Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
File:                     3230332e38332e32362e302f32332d3234203d3e203538333738.roa (raw, json)
Hash identifier:          8x2Coc9pifmT+orzQex2GAIyBvhcFaqojB9aD5S8okg=
Subject key identifier:   E6:46:2E:6A:FD:03:E9:FE:B9:47:83:47:34:10:D0:09:1B:29:1E:93
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       0B1F3F14E37A8AAF5430ED44C54E74D2B81609C1
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
Signing time:             Fri 24 Oct 2025 07:00:01 +0000
ROA not before:           Fri 24 Oct 2025 06:55:01 +0000
ROA not after:            Fri 23 Oct 2026 07:00:01 +0000
asID:                     58378
IP address blocks:        203.83.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 06:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1f:3f:14:e3:7a:8a:af:54:30:ed:44:c5:4e:74:d2:b8:16:09:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Oct 24 06:55:01 2025 GMT
            Not After : Oct 23 07:00:01 2026 GMT
        Subject: CN=E6462E6AFD03E9FEB94783473410D0091B291E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:ad:d6:96:ba:40:48:e8:6a:a2:cf:22:02:
                    cd:2a:34:b1:2a:97:7c:a5:57:b8:0a:17:9f:c4:a3:
                    ee:69:44:7b:b6:54:ff:b6:10:3d:d9:f6:86:76:fe:
                    36:a1:46:b3:3a:5f:36:0d:cb:91:cb:5d:4d:5c:2f:
                    41:f1:48:49:5e:9b:eb:fa:b0:8f:25:24:ad:32:96:
                    3d:ec:6b:fd:ab:8b:c6:70:21:00:4c:84:44:ef:5d:
                    e5:db:0f:06:a7:a1:8d:ef:a9:41:3b:1f:5f:91:70:
                    ad:d1:ea:cd:83:07:4f:e6:05:79:27:68:c8:11:20:
                    76:52:99:61:d3:16:7c:f4:e1:96:a4:f2:0d:f9:da:
                    47:a6:e1:15:16:f2:ec:73:27:dd:28:07:d6:45:75:
                    1b:ba:cb:87:f0:b1:4b:e8:e9:16:54:bf:7a:7f:64:
                    ad:ff:a8:f0:b3:f9:80:db:fe:17:22:52:2d:6f:1f:
                    79:89:c6:f4:ef:9d:50:af:a5:7d:11:bd:03:16:84:
                    03:d4:ee:2f:a0:e1:32:3a:c8:b6:b5:cc:eb:e5:f9:
                    c7:ce:9c:6a:72:a1:8f:cc:a5:c2:1b:bc:64:95:92:
                    62:92:07:45:c5:a0:82:38:6a:b1:66:ff:a8:5f:41:
                    16:14:23:78:85:7e:3e:74:14:8b:4f:1a:95:dc:23:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:46:2E:6A:FD:03:E9:FE:B9:47:83:47:34:10:D0:09:1B:29:1E:93
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.83.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:bb:2b:2e:71:19:2e:01:7e:d5:4e:e9:1a:69:cf:ed:e7:03:
         92:8c:9a:59:e3:f6:cc:7c:ea:b1:7b:f0:67:b7:f7:f5:dd:a2:
         ac:2c:21:d4:5c:e7:1b:99:9d:27:6a:db:a6:a2:65:81:0d:23:
         f4:f0:ab:92:95:33:0d:c5:b7:8b:ba:e2:be:37:99:57:0f:7e:
         0f:9f:e7:15:76:e6:47:51:c1:9d:93:b2:fe:f0:e4:38:93:ad:
         e0:5f:07:2f:eb:5a:34:66:46:6c:d9:24:4a:23:51:7e:4e:71:
         c6:31:80:6c:f6:61:cd:31:1f:87:d7:8a:73:de:61:b8:3e:60:
         94:15:10:9b:8e:f4:a4:50:cc:f8:aa:42:f0:af:8d:b6:b2:db:
         1b:66:2a:ba:3d:a0:21:d7:e6:bf:a5:e3:07:59:eb:d9:f9:ea:
         ca:fb:40:12:9f:f8:14:a8:44:04:87:55:ec:73:fd:bc:79:2c:
         35:85:96:a8:16:76:66:0d:d6:8c:5d:17:38:45:84:c5:b3:c5:
         79:40:b9:0c:58:86:f0:b7:d8:ff:c3:e5:ca:13:25:f4:8c:41:
         93:7e:4c:f9:da:80:d8:39:73:2a:26:15:b7:e8:04:a1:02:50:
         25:84:a5:c4:8c:69:08:08:72:15:0b:99:b7:fc:a7:5c:17:8f:
         af:1a:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:49 2025 by rpki-client