Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa
File:                     3130332e38302e38382e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier:          xiXqHT30gah4SfdCSJA1bqssFdqa9R1vtVtP0INDihk=
Subject key identifier:   52:32:5A:E2:CB:1D:44:4A:10:2C:6E:02:F5:D3:70:A5:EC:C4:29:95
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       0D2D04306A27203D1441943C9EB21C867C95A149
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa
Signing time:             Mon 01 Jul 2024 01:05:29 +0000
ROA not before:           Mon 01 Jul 2024 01:00:29 +0000
ROA not after:            Mon 30 Jun 2025 01:05:29 +0000
asID:                     55685
IP address blocks:        103.80.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2d:04:30:6a:27:20:3d:14:41:94:3c:9e:b2:1c:86:7c:95:a1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Jul  1 01:00:29 2024 GMT
            Not After : Jun 30 01:05:29 2025 GMT
        Subject: CN=52325AE2CB1D444A102C6E02F5D370A5ECC42995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8a:1d:0b:c2:ff:1e:6d:3f:43:c0:8c:e5:26:
                    dd:70:c4:14:40:df:11:91:74:af:f7:2e:49:02:ba:
                    98:d4:04:4e:4c:61:24:9b:c8:df:5b:ce:71:9f:3d:
                    c9:0b:e4:c7:eb:88:f9:8d:31:6d:17:93:d6:09:19:
                    41:26:47:67:75:e3:b7:47:78:44:4e:01:24:54:41:
                    38:5b:7c:c9:fe:d0:d8:48:51:ff:d6:d2:6b:69:18:
                    9a:22:bb:3d:74:3f:7a:31:6e:d3:11:60:ed:97:8e:
                    ab:ca:8c:f9:9b:c8:db:8f:03:0c:f5:03:30:d4:75:
                    cb:2f:af:4c:15:44:b3:84:d5:6c:55:ea:64:64:9e:
                    cd:50:fa:c6:be:d6:a4:a9:d3:25:6c:7f:3c:5a:39:
                    9a:d0:f6:86:9f:d9:0f:01:28:e3:b6:98:9d:2d:8c:
                    f0:65:4e:42:be:1e:94:a4:6d:b6:cf:9e:70:ec:b5:
                    f6:f3:ee:7c:e7:4c:8e:94:47:ed:69:bf:cc:ea:76:
                    29:a2:36:88:82:ef:6e:f5:8f:22:b3:2c:82:2d:8f:
                    08:f7:ba:d3:3f:c9:d8:51:bd:91:b6:f2:63:72:97:
                    ff:f7:c8:be:ac:0f:9b:24:e4:39:01:3f:cd:44:58:
                    8a:d2:dd:4e:5b:3b:fc:f7:ab:ba:3d:52:54:a9:bb:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:32:5A:E2:CB:1D:44:4A:10:2C:6E:02:F5:D3:70:A5:EC:C4:29:95
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:98:6e:7f:cf:7b:ae:1d:dc:af:5c:70:b1:54:5e:dd:c7:
         60:9e:81:45:ab:91:17:87:53:75:73:91:f8:0d:2b:78:85:dd:
         aa:ba:60:d1:3c:da:bb:b3:af:b6:4d:1f:c8:ff:62:19:64:88:
         36:e4:1b:66:d4:36:60:0c:e3:6e:80:92:e5:62:f8:26:be:0c:
         cc:63:36:e2:52:31:9d:2f:b9:ed:40:25:ce:af:8d:ab:7f:0d:
         05:7e:8f:52:09:1c:24:6c:24:0c:bf:3c:8e:b0:df:e7:68:ae:
         89:1d:99:53:cd:75:56:bd:bd:66:f0:96:d2:25:71:38:ea:08:
         9c:f6:4b:71:c9:18:27:4d:e7:c8:cc:29:23:3b:31:aa:a8:20:
         31:84:3b:41:16:eb:15:ca:a1:c2:8d:4a:34:9a:b9:d9:0e:80:
         6e:74:f9:ab:6c:a3:0b:fc:dc:78:93:fb:c1:50:0a:af:36:cd:
         71:39:5f:1b:82:e5:b6:fc:d1:61:7f:42:e1:2e:aa:db:c8:12:
         2a:4e:ab:ed:44:88:d9:92:b0:ed:25:8b:d9:d6:8d:fb:98:5c:
         9f:dd:29:01:a6:91:8d:43:fe:bd:b4:cc:fd:ea:c7:d4:17:93:
         da:69:9c:a0:9f:87:f3:cb:06:65:3b:40:69:b4:10:c2:e5:e6:
         f5:e6:c7:0f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUDS0EMGonID0UQZQ8nrIchnyVoUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw
MTI1MkE1QzAeFw0yNDA3MDEwMTAwMjlaFw0yNTA2MzAwMTA1MjlaMDMxMTAvBgNV
BAMTKDUyMzI1QUUyQ0IxRDQ0NEExMDJDNkUwMkY1RDM3MEE1RUNDNDI5OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqih0Lwv8ebT9DwIzlJt1wxBRA
3xGRdK/3LkkCupjUBE5MYSSbyN9bznGfPckL5MfriPmNMW0Xk9YJGUEmR2d147dH
eEROASRUQThbfMn+0NhIUf/W0mtpGJoiuz10P3oxbtMRYO2XjqvKjPmbyNuPAwz1
AzDUdcsvr0wVRLOE1WxV6mRkns1Q+sa+1qSp0yVsfzxaOZrQ9oaf2Q8BKOO2mJ0t
jPBlTkK+HpSkbbbPnnDstfbz7nznTI6UR+1pv8zqdimiNoiC7271jyKzLIItjwj3
utM/ydhRvZG28mNyl//3yL6sD5sk5DkBP81EWIrS3U5bO/z3q7o9UlSpu/zRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUUjJa4ssdREoQLG4C9dNwpezEKZUwHwYDVR0j
BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG
NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1
MkE1Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyMDMyYmM5LTYwNWEtNDI1My1h
NGNkLTYyZjEyNDEyNmVhYy8wLzMxMzAzMzJlMzgzMDJlMzgzODJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM1MzUzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnUFgwDQYJKoZIhvcN
AQELBQADggEBAAspmG5/z3uuHdyvXHCxVF7dx2CegUWrkReHU3VzkfgNK3iF3aq6
YNE82ruzr7ZNH8j/YhlkiDbkG2bUNmAM426AkuVi+Ca+DMxjNuJSMZ0vue1AJc6v
jat/DQV+j1IJHCRsJAy/PI6w3+dorokdmVPNdVa9vWbwltIlcTjqCJz2S3HJGCdN
58jMKSM7MaqoIDGEO0EW6xXKocKNSjSaudkOgG50+atsowv83HiT+8FQCq82zXE5
XxuC5bb80WF/QuEuqtvIEipOq+1EiNmSsO0li9nWjfuYXJ/dKQGmkY1D/r20zP3q
x9QXk9ppnKCfh/PLBmU7QGm0EMLl5vXmxw8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org