Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa
File:                     3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa (raw, json)
Hash identifier:          v91Yrdr8uFMWDW7PghDA31MNllOzjDzQevPYWa9AiiM=
Subject key identifier:   83:71:FB:85:CB:38:4D:A4:14:F7:28:46:A9:42:17:F5:75:80:B7:31
Certificate issuer:       /CN=EB84D1FD50105DB5E145FF5740362A466529E4BC
Certificate serial:       7FE9115D97C9847021F01D47816B113650F71FA3
Authority key identifier: EB:84:D1:FD:50:10:5D:B5:E1:45:FF:57:40:36:2A:46:65:29:E4:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa
Signing time:             Mon 31 Aug 2026 12:55:16 +0000
ROA not before:           Mon 31 Aug 2026 12:50:16 +0000
ROA not after:            Mon 30 Aug 2027 12:55:16 +0000
asID:                     151582
IP address blocks:        103.80.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.crl
                          rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e9:11:5d:97:c9:84:70:21:f0:1d:47:81:6b:11:36:50:f7:1f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84D1FD50105DB5E145FF5740362A466529E4BC
        Validity
            Not Before: Aug 31 12:50:16 2026 GMT
            Not After : Aug 30 12:55:16 2027 GMT
        Subject: CN=8371FB85CB384DA414F72846A94217F57580B731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:a4:72:5c:b6:8b:d9:71:5f:2f:37:3f:98:
                    92:2a:a4:5e:a9:a2:a1:72:ad:2f:a8:1a:2f:76:5d:
                    9b:ca:93:5f:82:a5:88:5b:d5:4f:2d:5f:6a:05:f3:
                    20:ce:27:5e:91:b2:b0:75:f3:b1:6f:29:a0:62:08:
                    15:16:ec:58:53:64:aa:98:fa:d2:3b:17:cc:66:40:
                    c4:2e:5f:6c:df:f2:b5:84:77:9e:61:01:ad:c1:ea:
                    e7:11:78:f9:6e:8c:33:88:96:fe:b6:8e:e5:4b:7b:
                    53:f7:86:08:74:26:37:37:48:f4:95:5c:01:c8:f9:
                    a8:f0:45:c2:d6:6a:dd:52:f2:7a:d7:d0:76:f5:97:
                    f7:5a:16:e9:9d:f2:7c:78:e0:75:08:06:66:97:90:
                    7a:b4:07:5e:c5:ab:4e:9a:ee:d5:78:4e:3d:1f:e5:
                    81:9b:bd:22:f0:0f:8c:ad:5c:31:f5:c6:9d:81:f0:
                    3e:76:94:f8:9d:a6:d3:0d:72:3c:a6:eb:79:48:e7:
                    98:d8:05:ef:8f:a8:b5:44:76:ac:6b:19:40:fb:09:
                    b5:50:05:62:d3:a5:cc:07:c2:97:7a:8c:9e:78:ff:
                    95:a0:86:5c:ed:7f:25:a4:0b:4a:8e:98:23:75:95:
                    04:c3:eb:68:1d:7c:41:2b:b3:8f:30:46:da:34:59:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:FB:85:CB:38:4D:A4:14:F7:28:46:A9:42:17:F5:75:80:B7:31
            X509v3 Authority Key Identifier:
                keyid:EB:84:D1:FD:50:10:5D:B5:E1:45:FF:57:40:36:2A:46:65:29:E4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:d5:39:a0:78:c9:52:1b:44:70:c2:4d:13:21:d3:3e:b8:
