Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/3130332e38302e3233362e302f32322d3234203d3e203634333135.roa
File:                     3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (raw, json)
Hash identifier:          uAsTJXI8kvPM+rUqNizg2euNYcTs9wRlPxWjqYq3wog=
Subject key identifier:   87:F0:04:33:5B:E6:F4:5D:FE:18:0E:EB:CB:CC:64:F3:47:DF:4F:08
Certificate issuer:       /CN=5782DE79396EB62186D082F936F3AB7084CB59CB
Certificate serial:       3A3F99E773B68FD461CC52596552BD39421A894C
Authority key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/3130332e38302e3233362e302f32322d3234203d3e203634333135.roa
Signing time:             Mon 02 Jun 2025 02:02:35 +0000
ROA not before:           Mon 02 Jun 2025 01:57:35 +0000
ROA not after:            Mon 01 Jun 2026 02:02:35 +0000
asID:                     64315
IP address blocks:        103.80.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl
                          rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3f:99:e7:73:b6:8f:d4:61:cc:52:59:65:52:bd:39:42:1a:89:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5782DE79396EB62186D082F936F3AB7084CB59CB
        Validity
            Not Before: Jun  2 01:57:35 2025 GMT
            Not After : Jun  1 02:02:35 2026 GMT
        Subject: CN=87F004335BE6F45DFE180EEBCBCC64F347DF4F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:32:18:57:30:79:76:c1:1c:0b:b4:90:87:
                    1b:3b:27:df:48:0b:a4:1b:74:f9:f6:12:33:83:16:
                    c0:87:f9:85:b2:c2:f9:30:9e:18:f6:5b:ab:94:b9:
                    5d:e7:d5:91:3a:17:6f:98:68:21:6b:85:ac:42:8d:
                    e4:74:76:76:6a:9c:c2:5a:3e:6b:b5:9f:57:46:7e:
                    64:ff:d9:5a:a2:f4:92:94:3f:59:5f:14:e7:6a:81:
                    73:51:45:b0:2c:c4:a1:5d:19:6c:45:b3:a2:a6:1d:
                    45:40:2e:63:8e:c2:b8:ef:75:cb:64:34:04:92:5c:
                    5f:79:e7:24:c1:f8:3b:87:24:75:1a:18:ed:2b:5f:
                    52:8e:eb:93:f3:43:b1:ef:b8:eb:48:11:20:3d:9d:
                    42:b3:29:de:45:20:6c:64:de:9f:4f:99:14:b0:0b:
                    5e:15:71:c4:fa:b9:d6:c5:5e:2c:13:d5:93:d8:23:
                    9e:45:a0:f0:2d:00:35:25:72:37:09:b0:69:72:2a:
                    98:4b:f6:9b:05:fe:ce:ed:3a:26:df:4e:b6:07:49:
                    b5:f5:9e:62:a2:5e:a1:2b:cb:57:a5:0a:7b:bd:87:
                    0c:32:7c:27:90:c1:22:54:1b:e5:e0:20:3c:fa:35:
                    07:13:8d:f1:7f:fa:35:17:14:5b:42:46:a3:d7:9d:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F0:04:33:5B:E6:F4:5D:FE:18:0E:EB:CB:CC:64:F3:47:DF:4F:08
            X509v3 Authority Key Identifier:
                keyid:57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/3130332e38302e3233362e302f32322d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:bf:5a:c1:80:f4:06:aa:fd:ca:93:d0:cc:4d:6a:a6:21:
         45:b1:19:c7:e2:ac:21:c5:fc:57:71:55:11:9d:28:6c:79:1a:
         fc:f7:c1:51:a6:6b:41:ee:1e:3b:8f:f3:df:7b:d0:72:cb:8f:
         60:0f:b7:5a:21:cd:d8:49:4b:cd:a7:15:2d:c5:7f:67:37:f3:
         9d:9e:bc:52:63:03:66:48:10:35:d9:2a:ed:a6:05:f5:0a:d1:
         3a:2d:28:8e:a3:4f:a0:b1:66:09:9a:18:53:dc:41:3c:37:8d:
         29:d5:fe:ef:1a:ba:81:e6:cf:d2:20:5e:2a:29:83:68:d7:43:
         d5:e7:3e:9d:35:99:46:70:82:18:c6:b3:2d:c6:98:e3:00:c7:
         7b:42:56:c9:c4:e5:ff:38:ce:5d:df:7f:bd:6f:36:69:44:9f:
         ab:0a:97:3a:8d:ae:3a:c1:29:24:6d:38:78:96:b9:1a:4e:e8:
         df:c6:0e:0e:52:74:5b:8b:46:e4:aa:7a:5d:c2:5a:eb:1a:70:
         c1:94:99:81:88:d0:15:33:9e:f9:d6:1b:48:ba:4d:09:2e:ba:
         dc:c6:e9:6c:14:c3:e5:af:39:a9:5b:9a:d5:07:47:56:14:7b:
         b4:ec:73:cd:8a:f2:7d:06:11:ba:d6:00:ea:be:95:9d:58:bc:
         24:9e:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:44 2025 by rpki-client