Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa
File:                     3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (raw, json)
Hash identifier:          s3bVTDEV08gnmOxg2zw3dDA0YDxRgug+TOFOTtwInUc=
Subject key identifier:   28:45:49:74:03:1B:FE:BF:E8:D5:11:2D:24:E2:2F:30:9C:C5:B2:4C
Certificate issuer:       /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial:       4D75D96290836491C70517B14FF4E065A1912ED2
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa
Signing time:             Sat 06 Sep 2025 04:02:28 +0000
ROA not before:           Sat 06 Sep 2025 03:57:28 +0000
ROA not after:            Sat 05 Sep 2026 04:02:28 +0000
asID:                     64302
IP address blocks:        103.78.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
                          rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 07:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:75:d9:62:90:83:64:91:c7:05:17:b1:4f:f4:e0:65:a1:91:2e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
        Validity
            Not Before: Sep  6 03:57:28 2025 GMT
            Not After : Sep  5 04:02:28 2026 GMT
        Subject: CN=28454974031BFEBFE8D5112D24E22F309CC5B24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:b2:68:28:9b:49:b2:75:02:94:55:73:26:
                    73:5a:a0:a6:9a:76:9b:03:77:9f:62:df:75:e6:9a:
                    7a:e0:35:76:e5:c1:c4:59:bb:6a:1d:00:69:a8:87:
                    87:7c:73:0c:fb:b0:1b:d3:ec:5a:90:80:57:33:5c:
                    d7:14:a5:3f:5e:9d:37:2f:c5:bb:4c:66:9f:c4:d9:
                    de:f9:9a:44:11:9c:1d:c2:c7:1a:cd:76:10:4d:2f:
                    ef:8e:15:8b:07:5a:51:be:49:9f:ca:d3:10:13:75:
                    98:32:69:d1:dd:8c:3f:e4:bd:1b:81:c5:8d:6a:76:
                    b3:1f:da:09:90:18:38:33:59:4e:02:1f:75:a8:8a:
                    b0:dd:5c:26:94:5a:fa:fc:85:81:8f:bc:dd:f5:eb:
                    95:c8:35:3e:65:f7:4f:a3:69:9d:7e:2b:a4:d9:33:
                    14:5c:ba:5a:d1:51:09:15:16:5c:1b:99:48:c2:f4:
                    f6:17:5b:f9:11:ab:a5:cf:b7:7c:11:dd:d2:12:63:
                    4d:be:94:6b:23:81:90:d9:6c:c5:64:fd:f7:b1:e0:
                    12:bc:c3:c3:16:b2:28:c8:d4:08:e2:bb:c9:8d:b2:
                    c8:0c:3d:b6:e0:fd:f4:25:6d:13:cc:2f:0f:56:72:
                    7f:87:19:c8:e5:a9:c6:94:0d:b2:c3:6c:f0:9f:1a:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:45:49:74:03:1B:FE:BF:E8:D5:11:2D:24:E2:2F:30:9C:C5:B2:4C
            X509v3 Authority Key Identifier:
                keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:20:a6:d3:65:88:1d:92:89:15:f2:d2:cc:eb:41:ec:ae:17:
         49:e4:22:8c:d0:b8:cd:a5:6e:db:41:24:ad:4d:5a:bb:8e:a8:
         02:a2:d3:3a:94:65:fc:1c:2e:a1:24:a4:37:b3:ce:fb:e9:cd:
         00:07:23:b2:29:38:29:38:9c:1e:a8:40:36:71:e7:23:b4:71:
         c3:75:73:c3:b8:e7:ae:6f:2b:88:ae:7a:ef:7d:b3:83:c4:29:
         11:a6:14:be:1d:0c:35:90:3a:53:50:f1:88:fd:eb:21:4f:f2:
         71:77:f7:88:d7:08:de:2e:02:89:4f:22:5a:79:69:d3:77:97:
         32:48:3d:04:c0:13:fd:90:28:a5:58:f6:93:ec:ac:1c:b3:10:
         60:7b:90:12:3f:7f:7d:19:c8:bb:6f:64:20:2c:4c:33:75:fe:
         bb:f3:1b:43:34:65:4b:e2:26:39:e1:ec:a6:43:44:47:fb:64:
         c8:ed:cb:76:08:ab:60:f9:61:82:ed:42:f7:72:0d:42:b2:f6:
         d0:91:1b:a0:c5:44:0e:68:09:cf:60:b4:f3:4c:b5:3e:00:cf:
         e2:91:ee:90:ea:c6:5c:21:42:e2:a8:39:27:3f:cf:75:eb:18:
         af:c8:c5:5f:21:46:02:59:d9:cf:bc:50:98:18:92:f6:a4:47:
         f2:2d:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:16:53 2025 by rpki-client