Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
File:                     3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (raw, json)
Hash identifier:          zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=
Subject key identifier:   87:24:E8:71:EA:C5:95:14:2A:E4:01:AD:32:8E:55:95:5F:68:90:AD
Certificate issuer:       /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Certificate serial:       2E7DCDC9A1E09D5CEDE9A2FFF8BFF07810B3E8A5
Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
Signing time:             Thu 26 Dec 2024 05:01:50 +0000
ROA not before:           Thu 26 Dec 2024 04:56:50 +0000
ROA not after:            Thu 25 Dec 2025 05:01:50 +0000
asID:                     151582
IP address blocks:        103.80.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl
                          rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7d:cd:c9:a1:e0:9d:5c:ed:e9:a2:ff:f8:bf:f0:78:10:b3:e8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
        Validity
            Not Before: Dec 26 04:56:50 2024 GMT
            Not After : Dec 25 05:01:50 2025 GMT
        Subject: CN=8724E871EAC595142AE401AD328E55955F6890AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:00:16:79:f8:a5:34:0d:b0:63:c6:0f:c9:
                    43:4b:a8:89:3f:3d:d4:2f:f4:49:d1:cf:e2:84:cd:
                    6c:49:fb:9d:21:88:ea:c3:47:63:a5:a9:a0:1a:ff:
                    d7:e1:f5:19:73:ec:f3:48:e1:b5:58:a3:ab:7d:4c:
                    ac:a9:f6:48:ce:d5:e0:d4:a8:dd:eb:68:1b:40:23:
                    d7:19:5c:6b:61:89:d5:e1:6e:38:c8:09:58:d8:3a:
                    b8:2c:32:24:05:74:75:6d:2b:25:d3:68:b4:a9:9e:
                    d3:c9:76:26:6a:e7:83:10:42:b9:74:7a:0a:3b:07:
                    56:ef:6a:7a:88:c4:46:cb:01:4c:c1:0a:07:5f:01:
                    87:52:6a:a4:d1:f8:87:82:0f:32:48:f5:aa:89:32:
                    04:59:0f:1d:21:2a:3d:59:94:e1:51:5d:8a:e7:91:
                    31:fd:24:03:3b:4c:e9:45:42:0d:b0:d5:49:b8:06:
                    63:37:aa:cf:62:c2:c9:7e:b5:2b:07:7a:6a:59:81:
                    2e:08:98:29:bc:c4:ab:c3:a3:06:de:7a:18:96:dc:
                    be:c6:9c:1a:0b:54:89:06:da:5b:02:8e:ef:e9:bd:
                    e2:b4:c7:1e:65:10:90:0f:6d:4d:e0:5f:36:2c:1d:
                    7a:e7:69:e1:23:fc:59:f5:3c:ff:3e:9a:6a:e4:8d:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:24:E8:71:EA:C5:95:14:2A:E4:01:AD:32:8E:55:95:5F:68:90:AD
            X509v3 Authority Key Identifier:
                keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:92:c3:e4:3b:5b:38:7b:4e:64:5a:da:65:c5:ed:10:46:87:
         6c:b2:0a:18:04:47:01:65:62:0c:23:20:3d:09:ff:40:4a:58:
         69:84:a6:25:56:ce:9e:af:00:35:db:d4:ee:93:06:ea:b5:2d:
         19:4c:b1:0c:7c:8b:24:c9:5c:95:af:50:26:7f:e0:fe:67:56:
         e4:41:16:64:23:ee:f0:81:10:22:ae:72:01:d5:86:38:72:56:
         8d:3a:8f:56:09:27:9f:f9:e4:2a:96:5d:c3:83:f3:5a:0e:7d:
         ba:9a:fd:6a:69:b8:ce:91:64:31:1b:cd:94:f6:e0:9b:39:b7:
         a2:4c:5b:fd:cc:81:54:d4:7e:58:9f:22:15:1a:a6:9d:7c:3b:
         21:6c:0d:87:35:46:09:f1:d1:5c:67:c3:26:e2:ab:7a:27:87:
         64:93:b2:4c:fa:1f:a6:e7:9b:2a:0f:c4:3d:2d:17:b6:08:34:
         da:ce:e9:4e:7c:d3:79:c8:35:5d:89:06:a4:82:6b:8d:ac:56:
         0e:0f:a9:40:1b:a4:f0:56:56:e9:18:fb:32:36:d1:3e:12:e2:
         5c:d4:21:5f:5b:dd:5f:d4:6a:08:ec:8c:3c:33:79:f8:9f:ec:
         10:3e:a8:85:61:c1:01:7d:36:2e:23:1a:e4:09:9d:4d:c8:99:
         b5:37:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:07 2025 by rpki-client