         46:72:c9:de:9b:2e:06:f9:70:bb:46:f0:cf:d9:d5:9e:3e:f5:
         d8:e4:47:de:3f:d0:96:e2:f0:cf:72:c6:b4:d8:6f:df:f1:7b:
         b0:0e:ed:d6:89:44:5d:9f:b5:63:42:4d:04:b2:e5:9b:be:9d:
         79:1a:7d:3f:f0:9e:87:ac:18:49:d9:82:cb:a7:f5:95:85:19:
         48:aa:fe:c7:4e:c6:c9:ce:c0:ec:0f:9e:b8:bf:72:51:1e:5f:
         57:60:87:94:84:21:83:5e:5e:2d:f5:ce:e5:a3:14:4d:82:34:
         27:ae:0e:e2:4f:8c:de:42:1a:23:e7:00:9c:95:cd:a0:a6:3a:
         d0:6d:a0:4a:37:01:64:bb:e4:01:0a:56:c6:0f:55:d5:19:ba:
         9e:32:36:84:b8:70:ae:b5:29:e1:b0:12:86:03:7a:78:1e:e3:
         8c:73:65:db:60:c4:56:2e:02:54:b8:fc:9c:25:69:89:e3:75:
         fa:c2:ce:85:f2:e8:3d:f7:16:5c:f9:3d:fb:32:ca:be:c2:11:
         b3:67:fd:2b:e2:c4:a9:24:86:44:e0:71:33:3d:1f:33:55:5f:
         df:37:05:da:a3:81:5e:40:8c:ba:86:22:8d:d8:18:1a:25:d8:
         4f:72:64:95
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUf+kRXZfJhHAh8B1HgWsRNlD3H6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4NEQxRkQ1MDEwNURCNUUxNDVGRjU3NDAzNjJBNDY2
NTI5RTRCQzAeFw0yNjA4MzExMjUwMTZaFw0yNzA4MzAxMjU1MTZaMDMxMTAvBgNV
BAMTKDgzNzFGQjg1Q0IzODREQTQxNEY3Mjg0NkE5NDIxN0Y1NzU4MEI3MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCffqRyXLaL2XFfLzc/mJIqpF6p
oqFyrS+oGi92XZvKk1+CpYhb1U8tX2oF8yDOJ16RsrB187FvKaBiCBUW7FhTZKqY
+tI7F8xmQMQuX2zf8rWEd55hAa3B6ucRePlujDOIlv62juVLe1P3hgh0Jjc3SPSV
XAHI+ajwRcLWat1S8nrX0Hb1l/daFumd8nx44HUIBmaXkHq0B17Fq06a7tV4Tj0f
5YGbvSLwD4ytXDH1xp2B8D52lPidptMNcjym63lI55jYBe+PqLVEdqxrGUD7CbVQ
BWLTpcwHwpd6jJ54/5WghlztfyWkC0qOmCN1lQTD62gdfEErs48wRto0Wa4pAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUg3H7hcs4TaQU9yhGqUIX9XWAtzEwHwYDVR0j
BBgwFoAU64TR/VAQXbXhRf9XQDYqRmUp5LwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzQxZTgyMjMtY2M2OC00MTBlLWI2N2ItOWI4ODI1YjVjZDVmLzAvRUI4NEQxRkQ1
MDEwNURCNUUxNDVGRjU3NDAzNjJBNDY2NTI5RTRCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjg0RDFGRDUwMTA1REI1RTE0NUZGNTc0MDM2MkE0NjY1MjlF
NEJDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc0MWU4MjIzLWNjNjgtNDEwZS1i
NjdiLTliODgyNWI1Y2Q1Zi8wLzMxMzAzMzJlMzgzMDJlMzIzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1DnMA0GCSqG
SIb3DQEBCwUAA4IBAQBp4tU5oHjJUhtEcMJNEyHTPrhGcsnemy4G+XC7RvDP2dWe
PvXY5EfeP9CW4vDPcsa02G/f8XuwDu3WiURdn7VjQk0EsuWbvp15Gn0/8J6HrBhJ
2YLLp/WVhRlIqv7HTsbJzsDsD564v3JRHl9XYIeUhCGDXl4t9c7loxRNgjQnrg7i
T4zeQhoj5wCclc2gpjrQbaBKNwFku+QBClbGD1XVGbqeMjaEuHCutSnhsBKGA3p4
HuOMc2XbYMRWLgJUuPycJWmJ43X6ws6F8ug99xZc+T37Msq+whGzZ/0r4sSpJIZE
4HEzPR8zVV/fNwXao4FeQIy6hiKN2BgaJdhPcmSV
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:26:41 2026 by rpki-client