Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32322d3232203d3e203634333032.roa
File:                     3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (raw, json)
Hash identifier:          67RbGhY+6ZVaOK1MwCZS3qjFq9gsaQZlwx9Mn1hUNpU=
Subject key identifier:   83:2A:18:ED:11:54:E0:E1:26:04:E1:52:B1:52:D0:E8:5A:D9:46:46
Certificate issuer:       /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial:       48CBEDA995E56426693D337C3DB2E543194898A1
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32322d3232203d3e203634333032.roa
Signing time:             Sat 06 Sep 2025 04:02:27 +0000
ROA not before:           Sat 06 Sep 2025 03:57:27 +0000
ROA not after:            Sat 05 Sep 2026 04:02:27 +0000
asID:                     64302
IP address blocks:        103.78.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
                          rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 07:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cb:ed:a9:95:e5:64:26:69:3d:33:7c:3d:b2:e5:43:19:48:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
        Validity
            Not Before: Sep  6 03:57:27 2025 GMT
            Not After : Sep  5 04:02:27 2026 GMT
        Subject: CN=832A18ED1154E0E12604E152B152D0E85AD94646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:2e:48:04:8b:49:b4:c6:ff:96:e5:eb:e3:
                    6b:ee:c1:03:54:ee:b4:b5:c4:d8:8b:01:8a:df:1f:
                    34:39:69:01:98:40:00:6d:0a:10:d6:8f:9c:7f:2b:
                    a0:43:3c:c5:2b:9a:7b:9b:aa:96:18:32:de:c5:2c:
                    f2:fa:43:37:69:bd:68:1b:02:3d:d5:89:42:4d:60:
                    1f:4b:f5:e0:9a:88:9b:6d:27:a2:00:ae:e4:bd:c1:
                    19:6d:ad:7b:3c:60:03:69:d4:78:dc:f2:e6:25:46:
                    33:54:4b:6e:94:b9:33:8d:ec:1f:80:c9:a8:99:74:
                    88:f2:ea:c4:8f:7d:3b:7e:04:26:28:58:e7:3b:f9:
                    fe:ae:34:79:47:81:65:2d:8f:ec:4a:b0:78:bb:ca:
                    f9:d3:fa:d5:12:d2:7d:14:87:7f:bb:be:f5:ff:b1:
                    ea:30:72:aa:fc:0c:3d:1d:57:27:38:b5:18:af:3d:
                    5c:b9:25:ba:4d:9c:c8:4f:88:ac:85:a8:b9:07:1b:
                    02:63:2f:f3:2b:05:1b:b1:4d:f9:c0:31:c7:cf:4a:
                    3b:98:73:30:96:2b:d1:15:f1:3e:7b:0c:6c:30:26:
                    ed:8a:7e:1e:7d:4c:4a:25:a1:17:d6:4d:e1:4d:89:
                    8a:c6:f4:40:a5:94:e9:46:93:60:cc:17:63:fa:a6:
                    46:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2A:18:ED:11:54:E0:E1:26:04:E1:52:B1:52:D0:E8:5A:D9:46:46
            X509v3 Authority Key Identifier:
                keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32322d3232203d3e203634333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:8e:78:a9:5a:6c:65:a9:35:47:4d:7a:5f:69:22:a5:d2:92:
         6f:d5:db:14:14:65:f8:6b:6b:09:aa:64:fa:c2:9c:f2:25:d0:
         64:a9:7e:61:2c:00:ba:44:e1:d2:e7:c4:10:f3:d1:e9:7d:a1:
         76:29:56:40:42:46:a2:dc:65:0c:f9:d0:d8:0e:03:c5:95:95:
         cb:eb:59:81:c8:0e:d7:c9:9b:eb:7d:35:eb:af:57:1c:50:a6:
         b2:c8:2a:dd:4a:d3:c8:2c:8c:79:c7:0b:df:28:f2:fc:7f:c3:
         1d:05:69:17:99:2e:9a:5d:8b:f4:f5:32:3b:b1:3d:2a:f0:9c:
         65:eb:ac:8f:2f:64:90:0d:5a:66:2f:5f:39:c4:d8:46:f4:6e:
         dd:d6:a5:cc:c7:32:1f:75:47:0c:96:e8:a5:88:f0:2c:54:0d:
         31:00:30:dc:e5:6d:19:26:75:d9:37:aa:b5:fc:5a:60:82:45:
         c0:dd:7b:3b:1c:77:bc:5b:ee:fe:ce:df:c1:e7:f0:eb:ac:b8:
         bf:61:1d:07:26:81:60:af:df:1c:cc:81:31:31:a0:ba:9b:cd:
         e3:c8:09:f3:85:8a:18:82:1c:ee:79:15:ac:da:c6:0b:58:fc:
         55:2e:a6:8d:8e:05:ad:04:09:f7:1c:e0:e7:ba:26:78:eb:e1:
         08:c6:fd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:14:40 2025 by rpki-client