Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
File:                     3230332e38302e392e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier:          D4SmgWinw2uDnNDHY1kT9jgep4MItUVn6E6KY3uTDIU=
Subject key identifier:   E3:EA:63:BE:D0:06:E6:56:30:17:72:E3:E3:76:E0:47:D5:1C:D3:56
Certificate issuer:       /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial:       7309B4FE2F81A28A3DC1803C66A232F8C3AA3543
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
Signing time:             Mon 02 Jun 2025 02:03:27 +0000
ROA not before:           Mon 02 Jun 2025 01:58:27 +0000
ROA not after:            Mon 01 Jun 2026 02:03:27 +0000
asID:                     24204
IP address blocks:        203.80.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
                          rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:09:b4:fe:2f:81:a2:8a:3d:c1:80:3c:66:a2:32:f8:c3:aa:35:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
        Validity
            Not Before: Jun  2 01:58:27 2025 GMT
            Not After : Jun  1 02:03:27 2026 GMT
        Subject: CN=E3EA63BED006E656301772E3E376E047D51CD356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:9e:b7:90:b9:5c:a2:fa:e0:5f:ff:ed:01:
                    02:10:e4:51:63:c2:80:2b:ea:f9:97:d5:a3:b5:5d:
                    53:33:94:ee:40:3d:aa:db:47:aa:c0:2c:ec:bd:0d:
                    42:47:c2:30:80:25:42:5a:ed:95:38:d6:ce:e2:19:
                    3b:fa:fc:f1:bc:2c:c6:bc:a5:f3:26:54:62:76:e5:
                    d7:50:d4:34:4c:a5:c1:d4:f2:27:97:78:10:89:f8:
                    72:4d:b7:8a:a6:d0:ea:0c:57:bc:13:1f:f4:71:4c:
                    70:0c:6f:e1:30:6a:51:5d:04:f0:8a:ff:13:37:d3:
                    34:57:38:a9:b8:52:c8:25:47:ce:00:a1:12:fd:37:
                    ce:65:0e:5b:52:ff:77:ed:a3:a4:eb:8b:cc:4f:73:
                    ee:37:84:f4:b9:34:76:05:37:86:75:0a:ee:17:99:
                    d8:19:62:3c:f5:16:75:e3:0b:c6:fe:8c:08:05:7e:
                    9a:9f:88:2d:f6:3a:0d:5b:f9:47:e2:74:f1:3b:7f:
                    9c:82:76:80:5f:17:9c:ae:fd:49:80:e5:22:da:24:
                    2a:51:d7:1a:b3:de:8b:51:28:2d:08:6a:2a:62:19:
                    9c:6a:e6:e4:16:85:98:ad:c2:b7:a6:e8:75:60:81:
                    69:6b:36:ff:f2:bc:b5:ce:85:d4:6b:7d:f3:5b:07:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:63:BE:D0:06:E6:56:30:17:72:E3:E3:76:E0:47:D5:1C:D3:56
            X509v3 Authority Key Identifier:
                keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:92:4e:de:74:d8:ab:a4:a0:e3:c4:82:50:b7:89:db:99:
         84:ac:03:a2:15:be:11:49:7b:be:69:73:8e:f8:a8:89:d7:a7:
         09:e0:f4:00:eb:12:03:93:e3:2c:84:63:96:61:df:82:b1:ba:
         f6:83:71:c4:ea:6b:dd:50:0c:7a:3f:16:7e:dd:05:00:6e:6f:
         59:61:97:19:45:4c:ee:a6:76:89:de:77:84:58:1e:26:b5:09:
         28:60:95:11:c0:f6:47:7d:14:42:8c:fa:3b:df:79:54:8f:a6:
         a8:77:0c:03:ec:e4:28:c7:fa:18:bc:0e:61:e3:34:70:e0:05:
         1c:7d:8b:06:16:32:6c:eb:59:5a:5d:f1:4e:58:1a:13:af:9b:
         59:a8:84:cf:9c:6f:a1:ea:20:68:3f:b4:9b:56:16:7b:fc:9f:
         2f:e5:49:de:ff:a1:ae:a8:08:f6:a2:c5:c2:c7:7f:f4:65:ef:
         03:00:b0:4c:6b:c4:b2:64:a4:55:3a:1d:42:fc:cd:11:75:09:
         ca:b5:e9:d3:56:1b:3d:20:ef:7d:c7:e7:48:18:df:32:86:e4:
         5e:ba:7d:a9:7f:64:ef:67:d0:d9:7c:0f:b0:0e:b4:8f:ed:98:
         92:2c:a4:c4:dc:6d:25:ea:65:09:e6:64:17:23:c8:c1:72:cc:
         f9:6b:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:11 2025 by rpki-client