Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa
File:                     3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (raw, json)
Hash identifier:          jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=
Subject key identifier:   DD:04:E2:0D:18:59:7F:9E:66:62:02:C6:57:88:3B:C5:A8:3E:C1:A6
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       0B24821A08A36F2F6C93F55B45200823EF9E6381
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa
Signing time:             Fri 16 May 2025 12:02:24 +0000
ROA not before:           Fri 16 May 2025 11:57:24 +0000
ROA not after:            Fri 15 May 2026 12:02:24 +0000
asID:                     136061
IP address blocks:        103.82.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 22:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:24:82:1a:08:a3:6f:2f:6c:93:f5:5b:45:20:08:23:ef:9e:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: May 16 11:57:24 2025 GMT
            Not After : May 15 12:02:24 2026 GMT
        Subject: CN=DD04E20D18597F9E666202C657883BC5A83EC1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:34:1f:8d:c9:3f:fb:d4:8f:11:47:d7:27:
                    33:2d:61:8b:66:7a:bb:08:b5:57:07:3e:a2:ca:5b:
                    00:fc:f3:ad:0f:5f:44:e7:ee:2c:1c:d2:d1:56:60:
                    75:1e:cc:d4:e3:d2:ad:b1:e2:04:d9:6a:01:b1:83:
                    4a:cf:e4:e2:fa:db:64:15:55:b1:c7:75:60:24:2c:
                    b2:e9:af:3d:13:1a:ba:00:7f:64:22:59:67:04:9b:
                    69:78:25:e2:e3:6e:4c:08:b0:6d:26:35:1c:a2:16:
                    b6:a1:c8:20:77:e0:78:67:94:9a:6f:d7:e3:29:a5:
                    af:7d:d0:69:41:f3:6f:2d:54:96:ce:7b:2f:93:c6:
                    65:8c:cd:9c:5f:1a:68:d3:39:0c:e1:05:47:68:ce:
                    08:fc:8a:fb:fd:a3:6b:c9:18:1d:2d:30:a2:cf:b0:
                    c1:17:4d:a9:3c:42:46:62:9f:b8:fc:91:3c:96:86:
                    9b:31:d0:d0:7f:15:7f:e8:ed:67:b1:6e:ef:03:e5:
                    47:19:9d:73:f8:27:4a:01:d5:e6:67:81:e5:87:8a:
                    57:82:15:a6:38:d2:b0:95:b1:95:a6:6a:5c:e7:0c:
                    69:ec:8b:5d:53:2f:1d:13:d2:a9:a7:0a:16:42:63:
                    dd:12:29:dc:96:f2:69:db:5d:2a:4b:ba:14:a7:0b:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:04:E2:0D:18:59:7F:9E:66:62:02:C6:57:88:3B:C5:A8:3E:C1:A6
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f5:90:c6:5d:1b:0d:3e:f9:91:8d:ab:90:18:49:98:f0:64:
         7e:ef:47:1c:4a:a8:c9:65:fa:a3:23:76:f7:74:95:d7:49:a8:
         cc:0a:82:fa:71:99:09:ac:4f:a1:8a:32:62:97:18:c7:cc:20:
         df:7f:92:c8:dc:c4:ff:d3:1f:8f:a4:a6:f8:07:f7:95:2d:6f:
         7f:c2:c2:1c:01:18:ca:d1:23:1b:73:03:bf:48:a1:93:a2:b4:
         64:d7:67:a1:c9:6f:e0:60:94:34:76:a8:39:c6:eb:7a:32:18:
         e8:8c:f3:5a:75:47:30:4a:10:20:77:02:58:02:b2:a5:24:f4:
         9e:46:36:6c:60:75:f7:fe:e6:7e:35:22:56:77:08:e8:18:0d:
         93:65:ba:70:56:a3:33:df:5e:31:8f:2d:7d:f0:0c:55:f3:3c:
         06:e0:d5:8e:25:f4:82:9d:80:96:5f:ec:7e:ae:9a:c6:3b:d1:
         bc:f6:65:26:0c:0a:3d:31:65:a9:88:f5:04:54:50:de:8e:16:
         4a:4b:58:29:d8:d6:cc:06:32:7f:2e:a3:1f:e4:12:b2:93:3e:
         ab:33:f7:b1:19:d0:ab:a7:ec:79:5d:15:36:07:e6:63:1f:5e:
         61:21:5a:5e:1e:85:04:32:0c:c1:e6:60:1a:7e:45:fd:4a:d2:
         54:79:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:50:36 2025 by rpki-client