Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa
File:                     3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier:          Gb4dk6cIFWpDm7yOXj9wMvU+xey+IEOR2MYqhzLU7AE=
Subject key identifier:   C8:7B:05:CD:BC:DB:C4:BC:D3:65:E9:3A:37:11:05:7B:27:85:D5:A3
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       3901FAAC1BC3666128F8CCA09112DC2394458D53
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa
Signing time:             Sun 16 Jun 2024 07:00:01 +0000
ROA not before:           Sun 16 Jun 2024 06:55:01 +0000
ROA not after:            Sun 15 Jun 2025 07:00:01 +0000
asID:                     55002
IP address blocks:        103.82.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 04:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:01:fa:ac:1b:c3:66:61:28:f8:cc:a0:91:12:dc:23:94:45:8d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Jun 16 06:55:01 2024 GMT
            Not After : Jun 15 07:00:01 2025 GMT
        Subject: CN=C87B05CDBCDBC4BCD365E93A3711057B2785D5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:55:40:7c:f6:96:36:32:e0:1d:e9:82:9c:
                    cf:33:ed:02:f0:f6:6d:97:b3:bb:7c:c8:f1:4e:94:
                    e5:09:4c:b7:5f:c9:24:ec:32:97:6a:ac:d8:8e:f5:
                    e8:a0:32:dd:4f:11:51:14:88:7d:7c:42:3b:c7:68:
                    e9:29:27:2c:76:8e:5d:a6:9e:0e:03:83:1c:c5:63:
                    d1:50:14:79:d0:8d:0b:3a:32:e5:81:8d:a9:13:6c:
                    c7:6a:b6:58:e5:e8:2b:1c:da:ca:32:61:6a:f3:71:
                    c3:06:58:e7:06:40:65:a9:cf:79:15:b3:ca:a1:3b:
                    dd:e5:8a:42:a3:b0:79:9e:c9:2f:08:73:b0:44:e7:
                    09:12:07:0a:a5:a7:86:2c:ea:65:83:92:d2:f4:c3:
                    57:50:a6:00:8e:3a:f0:38:65:f9:b3:35:bc:94:9a:
                    f6:bf:39:42:bf:3e:c1:22:51:63:5c:46:e5:ab:b4:
                    ae:54:73:cf:cc:c9:f3:90:2e:a9:05:d0:1d:dd:1e:
                    3a:9d:9d:83:7e:8f:cb:5c:33:74:08:5e:e3:36:38:
                    a2:d4:69:17:9f:b4:18:5a:f7:29:7d:44:83:77:d2:
                    1b:24:49:c3:c8:21:fc:35:4b:1f:56:c1:1d:38:45:
                    09:40:ea:be:8a:fa:b5:15:9d:83:04:74:6e:39:73:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7B:05:CD:BC:DB:C4:BC:D3:65:E9:3A:37:11:05:7B:27:85:D5:A3
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:ef:c1:15:0b:8a:82:a3:3f:f4:f5:e6:79:11:66:9c:ed:
         f4:3a:b5:1c:50:11:ea:e3:10:fe:21:c3:79:ac:16:a9:96:95:
         17:d1:ca:3f:be:69:ca:f8:35:ed:5f:31:e6:b2:08:2d:32:57:
         aa:cc:4b:5e:a2:96:46:42:17:e5:0a:e7:cc:71:a9:35:33:24:
         cf:e7:28:8f:fd:37:9b:03:aa:57:f0:d5:49:85:76:6c:d7:bd:
         6f:5d:59:ef:00:b4:fb:2a:13:36:d4:ae:53:be:07:32:e6:30:
         76:3f:07:6d:7c:1a:ae:f0:e9:1d:6c:f4:0a:48:d7:3a:ae:7b:
         d4:2d:50:e4:a4:61:d4:3b:2b:7c:2b:1d:11:d5:a3:c5:74:02:
         27:cc:44:24:6c:17:40:f5:af:f4:a7:5b:cc:43:46:00:b8:3e:
         2b:a7:32:6c:7a:dc:ea:1b:3a:80:e0:ae:a5:55:86:76:df:5e:
         d9:b9:99:9a:4d:c7:f9:47:5d:cc:77:98:ba:96:fe:82:86:0e:
         04:76:46:a4:e0:47:9d:04:6d:30:2e:c9:88:77:e9:f6:65:3c:
         ec:c6:9a:cd:1e:d2:64:b9:eb:f6:9b:0b:eb:a6:59:cb:88:fc:
         20:ad:ea:8e:d7:ad:a1:1a:69:e0:e2:55:07:61:92:5c:13:0a:
         f3:21:7f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:02 2025 by rpki-client