Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa
File:                     3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (raw, json)
Hash identifier:          JvAuAWjeLfp0XViXv+7ZCgiJcBbHkm/DO53vlhMWqfE=
Subject key identifier:   9E:8D:F1:65:D3:F8:BD:83:00:2E:B0:FD:EF:0F:FD:C2:F7:AA:3D:34
Certificate issuer:       /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6
Certificate serial:       27EB3A0841B9E9ECF78450B6A299138EDB9B29FB
Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa
Signing time:             Tue 21 Oct 2025 19:00:02 +0000
ROA not before:           Tue 21 Oct 2025 18:55:02 +0000
ROA not after:            Tue 20 Oct 2026 19:00:02 +0000
asID:                     138096
IP address blocks:        210.79.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl
                          rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 21:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:eb:3a:08:41:b9:e9:ec:f7:84:50:b6:a2:99:13:8e:db:9b:29:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6
        Validity
            Not Before: Oct 21 18:55:02 2025 GMT
            Not After : Oct 20 19:00:02 2026 GMT
        Subject: CN=9E8DF165D3F8BD83002EB0FDEF0FFDC2F7AA3D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:05:7f:4d:46:7c:97:f7:72:93:2d:01:4d:
                    8c:f3:fc:54:e6:b3:d4:07:25:c1:ec:a3:25:a6:d6:
                    4a:e3:cd:3b:c8:fe:1c:67:67:a1:b7:72:ad:6c:b7:
                    8e:03:b5:41:41:f5:4f:5f:a3:16:4e:32:54:15:99:
                    13:dd:7e:fc:80:03:4d:28:e0:14:a7:a5:fc:eb:bc:
                    5b:6e:35:4c:e3:6f:9c:cd:81:21:28:c1:fc:ed:f9:
                    c0:24:f9:20:74:16:31:e2:53:6c:e1:a7:ed:a3:2e:
                    86:b1:fa:de:7a:d9:0e:3b:ab:11:08:d9:60:25:4c:
                    bd:9d:71:7f:e6:90:2a:da:82:82:c0:a7:1d:aa:da:
                    47:39:0a:4f:c1:da:ee:79:13:70:df:ec:f2:c0:53:
                    5a:28:7e:56:ca:9b:31:c6:2c:09:55:b9:87:43:b4:
                    8a:7a:7e:dc:f9:31:b8:ad:ae:cf:d9:d4:9e:7a:29:
                    51:ab:7c:32:f5:79:6b:30:94:84:21:3a:c2:3f:20:
                    20:b1:95:53:50:8a:80:74:52:73:7e:d2:b3:c2:88:
                    55:1a:5d:20:6a:5b:70:fb:52:53:99:74:91:4e:8a:
                    53:cf:95:6d:f7:f2:18:89:86:a5:6c:f5:75:67:1d:
                    11:56:e7:ee:2a:ce:4b:96:10:ad:30:38:12:1a:d9:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8D:F1:65:D3:F8:BD:83:00:2E:B0:FD:EF:0F:FD:C2:F7:AA:3D:34
            X509v3 Authority Key Identifier:
                keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:23:4f:cc:fc:8f:ec:47:1d:be:ac:05:be:74:0d:7a:6a:5a:
         cd:3a:61:fe:2b:28:79:c4:d2:75:b0:d4:bc:1c:e8:0a:84:73:
         17:0b:d9:2f:30:1f:0b:b3:35:72:7a:c9:df:9e:99:47:93:56:
         28:c3:b3:ac:1a:33:55:9c:c3:f6:18:cf:b3:7d:6b:63:a5:1a:
         0e:06:68:e0:e3:3e:02:75:66:0b:90:30:5f:38:29:4b:b3:77:
         f6:06:f6:2d:bf:b7:d3:93:b4:4b:e5:86:cf:a0:01:b3:db:b2:
         7d:03:31:93:28:5f:59:e6:00:74:f4:db:86:29:41:34:0c:28:
         0f:80:15:f2:35:da:60:32:36:0d:cb:c7:5f:2f:19:db:bb:d3:
         e2:bb:97:06:40:55:e5:d9:c5:33:b7:47:4d:78:64:2c:81:c4:
         f6:4c:f4:9b:7a:33:89:e7:2a:5f:17:ed:30:56:87:f2:a9:c8:
         1f:70:13:71:6d:26:47:c9:d1:20:ff:31:d6:be:6a:9d:74:34:
         5f:fb:7d:ed:e5:43:d3:e2:13:09:62:e5:e9:2c:8b:e5:84:02:
         8c:20:42:3f:0e:25:c7:0e:25:b9:e8:87:48:8e:a6:c4:0d:30:
         40:ff:ef:8b:d0:5f:9b:e7:5f:17:05:30:b0:a3:f7:4a:50:5f:
         5a:22:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:41 2025 by rpki-client