Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa
File:                     3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (raw, json)
Hash identifier:          OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=
Subject key identifier:   6A:F5:8D:38:F4:21:E7:EB:07:28:3F:16:C3:41:A3:5A:5F:15:5C:9A
Certificate issuer:       /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Certificate serial:       501B83FD5CC5AD160DEBB65A289E3AF7C4347E9D
Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa
Signing time:             Sat 22 Feb 2025 08:44:01 +0000
ROA not before:           Sat 22 Feb 2025 08:39:01 +0000
ROA not after:            Sat 21 Feb 2026 08:44:01 +0000
asID:                     136131
IP address blocks:        103.80.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl
                          rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1b:83:fd:5c:c5:ad:16:0d:eb:b6:5a:28:9e:3a:f7:c4:34:7e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
        Validity
            Not Before: Feb 22 08:39:01 2025 GMT
            Not After : Feb 21 08:44:01 2026 GMT
        Subject: CN=6AF58D38F421E7EB07283F16C341A35A5F155C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:e5:c6:2a:93:cb:51:58:6d:89:74:35:1f:
                    a0:23:9b:44:44:39:25:fc:b2:d0:82:12:67:b2:c3:
                    c1:04:23:08:9f:2c:45:bc:f3:0f:8b:e4:16:20:77:
                    69:8f:df:35:b2:1b:fd:68:88:37:54:38:3a:65:34:
                    e4:62:8e:07:ae:0a:3a:1e:5c:99:8e:a1:9e:7d:7b:
                    e6:1f:2a:a5:d7:3a:7c:04:10:14:30:05:e4:79:da:
                    45:00:1f:49:e4:ce:23:09:e4:4a:66:8f:7d:de:32:
                    b5:5d:cc:97:f2:7e:a2:97:12:43:f4:47:d7:a0:54:
                    af:e6:93:f1:4c:86:14:35:8e:14:a9:15:b9:fa:bf:
                    55:8f:bf:fc:15:44:07:6c:1b:cc:14:e7:e4:4e:21:
                    ef:33:36:24:2b:34:e0:62:c1:b7:51:c0:75:1a:5d:
                    cf:de:59:8b:82:11:a6:be:0a:c2:6f:92:35:de:d8:
                    22:f5:37:c5:ce:c5:2d:0f:3f:21:64:d8:98:0e:ad:
                    e8:95:43:00:2c:c9:66:05:6d:0a:bc:90:cb:21:7d:
                    e7:a9:a1:fb:de:54:6c:97:67:93:df:37:25:29:92:
                    b2:fe:5a:3f:c8:bb:a6:cc:55:03:e7:01:1f:a4:ec:
                    83:5f:d6:0a:64:c2:73:f5:91:02:f2:8a:9b:87:02:
                    42:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F5:8D:38:F4:21:E7:EB:07:28:3F:16:C3:41:A3:5A:5F:15:5C:9A
            X509v3 Authority Key Identifier:
                keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:2b:2e:7e:cd:64:94:f1:c7:15:41:ea:26:e0:fa:4f:96:
         ea:24:d7:6e:05:29:af:4a:c0:8d:ae:e9:9a:b7:75:46:60:02:
         8c:f4:de:fe:d3:89:5f:5f:dd:e6:d7:90:52:49:15:c9:a8:62:
         61:22:ac:f4:95:2c:92:68:a6:cb:ec:f0:90:fd:3a:5a:71:ab:
         4a:d5:76:b9:f0:d2:12:26:be:18:6d:2c:01:de:54:c6:07:dc:
         6f:9c:9d:13:9b:eb:ab:97:24:7a:44:8e:de:d7:83:4c:d8:fb:
         ab:39:4e:45:4e:65:f2:83:0b:8a:db:66:89:9d:8c:58:cf:57:
         79:76:de:a3:97:ff:22:d5:fa:c9:7b:e2:1a:48:e2:9a:45:9a:
         d9:1c:05:e3:aa:88:06:e1:bc:34:07:7e:b6:30:bb:e2:80:7e:
         a6:49:01:d2:b1:01:c4:0a:d1:f0:4a:2f:df:a1:e3:ee:f7:84:
         91:35:b9:11:67:43:2a:e4:50:fc:0d:e9:38:98:24:f2:a9:27:
         00:42:95:76:b9:d1:e3:48:db:6d:66:c8:4c:64:65:81:36:e3:
         4c:d3:4c:62:8c:fc:cb:12:06:e6:71:e3:8c:dd:1f:8a:b4:08:
         e4:ff:23:a1:1f:8e:b0:05:1b:60:6f:60:2b:04:02:a6:2a:3b:
         03:8d:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:52 2025 by rpki-client