Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
File:                     3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (raw, json)
Hash identifier:          +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=
Subject key identifier:   7C:12:A0:A4:9B:B0:34:D3:20:2F:B6:D8:7B:38:9A:9C:90:55:97:11
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       648FFBB5F0493CE785B3F64D7B161ECFA9EE5E47
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
Signing time:             Sat 17 May 2025 15:00:01 +0000
ROA not before:           Sat 17 May 2025 14:55:01 +0000
ROA not after:            Sat 16 May 2026 15:00:01 +0000
asID:                     55002
IP address blocks:        103.82.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8f:fb:b5:f0:49:3c:e7:85:b3:f6:4d:7b:16:1e:cf:a9:ee:5e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: May 17 14:55:01 2025 GMT
            Not After : May 16 15:00:01 2026 GMT
        Subject: CN=7C12A0A49BB034D3202FB6D87B389A9C90559711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:c3:a6:35:b6:96:4e:82:3b:a6:23:6b:98:
                    01:bd:21:ae:c9:f6:40:e1:e1:84:b4:e0:31:02:7b:
                    62:7c:f6:18:1b:86:4a:39:53:4a:49:1e:0c:ea:1f:
                    4a:38:dd:cd:67:da:cc:89:a4:74:c6:35:1c:6d:79:
                    cf:8f:c5:95:8a:f4:26:25:0f:6f:32:b8:be:50:28:
                    98:52:4a:6b:b5:3e:c3:45:ba:89:4e:54:aa:c1:ac:
                    1b:ef:cc:de:8b:58:c9:b4:d2:be:82:80:42:72:61:
                    97:d0:ad:f6:b7:5b:7a:0c:24:d1:19:4b:39:1c:e7:
                    b1:71:79:4d:0f:d5:42:80:25:da:90:76:18:20:5f:
                    6e:ab:14:00:ac:2f:7d:7b:ec:18:af:56:92:b4:ae:
                    03:18:74:93:71:3b:b6:c5:01:49:53:37:ed:a6:cb:
                    88:64:26:d5:68:81:b1:00:e1:36:f5:cd:15:7e:cc:
                    0a:e1:66:6e:2a:5e:95:10:a2:30:61:b2:89:ae:22:
                    ec:37:3b:c6:f6:79:66:9b:23:6b:e5:68:af:4a:1c:
                    e3:fa:aa:80:0a:7e:21:4c:96:54:ab:3a:35:69:bd:
                    8c:82:48:76:77:a9:8d:8a:6f:95:6f:96:2a:39:47:
                    38:39:70:eb:b6:9f:c5:5f:55:e0:ce:7a:41:88:ae:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:12:A0:A4:9B:B0:34:D3:20:2F:B6:D8:7B:38:9A:9C:90:55:97:11
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:98:a9:ce:f9:cf:f8:7e:e1:46:5c:c8:d5:00:a2:4d:f1:0c:
         8a:fa:ae:0d:8b:7f:d6:61:1f:00:de:64:08:f7:bb:00:2d:21:
         87:e4:f8:71:25:5c:f0:20:72:d5:0f:a7:13:1a:f6:98:cd:bc:
         9e:b5:c1:81:da:b7:ba:32:62:4f:59:5a:08:5b:da:ce:ba:f7:
         fc:d2:ce:5d:98:33:ce:d6:77:ba:58:fa:3b:39:b8:5f:2c:c7:
         cc:e1:00:2f:9f:95:f0:41:22:a6:38:94:e5:bb:96:39:e2:2b:
         50:f5:d1:5f:dc:b7:67:fa:e2:8d:be:05:11:be:1c:c0:91:60:
         ae:6d:fa:0a:5d:7d:29:65:c0:2f:a2:3f:f8:48:f0:a2:b9:dd:
         f6:ee:d5:af:7c:c1:56:b8:7e:8c:5b:98:12:c5:4a:60:e2:81:
         7a:f5:97:86:46:22:41:c1:50:8b:dc:c6:56:a5:50:b2:54:3a:
         5c:98:1a:cc:63:77:fd:07:f1:24:07:39:1c:8c:10:30:0e:e1:
         8c:f1:18:0f:e3:5b:4c:97:c2:d3:b9:5f:86:aa:95:a2:3a:ae:
         a6:00:62:84:9f:d7:a3:f9:97:9a:8f:be:4a:63:8c:72:dd:cc:
         e9:60:7c:a3:33:2c:01:c4:06:33:aa:1e:cd:bc:dd:b0:d2:c9:
         05:41:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:31:35 2025 by rpki-client