Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32332d3233203d3e203634333133.roa
File:                     3130332e38302e39322e302f32332d3233203d3e203634333133.roa (raw, json)
Hash identifier:          KP6H/8kvRIL3uKWM7tA7zKFlqFqggu0qkpauJ2U8fIY=
Subject key identifier:   5C:46:1E:E3:43:1C:0A:74:30:C1:FA:85:0E:9A:18:F5:D3:BC:80:3F
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       31BDE05BF5FD161916CB451C3B2EC6304553BEA1
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32332d3233203d3e203634333133.roa
Signing time:             Sun 03 May 2026 02:38:34 +0000
ROA not before:           Sun 03 May 2026 02:33:34 +0000
ROA not after:            Sun 02 May 2027 02:38:34 +0000
asID:                     64313
IP address blocks:        103.80.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bd:e0:5b:f5:fd:16:19:16:cb:45:1c:3b:2e:c6:30:45:53:be:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:34 2026 GMT
            Not After : May  2 02:38:34 2027 GMT
        Subject: CN=5C461EE3431C0A7430C1FA850E9A18F5D3BC803F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:f2:cf:c8:f4:50:8c:9e:dc:81:b4:cb:bb:
                    9f:c1:55:a6:ab:04:e9:f6:9d:70:8f:10:f4:d1:cc:
                    e8:b3:7b:b4:d7:e1:b1:ca:be:e4:3f:b8:9b:89:4f:
                    a4:ba:8e:8d:1b:81:e4:58:2f:e9:58:ac:07:90:7a:
                    05:2d:1b:34:74:ac:50:7f:51:03:12:90:34:99:db:
                    a7:6b:3d:d2:6a:47:1f:86:a3:06:72:7b:bb:68:d7:
                    44:e7:ea:07:d4:b8:38:23:52:c7:d1:57:dd:c9:c0:
                    b9:4e:4e:42:ef:5c:5b:36:2e:07:60:b5:5c:73:d6:
                    1d:91:09:20:6d:d7:7e:f3:b4:6e:0f:e5:37:c3:0d:
                    25:ba:7e:07:e4:30:13:b7:29:79:f6:aa:9e:a0:47:
                    bb:5a:42:ae:af:db:6d:c3:f4:7c:70:33:98:d0:9f:
                    d0:dd:20:a9:73:75:8a:f3:e1:4b:fa:29:fe:5c:97:
                    af:4d:8b:39:b0:b3:bc:7f:0a:cf:8e:00:c3:db:a8:
                    3a:d2:5e:de:e6:dc:80:5d:97:d0:e6:5b:b4:37:48:
                    a0:90:73:e8:88:39:2a:3d:36:26:2a:af:2e:78:1e:
                    ef:c8:72:53:a6:06:54:0d:d2:cf:37:b0:1f:fc:32:
                    01:2f:4c:6a:6b:ba:a6:83:63:6d:1b:72:fc:92:41:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:46:1E:E3:43:1C:0A:74:30:C1:FA:85:0E:9A:18:F5:D3:BC:80:3F
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32332d3233203d3e203634333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:43:3f:b6:b1:6c:02:e3:ca:b1:2a:2a:18:71:f4:51:9f:
         af:42:76:75:a8:a8:d4:de:a6:c4:98:04:62:0d:52:45:68:19:
         25:20:5d:b0:0e:77:2f:b3:89:fb:33:22:72:9e:e7:24:d5:75:
         3c:21:24:94:3f:11:41:2a:6c:d4:48:19:bb:99:1b:9f:e3:44:
         a2:7d:44:29:82:c6:04:f4:a7:33:8d:d6:6e:7d:85:ef:1d:10:
         76:fb:f6:91:2e:3b:2f:6a:93:d6:48:3b:2e:ad:86:a0:7a:e3:
         e6:a8:88:fc:a0:78:18:a7:ef:f8:98:ca:32:99:14:d9:ab:b5:
         af:c2:bf:b6:e3:50:f9:00:53:75:01:f1:fb:56:69:7c:0a:cb:
         82:4e:48:91:18:8e:35:c4:ce:c1:08:a7:c6:c0:52:3b:7c:1c:
         26:93:14:68:1e:f1:14:ee:5e:c9:50:20:a3:35:ae:ce:fa:52:
         b0:09:1e:e6:d8:0a:24:c2:70:ef:91:5f:ab:f5:d6:83:0f:93:
         e9:ab:09:c4:2d:0e:c8:91:49:b0:18:ce:3b:a7:9e:3f:24:21:
         e1:b7:ca:06:46:fe:e5:5a:aa:90:28:46:45:c0:08:8b:91:eb:
         c5:ad:b0:0d:c1:b4:4c:c1:f6:52:f1:cf:56:07:93:6e:d1:ce:
         ba:ee:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:29:31 2026 by rpki-client