Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa
File:                     3130332e38302e38302e302f32332d3233203d3e203634333030.roa (raw, json)
Hash identifier:          /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=
Subject key identifier:   57:9E:89:B1:53:DE:AA:82:9F:83:C5:72:D8:F6:31:38:91:76:E0:B7
Certificate issuer:       /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Certificate serial:       6DBA7C23B3E294984F56A09B614973840E76AE9F
Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa
Signing time:             Mon 21 Jul 2025 05:00:00 +0000
ROA not before:           Mon 21 Jul 2025 04:55:00 +0000
ROA not after:            Mon 20 Jul 2026 05:00:00 +0000
asID:                     64300
IP address blocks:        103.80.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl
                          rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ba:7c:23:b3:e2:94:98:4f:56:a0:9b:61:49:73:84:0e:76:ae:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
        Validity
            Not Before: Jul 21 04:55:00 2025 GMT
            Not After : Jul 20 05:00:00 2026 GMT
        Subject: CN=579E89B153DEAA829F83C572D8F631389176E0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:16:2a:9e:74:54:52:2e:64:d4:d3:2b:23:
                    07:6b:3a:2d:be:62:64:32:f3:de:f2:9f:7f:0c:5a:
                    08:d2:3a:bc:f6:b8:a2:bb:69:be:47:30:6f:3d:c4:
                    9c:6d:87:9e:3e:f3:2e:65:11:b0:a7:49:1e:db:17:
                    43:53:49:fc:26:be:79:9d:73:aa:52:25:b4:52:99:
                    b7:a3:e5:d8:ea:7c:02:6a:ef:c2:55:97:e0:b1:26:
                    75:c1:12:65:04:c5:eb:3e:32:56:b0:c6:d8:8d:5b:
                    ba:7e:21:a5:44:14:7b:fd:97:8f:fd:3f:d9:f4:42:
                    51:78:68:03:56:49:98:b0:10:9c:aa:3f:0d:d8:1e:
                    cb:53:50:84:7d:f3:78:9c:db:82:bc:94:4d:23:28:
                    b2:10:32:4e:ee:f6:74:59:dc:20:ad:97:e0:81:ff:
                    5e:f4:fe:14:07:37:11:86:de:c7:2c:ce:8f:1a:e1:
                    a1:dd:e9:24:47:29:1a:a7:6c:7c:74:30:2e:c5:2b:
                    fd:29:20:18:6a:59:55:b5:33:a0:de:92:b1:2e:62:
                    00:79:37:a1:6a:b5:b6:68:65:0e:fc:8d:3a:cc:5c:
                    2b:ac:71:5f:e7:6d:0b:7c:e7:e9:e8:3f:b0:8f:48:
                    58:57:d5:37:07:43:8c:8f:f6:3f:6d:0c:7b:84:46:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9E:89:B1:53:DE:AA:82:9F:83:C5:72:D8:F6:31:38:91:76:E0:B7
            X509v3 Authority Key Identifier:
                keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:e9:5c:aa:7c:52:5d:ee:6f:c8:3d:b9:7c:04:25:ef:2c:
         64:3f:c4:0e:99:bf:99:51:95:2f:af:90:63:97:2e:f3:c3:ea:
         71:c0:85:34:eb:dc:43:6b:a9:a1:a6:a9:41:d6:31:1a:20:af:
         72:08:02:0d:be:34:0b:7a:00:22:a5:ee:fa:fb:7c:8b:6b:a8:
         fd:39:0b:7d:5c:51:63:61:57:40:9a:bd:da:a4:73:bb:19:8a:
         9d:9f:c1:45:d9:3a:92:8b:52:69:9b:9b:88:a6:e2:0e:af:d1:
         73:7d:c7:d6:aa:98:bb:3e:f4:b9:df:f9:74:42:54:bc:26:a0:
         7b:d9:29:e8:48:d3:fd:4f:3f:6c:cb:72:52:8c:04:7d:02:ff:
         6f:62:d8:59:e9:fd:6b:9e:42:c9:22:4a:de:70:a5:f2:82:68:
         62:97:35:3c:22:57:78:36:fc:da:b2:91:eb:2c:14:0b:4e:96:
         94:45:d4:a2:07:13:4e:a8:1b:0d:c5:d1:b7:57:f1:2e:3f:67:
         12:8d:bd:66:13:cd:c6:98:b3:46:21:45:3d:23:35:9b:b3:80:
         4c:f8:60:e7:03:7a:3e:ee:32:b5:0c:23:f0:7c:d6:83:b3:7f:
         19:bf:42:3b:4f:b7:af:d2:4e:30:0f:8a:d1:7d:8f:94:6a:2b:
         59:fd:8e:9b
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbbp8I7PilJhPVqCbYUlzhA52rp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF
QzYzNzBCQzAeFw0yNTA3MjEwNDU1MDBaFw0yNjA3MjAwNTAwMDBaMDMxMTAvBgNV
BAMTKDU3OUU4OUIxNTNERUFBODI5RjgzQzU3MkQ4RjYzMTM4OTE3NkUwQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rxYqnnRUUi5k1NMrIwdrOi2+
YmQy897yn38MWgjSOrz2uKK7ab5HMG89xJxth54+8y5lEbCnSR7bF0NTSfwmvnmd
c6pSJbRSmbej5djqfAJq78JVl+CxJnXBEmUExes+MlawxtiNW7p+IaVEFHv9l4/9
P9n0QlF4aANWSZiwEJyqPw3YHstTUIR983ic24K8lE0jKLIQMk7u9nRZ3CCtl+CB
/170/hQHNxGG3scszo8a4aHd6SRHKRqnbHx0MC7FK/0pIBhqWVW1M6DekrEuYgB5
N6FqtbZoZQ78jTrMXCuscV/nbQt85+noP7CPSFhX1TcHQ4yP9j9tDHuERvT1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUV56JsVPeqoKfg8Vy2PYxOJF24LcwHwYDVR0j
BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC
OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz
NzBCQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU4NmQzNjM3LTkyYjQtNGFjNy1h
NzViLTk5Y2IwYjA1NjViMC8wLzMxMzAzMzJlMzgzMDJlMzgzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnUFAwDQYJKoZIhvcN
AQELBQADggEBABRc6VyqfFJd7m/IPbl8BCXvLGQ/xA6Zv5lRlS+vkGOXLvPD6nHA
hTTr3ENrqaGmqUHWMRogr3IIAg2+NAt6ACKl7vr7fItrqP05C31cUWNhV0Cavdqk
c7sZip2fwUXZOpKLUmmbm4im4g6v0XN9x9aqmLs+9Lnf+XRCVLwmoHvZKehI0/1P
P2zLclKMBH0C/29i2Fnp/WueQskiSt5wpfKCaGKXNTwiV3g2/NqykessFAtOlpRF
1KIHE06oGw3F0bdX8S4/ZxKNvWYTzcaYs0YhRT0jNZuzgEz4YOcDej7uMrUMI/B8
1oOzfxm/QjtPt6/STjAPitF9j5RqK1n9jps=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:16:25 2025 by rpki-client