Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa
File:                     3230332e38302e31322e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier:          iP5DwSyfUL5exxyNjMDQ+1fcb6ngK3/LzByJJLI9xyw=
Subject key identifier:   BD:A1:EC:C2:1D:86:B6:72:C2:DD:E0:F2:A0:5C:80:57:24:92:54:ED
Certificate issuer:       /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial:       0A377F8A6739987FDBD0CC9D0EED373F9985E11D
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa
Signing time:             Mon 02 Jun 2025 02:03:26 +0000
ROA not before:           Mon 02 Jun 2025 01:58:26 +0000
ROA not after:            Mon 01 Jun 2026 02:03:26 +0000
asID:                     24204
IP address blocks:        203.80.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
                          rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:7f:8a:67:39:98:7f:db:d0:cc:9d:0e:ed:37:3f:99:85:e1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
        Validity
            Not Before: Jun  2 01:58:26 2025 GMT
            Not After : Jun  1 02:03:26 2026 GMT
        Subject: CN=BDA1ECC21D86B672C2DDE0F2A05C8057249254ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:f3:c0:6b:2f:ae:ea:bc:20:d7:6e:7c:33:
                    77:ec:b8:6f:62:1f:ec:46:18:dd:ca:18:f5:1f:f5:
                    e5:df:11:c6:2e:61:45:1f:9b:97:0d:19:ff:63:ad:
                    44:ab:1e:43:0d:59:3a:2a:cc:f6:43:aa:95:f2:b7:
                    49:01:a4:f1:17:34:d1:c7:ab:a0:61:1b:ec:d5:30:
                    68:e0:06:1f:e9:af:56:03:42:68:74:7d:af:96:17:
                    54:20:8f:94:7d:54:f3:cc:65:eb:ea:e3:46:47:13:
                    11:40:c6:ab:ce:17:92:8d:c5:05:64:ee:7d:1c:0b:
                    a7:53:ca:d7:30:a6:25:62:94:6a:55:ae:f2:67:5c:
                    d9:8b:3d:2e:33:7a:14:be:cf:19:14:80:44:6d:92:
                    88:6e:5a:7f:36:9d:ac:13:ae:96:1a:8f:ea:c0:f4:
                    0a:9b:5d:cf:55:31:5a:0f:b6:73:0d:b5:7e:38:1c:
                    44:21:db:e3:76:9b:ff:c3:e5:bb:8d:38:2e:e7:69:
                    86:03:04:d4:15:81:06:1a:e9:39:27:6e:41:7d:b6:
                    3e:3c:30:80:8d:58:a6:05:e0:0a:11:55:cc:1a:a6:
                    c5:61:17:f3:dc:d0:c3:bc:4b:6a:20:90:9b:9e:b7:
                    f4:35:f5:93:2f:0f:bd:04:ce:29:22:ec:de:a2:35:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A1:EC:C2:1D:86:B6:72:C2:DD:E0:F2:A0:5C:80:57:24:92:54:ED
            X509v3 Authority Key Identifier:
                keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:bc:78:f7:ce:1a:85:e4:54:c3:35:4e:ad:01:cc:45:97:
         9b:ae:62:e5:92:26:08:ff:c5:60:b0:bd:54:68:d8:66:34:54:
         6b:62:1d:64:2f:f5:62:e1:4f:2c:2b:52:9a:6e:1b:04:bf:21:
         ad:41:ad:8b:09:30:d0:56:cb:65:96:e6:4b:75:8d:65:83:55:
         65:85:ab:bf:66:c4:55:33:a1:e1:f7:6d:a3:25:9d:eb:90:a6:
         7c:f9:58:ab:4a:cd:60:3d:60:c2:34:e4:30:e0:2f:02:b8:17:
         97:bb:fb:47:33:56:4a:f9:0a:f3:63:bd:53:23:72:42:64:68:
         c8:d6:ad:f5:4c:16:98:7e:df:8e:f1:eb:a1:f5:03:dc:58:41:
         36:69:0b:ac:4d:fc:cf:ab:14:80:bc:11:c4:e6:73:25:39:fe:
         dc:a8:c0:3f:56:19:72:a2:2e:0f:10:92:73:14:fc:b4:1a:f8:
         64:de:76:52:ca:35:83:f5:67:eb:21:e7:c1:5f:a3:a2:40:43:
         1d:0a:e4:25:0b:f0:2f:0a:a5:40:61:6f:80:c9:27:3d:ae:be:
         9b:c5:9f:df:10:9f:ce:56:28:28:77:b7:4f:81:90:a3:4d:40:
         ca:b0:40:ff:71:61:cf:e6:55:a7:bc:48:8f:35:87:75:01:03:
         69:19:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:04 2025 by rpki-client