Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa
File:                     3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (raw, json)
Hash identifier:          aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=
Subject key identifier:   FA:AB:67:74:C7:27:05:C1:A8:46:59:74:54:12:F5:AB:CE:4E:A1:CE
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       16FEC3F36E8A32C1E67561E315523C0951DBF6E8
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa
Signing time:             Fri 16 May 2025 12:02:24 +0000
ROA not before:           Fri 16 May 2025 11:57:24 +0000
ROA not after:            Fri 15 May 2026 12:02:24 +0000
asID:                     136061
IP address blocks:        103.82.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fe:c3:f3:6e:8a:32:c1:e6:75:61:e3:15:52:3c:09:51:db:f6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: May 16 11:57:24 2025 GMT
            Not After : May 15 12:02:24 2026 GMT
        Subject: CN=FAAB6774C72705C1A84659745412F5ABCE4EA1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:54:30:33:32:12:47:e0:a0:49:ac:1d:11:
                    8e:a0:69:19:17:10:2b:e4:69:dc:c6:bc:18:7b:a8:
                    e9:1f:79:9f:1b:c9:0c:eb:51:23:65:a1:58:c5:4d:
                    6c:bc:16:81:06:41:c1:22:d8:e9:d8:0e:c2:35:09:
                    65:0c:c9:f9:3b:b5:f8:b9:58:ad:15:35:0b:eb:16:
                    35:ef:c0:2a:89:15:e8:cd:85:1d:14:1d:f0:62:a1:
                    4e:97:33:92:0f:9f:f4:15:11:9a:68:cc:20:96:d6:
                    29:a1:ed:71:bd:8d:52:3a:9e:93:6c:47:1e:14:5e:
                    5c:83:bb:7e:d3:99:b5:36:2e:07:b7:d4:ea:50:e7:
                    35:f8:36:d5:19:10:f2:01:37:3d:99:b9:73:d0:ef:
                    07:72:64:69:7b:2c:0b:88:96:88:86:46:da:70:09:
                    0d:5b:6a:80:f5:5c:7e:75:39:d0:ff:a9:76:21:03:
                    d8:d0:41:64:1e:dd:81:2a:f2:03:9f:bd:5e:f9:5e:
                    b7:e7:07:c0:5f:5e:78:e3:6c:aa:c6:33:94:54:14:
                    ca:82:ee:03:df:ce:18:63:d3:5e:a3:cf:95:02:87:
                    53:9d:9c:d9:b0:db:b7:fb:5b:cf:d9:cf:72:ab:4b:
                    3d:ff:16:ac:14:68:c9:44:3e:2a:0b:14:98:68:8e:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AB:67:74:C7:27:05:C1:A8:46:59:74:54:12:F5:AB:CE:4E:A1:CE
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:3e:b1:14:8f:46:4d:72:4d:c1:f9:a1:1f:3e:2c:87:b9:f9:
         c2:92:e9:49:d0:4f:1d:95:05:46:6d:95:92:63:b2:e0:8a:29:
         5e:e2:cd:38:7f:38:07:06:53:3c:de:f6:7b:7c:63:cf:7d:e5:
         59:94:c1:74:66:7a:cc:8d:3a:d3:a0:cd:81:da:d8:23:4e:bb:
         ba:29:30:02:0c:db:d0:2d:a5:c8:4d:9c:2d:5a:b0:0a:54:f3:
         da:20:21:5a:a4:18:1d:c4:f3:e1:c3:56:4f:34:2c:e7:92:7d:
         b6:d2:3e:71:0e:cf:b4:a4:37:ed:45:cb:31:ac:bd:71:94:5f:
         ad:14:43:13:87:37:d7:9a:8c:49:6b:a6:3c:44:b7:cd:b4:a0:
         2f:4f:f1:8b:84:32:29:15:b4:1f:f7:57:33:d0:64:b8:e4:db:
         5f:a5:bc:a5:91:b1:0f:b7:76:5e:35:a8:39:22:c1:18:7c:e7:
         bb:c3:41:27:41:f8:40:70:95:4c:da:5c:e3:91:d4:d2:7e:e9:
         f4:8c:de:a5:9c:61:03:70:2c:f1:c1:ec:b6:ff:d7:fb:e3:16:
         1e:05:ba:88:5f:a7:46:2c:84:ae:c2:0b:e2:5a:a9:18:47:0a:
         63:01:9d:80:2d:76:66:b1:45:f5:56:75:44:0e:9d:8c:31:9b:
         38:54:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:35 2025 by rpki-client