Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3234203d3e203634333030.roa
File:                     3130332e38302e38302e302f32322d3234203d3e203634333030.roa (raw, json)
Hash identifier:          BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=
Subject key identifier:   29:92:FD:29:1C:62:0D:8E:8B:1A:AC:9B:E2:07:A7:2C:80:2A:A3:08
Certificate issuer:       /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Certificate serial:       361C5685616F8DF675AAF15E6C729FECBE274258
Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3234203d3e203634333030.roa
Signing time:             Mon 02 Jun 2025 01:02:39 +0000
ROA not before:           Mon 02 Jun 2025 00:57:39 +0000
ROA not after:            Mon 01 Jun 2026 01:02:39 +0000
asID:                     64300
IP address blocks:        103.80.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl
                          rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1c:56:85:61:6f:8d:f6:75:aa:f1:5e:6c:72:9f:ec:be:27:42:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
        Validity
            Not Before: Jun  2 00:57:39 2025 GMT
            Not After : Jun  1 01:02:39 2026 GMT
        Subject: CN=2992FD291C620D8E8B1AAC9BE207A72C802AA308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:3d:17:20:10:c6:d9:3f:0c:c4:4a:67:a3:
                    5f:f3:8b:01:b8:c3:fd:65:5d:f0:b8:3a:83:bd:ce:
                    81:94:e2:1f:56:13:d5:73:1c:fe:2d:f2:5e:e9:80:
                    e1:2a:31:bf:7b:c8:e8:78:61:53:95:ac:3b:c3:f0:
                    88:a2:0e:80:8a:08:5c:17:3f:17:30:58:02:bb:e3:
                    43:13:50:f1:c8:ae:00:d8:0d:6d:20:1b:e3:76:49:
                    c8:8c:d6:86:ea:21:d9:28:5d:21:6e:e4:69:96:7b:
                    dd:61:66:b5:69:08:f1:6f:b8:4b:1b:57:e8:98:e5:
                    61:23:89:dd:41:38:51:73:41:84:79:e2:50:7f:eb:
                    b2:d5:34:55:ae:21:0f:e1:07:6c:fa:dc:cf:09:dc:
                    5a:15:fb:65:ca:ef:84:b2:56:e5:36:72:73:1d:21:
                    fa:fc:59:97:4e:94:5d:05:fd:f3:66:83:d2:5e:bf:
                    c3:0d:08:5a:f9:a7:c2:74:60:b6:32:ab:65:ad:df:
                    88:a3:2b:3e:be:d3:2e:0b:42:b0:b4:80:4e:31:12:
                    b1:69:f7:d7:92:c5:d9:43:1a:09:52:1b:4a:2e:1d:
                    6b:a7:71:83:f2:89:67:45:03:df:00:ee:7c:df:7c:
                    c9:86:61:54:b5:97:ab:18:bd:e4:f9:43:74:1f:94:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:92:FD:29:1C:62:0D:8E:8B:1A:AC:9B:E2:07:A7:2C:80:2A:A3:08
            X509v3 Authority Key Identifier:
                keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3234203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:3b:ef:5a:9c:52:2a:ea:12:7c:5c:17:1e:e3:d1:c2:e1:9f:
         58:c3:2b:c4:aa:c5:0c:cd:8b:c9:de:42:b6:a0:26:86:1f:c8:
         7e:59:4b:d7:f6:ef:82:63:1e:a1:5c:9a:49:7a:dc:61:72:19:
         44:58:b0:23:1f:8a:bc:a9:f8:92:83:96:dd:60:a1:e3:0e:73:
         bc:3e:8b:cc:cd:d8:62:88:05:10:b6:1d:a7:de:4a:49:c9:92:
         0a:f3:b9:51:9c:bf:0a:35:81:06:96:7d:e2:42:0d:b9:3e:a5:
         ea:80:de:2d:3d:23:c8:e0:6b:be:f5:d5:b2:73:30:b5:89:d1:
         d9:29:35:ca:03:c2:c5:6e:eb:57:9f:5d:fd:11:42:79:d5:5d:
         79:6b:57:a8:47:ec:71:f7:14:30:2e:b2:73:08:95:6f:94:c5:
         bf:99:77:10:2a:6e:9f:ef:04:57:d4:b1:ea:4f:17:c9:ff:df:
         2b:5a:7d:ba:0d:9a:00:25:1f:9b:9b:df:03:0f:48:a6:77:51:
         a5:83:9f:6b:d4:b1:3d:53:69:eb:36:73:6e:e1:fd:8f:e4:49:
         f0:30:3d:0b:ee:32:9b:a2:7d:d0:7b:9b:99:a5:07:ce:07:eb:
         5e:d7:2f:70:d2:1b:ce:2a:9a:5c:1a:72:f7:89:41:23:aa:cc:
         c7:ff:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:12 2025 by rpki-client