Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa
File:                     3230332e3137332e39322e302f32322d3234203d3e203138303539.roa (raw, json)
Hash identifier:          cSJud8RIVvuL8f9FIyDuJNXiYo0LvXwC51OkjreFxzQ=
Subject key identifier:   00:65:8E:C1:70:7A:7E:DF:3A:4A:EF:ED:0D:65:C0:45:39:10:EC:9C
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       304ED00CE126C89F810E380F21F894E034CBC7FF
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa
Signing time:             Fri 20 Feb 2026 10:00:02 +0000
ROA not before:           Fri 20 Feb 2026 09:55:02 +0000
ROA not after:            Fri 19 Feb 2027 10:00:02 +0000
asID:                     18059
IP address blocks:        203.173.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 14:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4e:d0:0c:e1:26:c8:9f:81:0e:38:0f:21:f8:94:e0:34:cb:c7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Feb 20 09:55:02 2026 GMT
            Not After : Feb 19 10:00:02 2027 GMT
        Subject: CN=00658EC1707A7EDF3A4AEFED0D65C0453910EC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:9d:cc:aa:3d:16:7b:90:1f:ad:07:a7:62:
                    8c:5f:c0:dd:af:1f:0a:ba:cc:7d:84:ae:b4:3f:0a:
                    23:ab:d3:86:29:3f:e4:df:c3:81:b8:cc:bb:19:a0:
                    69:d8:54:7b:16:3e:88:2a:e5:90:1a:71:a5:14:14:
                    ec:1d:6e:35:f1:89:3b:bc:1c:9f:8a:05:21:99:4d:
                    a1:83:1b:fb:2f:96:2f:02:b5:f5:ec:85:59:6a:33:
                    4f:ef:ec:67:86:78:28:fc:72:63:cc:22:91:94:dc:
                    bc:81:cb:e7:c0:f9:d1:34:7f:83:a9:56:0a:2c:85:
                    ec:c2:a6:dc:c0:00:9d:3a:84:1f:02:2b:c7:88:70:
                    5c:28:5b:c1:26:6f:94:5e:5e:86:7d:7d:cd:05:ca:
                    2f:1d:54:1c:12:d1:ab:a9:0a:bf:86:da:a1:8e:ec:
                    97:db:b3:f9:bb:37:04:0b:1a:e5:95:40:b8:4f:c1:
                    28:67:7a:f0:a4:c2:a0:86:04:86:ab:5f:d7:d4:76:
                    4d:9b:c6:b5:f6:b6:1b:3d:9d:44:3f:d3:58:48:c9:
                    41:98:30:25:92:ca:42:b2:20:81:4c:11:48:e1:4b:
                    f2:41:b9:2a:58:57:75:a8:82:69:84:e9:50:78:9c:
                    34:bc:be:b8:25:bb:c6:d4:de:34:09:bc:d4:c6:44:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:65:8E:C1:70:7A:7E:DF:3A:4A:EF:ED:0D:65:C0:45:39:10:EC:9C
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:32:c2:e1:f0:9a:b0:a9:42:cd:d1:4c:71:c6:63:73:0b:5b:
         cd:62:9c:8b:1f:c5:77:60:31:8e:96:09:3c:48:34:b6:7c:bf:
         4a:c0:00:2a:75:e5:db:af:9e:97:b4:b6:c6:11:81:b6:49:1e:
         28:80:ff:a7:c5:bf:16:63:3b:33:ea:8a:37:89:c1:e5:8f:63:
         d0:fb:23:2d:e4:c5:c7:7c:8b:e0:ab:c3:75:41:a2:0a:87:d2:
         a7:71:5f:63:4f:fc:50:a1:4e:46:20:91:76:6b:3b:37:c1:7e:
         b8:43:fc:78:4a:ee:83:45:05:e9:4b:b4:e2:41:84:d6:51:b4:
         86:0f:29:46:fb:e7:05:3a:fa:3b:01:f7:cb:d4:2c:2e:02:59:
         f9:f1:0a:43:4f:51:fd:64:98:1c:8f:90:7d:30:66:9f:fe:b8:
         ed:66:b1:db:f1:95:9f:99:aa:12:e1:13:e4:58:29:cd:08:7f:
         78:d0:7c:b9:71:dc:41:a1:cd:bd:2c:08:8b:3c:73:b8:5f:5b:
         d5:e5:be:fc:9f:5a:38:fd:da:c6:06:70:57:1c:e0:ed:f1:dc:
         51:5e:42:bd:31:08:23:26:c4:8c:9c:94:08:8d:d4:39:d5:fb:
         1a:2b:a4:72:73:6e:23:36:a3:0e:39:1f:f7:53:c1:07:97:75:
         9b:f9:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:40 2026 by rpki-client