Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa
File:                     3230332e38302e31352e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier:          +tRBG8B/+C8vTbXJTWqe0liAiPTh4alenhwEBf60dxs=
Subject key identifier:   A6:5F:4D:D6:F9:2E:B6:F3:5D:65:25:7B:F0:B0:6D:A8:33:48:51:46
Certificate issuer:       /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial:       43956BFF6F74F6A459F2F04E7F31FBDF1CBF15A6
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa
Signing time:             Mon 02 Jun 2025 02:03:27 +0000
ROA not before:           Mon 02 Jun 2025 01:58:27 +0000
ROA not after:            Mon 01 Jun 2026 02:03:27 +0000
asID:                     24204
IP address blocks:        203.80.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
                          rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:95:6b:ff:6f:74:f6:a4:59:f2:f0:4e:7f:31:fb:df:1c:bf:15:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
        Validity
            Not Before: Jun  2 01:58:27 2025 GMT
            Not After : Jun  1 02:03:27 2026 GMT
        Subject: CN=A65F4DD6F92EB6F35D65257BF0B06DA833485146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:72:ec:42:67:2f:2d:09:b8:02:f2:e1:23:
                    0f:d6:7c:0a:a5:bc:d8:ff:ab:55:44:f4:53:55:00:
                    a0:8b:87:a0:12:7f:76:3f:71:31:5f:1a:b7:b7:f1:
                    ed:b7:b7:d6:66:b3:a2:12:19:c6:2b:55:a6:74:66:
                    a5:6c:85:e0:1e:96:07:51:c4:7d:15:e0:3b:cf:90:
                    b0:ed:c4:96:11:d2:85:43:3b:59:ec:a2:ac:26:3b:
                    26:8e:2e:55:71:e7:57:9f:5d:95:4e:43:8a:b9:9b:
                    1d:02:6e:38:8b:0e:f4:60:1b:e7:fa:0e:92:91:97:
                    89:67:cc:2f:37:56:23:c2:a0:ee:0c:c7:8e:ce:ff:
                    eb:30:9b:de:b2:16:42:12:74:84:98:bd:f9:5c:8f:
                    08:6b:bd:d1:19:6b:a9:77:5e:45:53:3f:d3:ec:bb:
                    73:70:8d:a4:9c:ac:d1:ab:f9:f3:9c:ac:a2:0f:f5:
                    c8:5d:23:b1:fd:df:2e:6e:59:9b:48:2a:a6:1f:d6:
                    54:a6:92:da:a0:27:56:1d:22:d6:39:ec:b7:12:d8:
                    b4:3a:5a:2e:8f:9c:31:47:3f:9e:4f:3a:84:11:80:
                    01:57:aa:42:eb:9b:a6:b6:23:84:93:9c:24:2a:9e:
                    84:3a:47:0e:f5:11:a1:93:c1:8b:b7:49:e8:f2:98:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5F:4D:D6:F9:2E:B6:F3:5D:65:25:7B:F0:B0:6D:A8:33:48:51:46
            X509v3 Authority Key Identifier:
                keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:dc:ba:b3:a6:7d:61:8c:97:18:ba:fa:d4:17:71:0d:43:
         23:80:a0:3f:26:5b:0f:15:bb:ed:ab:3d:70:40:4f:58:e4:f7:
         1c:3f:8d:14:1e:d1:c2:24:6f:03:1c:75:d9:bf:51:e9:07:64:
         bf:0a:ec:6e:f0:7b:06:0b:cd:8e:9c:f0:a6:ca:d3:e9:50:7c:
         7f:43:54:9f:9e:f8:5a:c6:6c:13:84:91:bf:28:d2:f4:b6:94:
         9b:c1:22:b1:8c:33:74:55:8b:e2:62:4a:1a:ce:5d:a5:fa:59:
         5d:c1:e1:13:3a:80:22:5c:da:92:a2:dc:c1:5f:3e:8a:9b:bd:
         d9:78:5b:ea:c7:ea:cf:72:82:f4:07:4d:ed:2b:e6:a5:e2:68:
         d4:08:f6:ca:74:9a:74:9f:4d:7b:16:66:df:4d:6c:01:39:27:
         bd:e1:98:ec:ac:e6:5e:5f:a0:1d:d0:e7:ba:33:a7:91:24:8d:
         69:b1:3d:e1:ed:a6:2e:ef:5e:ba:8f:5b:82:b1:8f:19:21:1c:
         ac:8b:71:8b:5e:18:ad:06:2b:16:7a:38:23:32:77:1f:2d:f2:
         ce:b5:3d:46:5b:97:a9:04:aa:6c:50:2f:05:9f:8c:d6:01:13:
         3b:c2:1d:f0:3a:3c:85:22:e6:9f:0c:d1:08:00:88:f1:b4:20:
         86:c5:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:48 2025 by rpki-client