9:08:
                    95:f6:3e:b6:b1:34:c9:8b:78:00:07:51:22:7d:fa:
                    66:23:3f:db:5a:c5:f3:7f:fd:1d:c4:f2:84:2b:85:
                    23:cb:bb:57:03:0f:47:01:9d:a7:10:a3:0e:38:1a:
                    e3:c1:50:4f:e8:0c:e3:bb:e4:6d:98:62:41:e8:7c:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:62:D4:9B:5D:A1:04:F5:7D:B7:54:7B:A3:5D:FB:94:CF:81:7A
            X509v3 Authority Key Identifier:
                keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:b2:d4:4b:47:23:a7:48:3c:99:af:cb:28:c9:b1:aa:ba:
         21:55:79:5e:a5:09:a0:39:b4:19:c6:6d:a9:96:ee:25:e6:19:
         80:d5:08:3d:f3:2e:48:0f:e5:d8:b9:c0:40:5e:21:79:c5:ae:
         07:18:7a:e6:82:4c:6f:05:62:88:1b:4f:5a:2a:9f:f5:2d:bf:
         9c:17:07:8a:cb:d3:57:8c:59:34:ca:bf:b5:17:69:6b:12:e2:
         c4:94:dd:c2:ad:3c:c9:f2:6e:2c:19:df:fa:c5:e6:25:80:fa:
         4e:2a:02:35:2b:e3:0e:92:7d:73:b7:fe:b7:b9:86:b9:35:90:
         08:3e:4b:b1:74:77:36:ad:3c:da:ff:68:52:c7:87:be:9a:bd:
         5c:91:19:33:f4:1a:48:5e:f4:80:c7:ac:bc:e1:a7:cb:ca:3d:
         9a:02:31:f6:c5:3a:bf:2d:6c:16:42:68:84:e6:89:07:71:fc:
         04:63:66:b9:c8:33:5b:74:1b:a2:aa:ce:c3:77:71:a6:60:4a:
         fc:07:fb:89:c7:50:79:86:51:a3:29:a0:ef:85:cd:32:52:24:
         59:ae:97:63:d9:89:50:03:a6:09:0f:a5:ea:e0:59:da:c8:9f:
         b3:1a:6d:4c:3b:be:0e:df:fc:d2:ba:7a:94:1f:0b:57:32:b4:
         1c:32:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:33 2025 by rpki-client