Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32332d3233203d3e203634333133.roa
File:                     3130332e38302e39322e302f32332d3233203d3e203634333133.roa (raw, json)
Hash identifier:          Bno61Y2uZiAoxPdm0bk3go+ce6CYMz5Nf0PJG62RhLg=
Subject key identifier:   8E:A6:04:F6:40:1E:AF:10:22:2E:2F:B2:9F:7D:99:8B:83:E3:1D:5E
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       4525378606CDD9F22FF8E6D6788498395AB0A689
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32332d3233203d3e203634333133.roa
Signing time:             Mon 02 Mar 2026 11:00:00 +0000
ROA not before:           Mon 02 Mar 2026 10:55:00 +0000
ROA not after:            Mon 01 Mar 2027 11:00:00 +0000
asID:                     64313
IP address blocks:        103.80.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 15:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:25:37:86:06:cd:d9:f2:2f:f8:e6:d6:78:84:98:39:5a:b0:a6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Mar  2 10:55:00 2026 GMT
            Not After : Mar  1 11:00:00 2027 GMT
        Subject: CN=8EA604F6401EAF10222E2FB29F7D998B83E31D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:d2:fc:41:39:57:60:14:6b:1f:b9:69:73:
                    52:8f:ee:83:8a:27:e0:7a:d3:79:8b:c7:50:5b:02:
                    28:18:fc:fe:1f:11:f6:a7:96:2c:de:8f:10:eb:6c:
                    35:cb:97:dd:ab:a4:e5:6d:49:bf:0b:ec:43:26:a2:
                    78:2a:44:99:4c:33:d2:7e:45:8e:56:2c:e6:66:13:
                    5f:8e:ab:6e:51:ac:76:de:96:86:eb:54:c6:58:5f:
                    63:b2:68:d7:d0:61:eb:a4:43:fd:be:8f:40:85:84:
                    0c:2a:94:ef:01:14:b6:49:ae:79:b0:87:cc:55:20:
                    be:4f:92:aa:c9:96:62:e3:13:9c:81:51:84:84:aa:
                    6e:11:51:4d:14:03:d9:e1:8d:57:aa:e2:20:91:7b:
                    03:93:ef:4e:dd:96:76:39:e0:19:26:6a:c7:4b:4c:
                    9e:11:45:77:5f:fb:cd:14:31:cf:4f:c2:64:01:91:
                    5c:dc:32:7a:ab:04:d0:4a:0d:ac:2d:33:90:90:3f:
                    3a:b3:44:11:2b:29:12:cd:55:9b:9a:9b:1f:e9:17:
                    6f:ed:44:b7:64:b3:41:40:64:a8:73:2e:87:38:39:
                    45:78:6d:0f:a0:72:2d:12:0e:5e:c6:9f:51:52:20:
                    c0:88:a0:42:9a:04:c4:f9:51:c7:7d:45:b0:6f:6f:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:04:F6:40:1E:AF:10:22:2E:2F:B2:9F:7D:99:8B:83:E3:1D:5E
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32332d3233203d3e203634333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:b1:a3:3b:11:f4:7c:2c:54:fb:1a:2a:cb:dc:c4:1f:67:a3:
         f1:d7:60:bb:72:51:14:90:6f:5c:3d:66:76:b8:d9:39:fc:93:
         39:48:7d:0a:71:6e:e1:ba:9b:d6:8a:0d:fe:63:35:92:5c:42:
         e2:e8:fe:16:2a:d9:82:5c:f8:1a:f8:40:63:0a:c5:b4:d2:03:
         b9:4a:0e:28:c4:9d:80:d6:9b:8f:c9:e3:6a:b5:a0:a8:ed:2b:
         5e:7c:73:92:ed:f1:d9:a8:41:e6:71:0b:c1:6b:76:5d:84:b9:
         1e:4c:44:9a:f8:0c:4a:5c:47:d2:78:d8:a1:83:1b:1a:69:5e:
         7a:9c:75:26:97:b8:4f:31:fe:71:38:d1:d8:3d:25:fb:d5:75:
         ec:fa:8e:be:a3:17:4f:9b:e4:a4:99:94:4e:ad:ad:94:14:7c:
         e9:43:41:52:97:a9:b3:49:7f:f6:4c:8f:7b:2d:f7:a3:1f:61:
         9b:8c:a0:70:33:5b:0f:b7:90:e0:dd:80:5d:4d:ec:fb:bb:5e:
         3c:8d:27:a8:d4:51:d9:3b:e0:0c:16:e1:83:de:0e:65:80:7c:
         a1:1a:71:35:22:18:fc:6b:5a:7a:67:1d:f4:41:5b:b6:13:d0:
         13:4c:2e:ac:03:c6:09:c1:76:c4:83:c8:31:98:ac:4b:84:3b:
         49:7d:6a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:31:03 2026 by rpki-client