Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa
File:                     3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (raw, json)
Hash identifier:          17orHFCQWF/5DGMqqWKbU6pKgsvlNi/agPyICUt65aw=
Subject key identifier:   C9:3B:65:6B:76:C0:2D:BE:DB:04:2A:58:04:2D:9F:FB:82:AE:39:1A
Certificate issuer:       /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial:       47531777CFA0139001B984C3EC394C47936E548E
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa
Signing time:             Sat 06 Sep 2025 04:02:28 +0000
ROA not before:           Sat 06 Sep 2025 03:57:28 +0000
ROA not after:            Sat 05 Sep 2026 04:02:28 +0000
asID:                     64302
IP address blocks:        103.78.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
                          rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 07:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:53:17:77:cf:a0:13:90:01:b9:84:c3:ec:39:4c:47:93:6e:54:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
        Validity
            Not Before: Sep  6 03:57:28 2025 GMT
            Not After : Sep  5 04:02:28 2026 GMT
        Subject: CN=C93B656B76C02DBEDB042A58042D9FFB82AE391A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b3:08:b6:bd:bb:e1:88:54:cc:eb:de:f4:0e:
                    7d:3d:bd:e6:d3:5e:63:f7:47:0f:de:6d:95:c7:e2:
                    82:97:cd:fb:3f:9a:50:b1:f1:26:4e:74:27:1b:3a:
                    3f:03:48:a1:bc:a5:e0:05:23:d7:b6:08:94:d2:e7:
                    b2:6c:66:c1:22:96:d9:de:c0:1b:c8:9c:9a:4f:8a:
                    e0:90:87:b4:fa:3b:51:11:2d:3a:87:a5:be:c4:09:
                    f0:7a:53:f4:bd:38:a9:09:be:48:13:78:09:ce:f9:
                    69:a2:d8:47:73:3a:0d:24:b1:77:d4:0d:d9:e6:36:
                    49:b4:4a:f1:46:8b:0a:8c:83:c3:05:78:20:d3:af:
                    f2:2c:a1:63:32:04:9b:e4:53:80:76:31:79:0e:c8:
                    b4:cb:28:0c:77:d8:f8:7b:67:84:79:d6:37:ba:47:
                    34:bd:58:33:2c:f8:e5:a0:05:11:de:40:18:c5:8b:
                    03:24:1a:bb:f1:73:fd:60:e9:35:83:10:6e:ac:59:
                    68:8e:94:d6:39:78:9c:e6:5e:13:71:ee:2c:31:b7:
                    b1:80:97:d7:ee:19:6f:b1:e1:5d:46:a2:bc:49:c8:
                    f2:34:8f:96:fc:37:13:0e:f7:2f:22:40:2f:a8:44:
                    2e:a7:07:2e:00:bb:15:e8:8a:5e:e4:13:7f:19:3e:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3B:65:6B:76:C0:2D:BE:DB:04:2A:58:04:2D:9F:FB:82:AE:39:1A
            X509v3 Authority Key Identifier:
                keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:28:30:ae:30:3b:4e:a8:b4:70:06:6b:27:da:a0:73:5a:18:
         c7:cd:e5:33:1c:47:41:a6:2e:02:03:66:ad:7c:f2:b2:3e:96:
         c1:a2:4d:e9:f4:39:b4:fb:d5:a2:a7:6c:23:60:6b:a1:2b:b6:
         2b:40:6e:f3:11:1f:cb:2d:0a:5d:b4:19:1e:d1:16:b4:18:5e:
         cb:ee:04:df:29:a0:9e:00:cc:1f:1e:7d:12:42:ea:ac:32:ea:
         a8:9f:75:f7:08:68:7e:d3:7c:a2:6e:0a:4e:ef:ca:ed:a2:d8:
         92:74:08:84:4a:da:94:c8:91:e9:83:21:ab:ad:40:1e:10:42:
         46:95:b6:58:5f:43:7a:1c:54:c8:25:e9:17:9e:2b:2b:5c:f9:
         21:20:f1:ca:fb:38:47:e8:7d:b1:3d:f6:00:1f:49:3e:d8:38:
         bf:07:53:fe:5a:ad:05:b3:d1:1b:33:a5:ed:87:66:c1:50:15:
         70:b4:56:cb:24:01:3a:b2:b1:c2:ed:84:45:e1:b8:2f:d3:3b:
         5d:47:a2:63:7e:9a:ca:47:c2:8a:92:06:d7:df:ba:98:f2:e2:
         4b:7f:0b:1b:de:e5:d2:91:01:99:ce:29:9b:ce:62:83:33:fe:
         14:90:c7:da:87:d6:15:56:ad:c2:18:2c:a0:22:07:4d:e6:06:
         7e:73:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:17:01 2025 by rpki-client