Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32342d3234203d3e203634333133.roa
File:                     3130332e38302e39322e302f32342d3234203d3e203634333133.roa (raw, json)
Hash identifier:          d0UQ6tvPkkT95byc9Nt2VhaxPBhpyl2GvvvUyKTtyaw=
Subject key identifier:   82:3D:46:3D:88:9D:9B:B8:E3:4C:DA:A5:2E:13:EB:5E:E6:A3:0F:1C
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       3D01992E05955FBBA88A83C0B1E9BAD0D09AAA6B
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32342d3234203d3e203634333133.roa
Signing time:             Sun 03 May 2026 02:38:44 +0000
ROA not before:           Sun 03 May 2026 02:33:44 +0000
ROA not after:            Sun 02 May 2027 02:38:44 +0000
asID:                     64313
IP address blocks:        103.80.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:01:99:2e:05:95:5f:bb:a8:8a:83:c0:b1:e9:ba:d0:d0:9a:aa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:44 2026 GMT
            Not After : May  2 02:38:44 2027 GMT
        Subject: CN=823D463D889D9BB8E34CDAA52E13EB5EE6A30F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:e7:75:cc:95:8f:9a:78:b5:3f:a8:6e:0b:
                    c0:77:c8:ca:2b:ef:4f:67:4e:23:c4:09:87:18:b6:
                    51:b6:65:2c:fa:be:a3:f5:af:ff:6d:20:9d:52:7a:
                    fd:ef:4a:2d:ef:8f:fa:6e:23:df:ab:03:92:ac:da:
                    4d:66:19:9b:e3:fa:ea:8f:bf:c3:e5:ce:af:8f:eb:
                    16:a1:01:9c:c2:21:70:8f:e0:44:20:27:a1:d5:47:
                    82:ac:be:80:24:ef:24:5b:ff:d2:67:46:27:88:00:
                    98:0b:80:50:9b:8d:ad:31:61:50:50:15:16:73:34:
                    bf:40:95:a3:b4:e0:c2:46:f1:aa:c5:e7:c6:2a:15:
                    60:8d:86:23:bd:2c:48:a1:13:6b:3c:86:0b:49:1d:
                    ab:aa:a3:88:54:2f:5a:af:5e:94:f4:58:f4:25:66:
                    b6:27:1e:d3:c2:e0:f6:ab:f7:3a:da:31:79:e0:11:
                    fe:ba:de:51:99:69:5b:f4:2a:49:6f:a5:42:74:b8:
                    d4:30:47:e8:b2:ca:5d:98:33:54:55:9d:58:38:3d:
                    7c:90:a3:d7:f2:43:f5:6a:07:aa:c6:20:e3:fb:6c:
                    4a:a5:9a:49:a1:89:f3:4a:c5:b4:a9:3a:57:75:60:
                    e1:fb:a3:8a:24:a6:78:71:c4:24:31:55:66:3b:84:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3D:46:3D:88:9D:9B:B8:E3:4C:DA:A5:2E:13:EB:5E:E6:A3:0F:1C
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32342d3234203d3e203634333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ca:bb:9a:70:49:f3:e7:79:51:f5:06:18:13:e2:f2:1c:62:
         72:26:93:a6:5b:44:da:85:0f:46:24:b5:b8:e6:2c:37:82:b1:
         9d:6c:3a:ae:ed:f1:4d:6f:79:7f:07:76:ef:90:9b:16:b1:63:
         73:9f:36:84:76:3d:82:1a:e6:0c:64:ff:5e:3f:39:45:96:11:
         48:31:4c:4e:b9:c8:ab:8d:0b:b6:8f:5c:ce:0d:38:36:2f:b4:
         15:33:61:2e:46:f0:cd:b6:6c:4c:f8:b7:2f:18:65:79:6d:b9:
         01:58:f7:72:ae:97:24:45:12:77:d2:44:c2:6a:a2:e2:e8:d4:
         87:00:61:9b:55:e2:e4:4c:bf:45:4d:0b:fe:00:7a:5a:57:5d:
         1a:04:4b:2c:5d:ed:07:99:e7:ed:03:ab:cd:f9:0b:0d:86:0f:
         50:ff:7f:47:af:c0:be:56:12:a2:d8:87:05:a8:25:b7:4d:74:
         34:d0:fe:72:4e:e5:02:17:e5:a2:35:da:f1:d7:5b:79:61:52:
         a9:23:a1:38:01:3b:65:68:2e:c7:7a:35:de:2d:93:c8:96:94:
         35:9a:ce:02:7d:be:12:8f:83:a3:5d:21:96:bc:eb:d9:c1:c9:
         c5:1c:e0:c6:2b:36:63:ce:41:b6:d6:6d:83:15:82:8b:12:c0:
         1e:c2:91:19
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUPQGZLgWVX7uoioPAsem60NCaqmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF
NzA0QjVEMDAeFw0yNjA1MDMwMjMzNDRaFw0yNzA1MDIwMjM4NDRaMDMxMTAvBgNV
BAMTKDgyM0Q0NjNEODg5RDlCQjhFMzRDREFBNTJFMTNFQjVFRTZBMzBGMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO8Od1zJWPmni1P6huC8B3yMor
709nTiPECYcYtlG2ZSz6vqP1r/9tIJ1Sev3vSi3vj/puI9+rA5Ks2k1mGZvj+uqP
v8Plzq+P6xahAZzCIXCP4EQgJ6HVR4KsvoAk7yRb/9JnRieIAJgLgFCbja0xYVBQ
FRZzNL9AlaO04MJG8arF58YqFWCNhiO9LEihE2s8hgtJHauqo4hUL1qvXpT0WPQl
ZrYnHtPC4Par9zraMXngEf663lGZaVv0KklvpUJ0uNQwR+iyyl2YM1RVnVg4PXyQ
o9fyQ/VqB6rGIOP7bEqlmkmhifNKxbSpOld1YOH7o4okpnhxxCQxVWY7hJ+TAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUgj1GPYidm7jjTNqlLhPrXuajDxwwHwYDVR0j
BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND
ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC
NUQwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzAzMzJlMzgzMDJlMzkzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzQzMzMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnUFwwDQYJKoZIhvcN
AQELBQADggEBAFfKu5pwSfPneVH1BhgT4vIcYnImk6ZbRNqFD0YktbjmLDeCsZ1s
Oq7t8U1veX8Hdu+QmxaxY3OfNoR2PYIa5gxk/14/OUWWEUgxTE65yKuNC7aPXM4N
ODYvtBUzYS5G8M22bEz4ty8YZXltuQFY93KulyRFEnfSRMJqouLo1IcAYZtV4uRM
v0VNC/4AelpXXRoESyxd7QeZ5+0Dq835Cw2GD1D/f0evwL5WEqLYhwWoJbdNdDTQ
/nJO5QIX5aI12vHXW3lhUqkjoTgBO2VoLsd6Nd4tk8iWlDWazgJ9vhKPg6NdIZa8
69nBycUc4MYrNmPOQbbWbYMVgosSwB7CkRk=
-----END CERTIFICATE-----
Generated at Thu May 7 04:30:36 2026 by rpki-client