Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa
File:                     3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (raw, json)
Hash identifier:          TuOuwC+HTY3+zsq30NoK3C4u4uR9Kt6tuzw+MAyTb4o=
Subject key identifier:   68:50:FE:09:E3:45:51:F6:B7:4C:85:ED:03:F7:66:97:CA:F6:C3:C4
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       63CFA31AA1A6DECF56C7F4F032F930AB438AE025
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa
Signing time:             Thu 07 Aug 2025 06:00:02 +0000
ROA not before:           Thu 07 Aug 2025 05:55:02 +0000
ROA not after:            Thu 06 Aug 2026 06:00:02 +0000
asID:                     137303
IP address blocks:        103.80.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 15 Aug 2025 06:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cf:a3:1a:a1:a6:de:cf:56:c7:f4:f0:32:f9:30:ab:43:8a:e0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Aug  7 05:55:02 2025 GMT
            Not After : Aug  6 06:00:02 2026 GMT
        Subject: CN=6850FE09E34551F6B74C85ED03F76697CAF6C3C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:70:fd:6b:97:08:60:f8:c5:1a:71:69:14:
                    40:c2:fb:cd:d7:ba:45:79:91:b1:09:48:fa:93:bf:
                    1e:28:a7:5a:10:0a:71:bf:63:14:e3:1a:69:1c:2a:
                    b4:30:b1:f2:c1:79:16:53:48:44:6d:8b:16:93:6c:
                    1c:22:a5:87:18:b2:32:c8:f4:24:f7:5e:36:c2:d2:
                    ab:16:ab:c2:c9:12:c2:c3:8f:86:a4:ec:8a:f5:e9:
                    85:e0:43:b3:63:84:94:b9:0e:e5:f2:84:7e:f5:9a:
                    e7:7f:d2:9f:6e:3e:8f:40:e2:df:b4:f7:11:b9:53:
                    3d:c8:15:fe:32:19:23:e8:ba:1a:4f:3f:c7:e2:13:
                    a5:b6:83:2d:ea:29:4f:44:4c:01:d6:36:ed:bf:32:
                    e1:d4:b2:8f:5e:91:12:f8:6e:e8:35:e7:c6:21:8e:
                    07:31:fe:78:bf:3f:af:1e:06:b9:d5:83:95:74:12:
                    b5:97:c6:af:66:34:16:02:d3:07:49:43:16:85:70:
                    5a:23:91:84:3f:9c:a3:dd:7f:0b:ad:25:13:35:5b:
                    e7:4e:57:81:92:82:4c:df:a5:71:a5:fa:33:bf:1a:
                    84:dd:2e:d9:21:d7:b6:aa:4a:d1:e7:f5:26:00:ec:
                    b7:b2:a8:2a:5d:4d:9f:e2:d0:87:db:ed:a7:09:57:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:50:FE:09:E3:45:51:F6:B7:4C:85:ED:03:F7:66:97:CA:F6:C3:C4
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:48:c7:48:12:24:a3:0a:44:ea:a2:4a:30:77:54:ce:10:5e:
         fb:04:c8:4a:a8:68:30:5c:49:af:46:76:9a:9e:80:8f:7d:29:
         34:b5:39:98:10:49:11:d7:1f:93:19:13:60:dd:ae:80:d6:f1:
         35:b6:bb:7e:0c:34:f7:df:2b:52:f8:64:11:96:99:74:12:1b:
         d3:e5:e7:18:5c:7d:04:fa:10:04:e3:fe:45:02:e5:74:22:9f:
         95:dd:81:4b:a3:f3:ea:69:2a:87:ba:3b:de:b4:6f:ff:62:df:
         1d:dd:73:29:4d:91:6d:a0:29:1b:ed:95:d5:f1:1c:d7:63:73:
         cf:c1:5d:07:66:99:c4:b9:68:c3:a1:ef:bd:2c:22:44:62:cf:
         f3:a8:43:fa:78:50:0a:a5:7b:18:35:ac:66:ff:00:a4:99:c7:
         eb:8c:1b:7b:2f:6a:d0:33:27:32:c2:5d:55:cb:a8:41:93:45:
         a6:27:d2:5c:27:27:0e:97:57:fa:a6:18:31:c5:67:a2:ef:b3:
         b0:22:d9:fd:c3:8b:7d:46:08:3e:91:bb:ab:51:a2:ab:ce:ae:
         e7:d0:bc:79:32:a5:03:d4:e9:59:98:39:1c:28:18:b1:12:5b:
         d2:1c:ca:b7:df:1d:09:1d:40:9b:d7:d5:04:29:1a:4a:66:e2:
         96:22:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:03 2025 by rpki-client