Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa
File:                     3130332e38302e38382e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier:          wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=
Subject key identifier:   A1:7B:BA:59:DD:0A:0D:84:91:F4:41:43:46:00:1C:F7:C8:9A:54:27
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       19F2F10A46B79CE05172AA0B130C14C68FA1DBAD
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa
Signing time:             Mon 02 Jun 2025 02:04:31 +0000
ROA not before:           Mon 02 Jun 2025 01:59:31 +0000
ROA not after:            Mon 01 Jun 2026 02:04:31 +0000
asID:                     55685
IP address blocks:        103.80.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 02:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f2:f1:0a:46:b7:9c:e0:51:72:aa:0b:13:0c:14:c6:8f:a1:db:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Jun  2 01:59:31 2025 GMT
            Not After : Jun  1 02:04:31 2026 GMT
        Subject: CN=A17BBA59DD0A0D8491F4414346001CF7C89A5427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:1b:4b:0d:48:3a:4c:50:1a:fa:12:24:2e:
                    a6:50:27:be:07:50:c4:08:62:4e:7d:35:39:82:82:
                    53:d1:a9:63:4a:2c:69:83:78:de:30:59:e6:a5:05:
                    36:cc:fd:70:b4:2f:ce:56:36:43:c0:21:9e:d9:8c:
                    3c:e6:a5:95:97:1c:9b:f2:01:08:5f:eb:09:0b:4a:
                    3e:50:2b:14:f3:00:db:ed:86:cd:4f:09:4f:18:c7:
                    4d:df:2d:a6:8d:66:c1:55:d5:42:3a:85:58:0e:3c:
                    fe:07:8a:27:4e:0e:cb:ad:70:d3:05:de:82:f9:e6:
                    dd:83:aa:7c:12:0e:99:41:10:5e:43:5c:87:9a:6c:
                    89:16:1d:54:da:0f:ab:00:12:48:0f:06:0b:62:5b:
                    65:9a:66:e9:56:2b:2d:54:53:72:30:f0:ae:fd:c0:
                    c9:05:15:4b:c4:a5:5e:94:64:d0:1c:98:d7:31:c5:
                    b0:28:60:5c:be:11:67:2d:16:28:2b:31:14:05:54:
                    db:3f:ab:cc:37:f7:4d:45:4b:ea:9a:6d:a9:96:8b:
                    69:cc:90:b3:8a:36:7c:c8:18:d2:b4:df:22:9f:07:
                    af:9c:d7:60:10:b6:f4:01:25:da:1b:87:fb:05:85:
                    40:7e:df:d6:f9:5f:18:83:86:e3:34:80:7a:6a:84:
                    42:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7B:BA:59:DD:0A:0D:84:91:F4:41:43:46:00:1C:F7:C8:9A:54:27
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:04:1b:a0:cc:9e:fd:ad:42:01:61:f2:48:8e:01:76:e0:9e:
         e0:9b:8c:d9:dc:08:ad:62:81:96:5e:ea:bc:92:09:cb:cb:cb:
         64:c2:07:75:89:75:5e:45:d1:82:a2:d8:82:b7:e7:ff:e5:e2:
         35:dc:43:b7:55:33:58:54:f0:bb:13:c5:19:fa:14:0c:1a:b4:
         17:1f:25:f9:51:23:96:4f:28:67:e4:e6:30:aa:d7:f9:a4:aa:
         a6:2d:04:23:2b:35:06:24:a3:05:f7:7a:b4:fa:17:aa:1c:92:
         83:a7:29:07:26:de:cb:27:9b:87:d4:29:f1:ee:eb:cf:fc:fd:
         7f:ff:5a:72:5d:c0:bf:6c:11:b3:ec:6f:58:ff:b7:aa:9c:cf:
         cf:08:8f:fa:0d:9a:c2:6f:0b:f6:1a:d2:25:1f:87:fa:a1:6f:
         d0:5c:71:ef:36:a7:04:98:75:f0:89:7c:de:19:8a:89:d5:bb:
         57:bb:aa:ae:58:13:9e:26:91:57:a3:a0:18:a4:75:c3:41:42:
         5a:ce:48:b8:cc:03:b0:52:fc:92:fc:bf:6a:c2:d3:cd:4e:9e:
         57:41:65:a7:63:05:cf:09:db:e1:f4:1c:5b:0d:d9:da:52:b3:
         69:aa:34:ce:b3:85:71:2c:c0:34:1a:51:93:6d:0b:51:81:94:
         e9:26:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:41:49 2025 by rpki-client