Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa
File:                     3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier:          TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=
Subject key identifier:   8B:FD:AD:12:9C:A9:00:25:25:03:D1:C7:F4:7C:14:DA:6A:FE:25:2E
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       6945017A7A599856229BBDA3A480900C801C3FB3
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa
Signing time:             Sun 18 May 2025 07:02:24 +0000
ROA not before:           Sun 18 May 2025 06:57:24 +0000
ROA not after:            Sun 17 May 2026 07:02:24 +0000
asID:                     55002
IP address blocks:        103.82.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:45:01:7a:7a:59:98:56:22:9b:bd:a3:a4:80:90:0c:80:1c:3f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: May 18 06:57:24 2025 GMT
            Not After : May 17 07:02:24 2026 GMT
        Subject: CN=8BFDAD129CA900252503D1C7F47C14DA6AFE252E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:e9:0a:da:34:b6:b7:ce:6d:05:b2:25:a1:
                    26:c8:82:b2:d4:fe:cf:9e:11:6f:2c:cc:5e:de:90:
                    c6:ce:33:ec:dd:5b:3a:00:63:31:01:e3:a3:85:ca:
                    ee:7e:9c:57:5b:3b:27:4c:4a:fb:d9:16:60:ae:e7:
                    2b:db:33:48:df:6a:88:52:e0:af:c0:50:a0:4a:97:
                    a6:07:c2:d3:0f:3d:13:4b:a3:9d:ba:1c:50:ba:8d:
                    47:18:83:e3:7c:d5:65:76:de:80:e6:37:80:4d:d7:
                    78:18:f3:c8:d2:12:72:3f:e4:f3:0d:0f:91:0a:d0:
                    24:7c:5b:ca:6e:4b:06:00:b9:2d:70:7c:ef:52:cd:
                    fa:7e:08:dd:1d:63:77:d1:84:90:13:87:21:97:da:
                    ac:71:45:11:ba:be:af:34:b6:69:61:c8:32:59:04:
                    5f:7c:8a:ba:31:9b:72:3e:fa:56:89:c2:1b:82:ae:
                    39:bd:6a:a0:f0:bf:b8:2a:cc:b7:c1:db:04:04:f8:
                    84:87:50:18:ea:e2:57:a0:94:84:98:39:4a:d8:7f:
                    d9:f0:cb:e3:20:66:d6:54:4b:f9:de:35:01:9a:99:
                    93:c2:3d:80:53:db:db:f8:d3:4c:ad:87:f9:9c:72:
                    6d:c1:2e:69:fa:ef:f2:94:7b:69:69:44:bc:b8:71:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FD:AD:12:9C:A9:00:25:25:03:D1:C7:F4:7C:14:DA:6A:FE:25:2E
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:6b:22:53:99:f8:39:6a:a8:41:65:9a:d6:8b:8a:1e:c7:
         6c:45:7f:8d:6e:ff:79:8f:59:cf:46:14:93:7d:81:d8:8e:e4:
         b9:12:65:f1:3b:79:35:89:3a:6b:27:14:aa:6c:db:43:f6:1d:
         b2:da:33:31:f1:03:5d:6e:df:4b:23:1e:d6:a7:67:5e:37:21:
         9c:e6:fa:89:19:26:5b:bc:b0:9e:01:6f:76:af:77:7f:67:57:
         81:79:59:70:96:85:76:99:46:d7:9a:d1:47:8c:2a:57:cd:a5:
         da:03:be:d3:a0:12:d2:e5:34:77:b6:1e:36:fb:3c:d0:8f:a7:
         d5:21:ad:2f:fb:8e:57:b0:c1:d8:81:1e:a7:0b:8c:da:d5:7b:
         8a:11:12:62:4d:7e:16:d0:49:49:2e:66:96:b4:b0:41:02:c0:
         6f:a2:fb:7e:57:38:3c:19:25:7b:63:e0:c1:6f:9b:4d:5f:49:
         7f:e0:5f:c1:39:8d:83:64:ec:12:b6:5c:d7:1b:42:b5:54:d6:
         a9:d8:f0:62:55:9a:f1:bf:59:b6:01:47:72:8d:6b:74:c8:f2:
         36:42:be:77:ac:16:88:53:ec:9b:ec:c7:6c:02:9d:38:1e:4c:
         35:32:f9:d3:d8:5c:09:0c:4a:19:9c:03:75:c7:a4:12:ff:8a:
         18:19:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:14 2025 by rpki-client