Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa
File:                     3130332e38302e39342e302f32332d3233203d3e20313439393138.roa (raw, json)
Hash identifier:          4jEoT2yp4nQh1GxDJ2vr46xPV+KhLccaxekLZ2JTVd8=
Subject key identifier:   E9:5A:2A:68:5F:A7:59:D0:D8:DC:FF:F2:3F:35:FB:76:BB:F3:FF:B5
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       701F29429897FAE8400B8CDCA624D404B09C6899
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa
Signing time:             Sun 03 May 2026 02:38:42 +0000
ROA not before:           Sun 03 May 2026 02:33:42 +0000
ROA not after:            Sun 02 May 2027 02:38:42 +0000
asID:                     149918
IP address blocks:        103.80.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1f:29:42:98:97:fa:e8:40:0b:8c:dc:a6:24:d4:04:b0:9c:68:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:42 2026 GMT
            Not After : May  2 02:38:42 2027 GMT
        Subject: CN=E95A2A685FA759D0D8DCFFF23F35FB76BBF3FFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:6d:93:ef:35:02:6a:87:d5:a3:f4:a2:b4:
                    80:fb:73:33:a5:f3:05:c9:58:71:dc:a1:89:81:36:
                    6e:18:28:cb:ba:f8:49:d9:0c:5c:01:56:1b:a0:5c:
                    a5:36:dc:d1:3e:fa:38:ed:6f:c3:b7:36:df:a3:86:
                    4f:26:5c:87:41:dc:4e:18:28:25:40:29:97:75:cc:
                    ab:ce:52:fb:9c:19:84:6c:13:8a:e6:60:b4:ec:d2:
                    84:e8:61:c6:94:24:0f:1a:42:ce:f1:66:69:ec:e2:
                    b6:32:03:50:e2:20:e1:94:9a:5d:08:93:8b:a9:58:
                    42:cb:be:6c:cb:49:36:54:b0:3b:e3:a7:39:86:f9:
                    2d:f1:15:9a:b6:a2:69:92:0a:df:fc:c2:ce:33:14:
                    d7:9b:86:b3:57:16:28:4f:85:3f:8f:74:f1:e0:31:
                    9f:56:e3:fc:0c:da:b0:c2:17:d2:c0:0c:aa:db:0d:
                    97:f7:e7:89:50:d2:00:d7:cc:be:dd:2d:25:f0:e6:
                    cc:8e:b0:ac:09:21:9e:35:cc:83:38:ff:21:0b:35:
                    e5:10:8e:71:e9:01:16:77:39:3b:2f:45:6b:9a:c3:
                    b1:50:2a:5c:74:ee:2d:83:2d:c1:3c:98:45:73:a6:
                    27:d4:3c:ca:2d:75:4d:dd:64:c0:f6:ec:00:ae:04:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5A:2A:68:5F:A7:59:D0:D8:DC:FF:F2:3F:35:FB:76:BB:F3:FF:B5
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:df:04:24:02:96:99:af:11:35:74:5c:b2:5a:fc:71:13:
         d6:7d:d5:76:42:3a:3a:35:26:ad:30:76:a5:fd:22:4c:c9:a2:
         f1:eb:2a:1c:92:9d:78:ff:b2:7d:2b:63:d9:b3:28:f2:58:fe:
         5c:28:f4:03:b1:3a:1c:c6:6c:f1:e5:cf:14:ee:22:f6:4d:12:
         9c:19:9a:7a:f6:8a:4d:eb:c2:42:a3:79:8f:77:c9:b6:e2:e6:
         be:9e:2a:20:c2:e1:e2:ee:e8:e7:8d:70:f1:0c:44:a7:9b:60:
         03:c6:e3:ea:cd:c0:5f:63:53:10:93:e4:8d:0c:77:b8:55:90:
         b9:69:2b:2b:7f:9b:de:40:5d:e9:33:c9:36:9e:a5:9a:7b:7b:
         a3:18:6d:de:06:27:5a:f6:3d:d0:25:4f:35:63:7d:8d:3d:c0:
         d5:0d:f8:cd:5c:f3:4a:d6:4b:3d:f2:d5:e5:1b:c4:cc:02:ab:
         7a:42:4e:0e:9e:01:88:9f:46:5c:0f:65:de:7d:2b:38:98:8c:
         26:10:36:49:59:e9:d6:17:4e:2d:8e:45:ec:8f:55:af:99:03:
         ac:cc:06:62:68:a9:49:3d:c8:06:c1:b2:62:7e:7c:68:55:48:
         68:9d:40:98:a7:ff:df:94:39:3c:97:99:07:a4:32:77:4e:72:
         12:5d:47:1e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUcB8pQpiX+uhAC4zcpiTUBLCcaJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF
NzA0QjVEMDAeFw0yNjA1MDMwMjMzNDJaFw0yNzA1MDIwMjM4NDJaMDMxMTAvBgNV
BAMTKEU5NUEyQTY4NUZBNzU5RDBEOERDRkZGMjNGMzVGQjc2QkJGM0ZGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkF22T7zUCaofVo/SitID7czOl
8wXJWHHcoYmBNm4YKMu6+EnZDFwBVhugXKU23NE++jjtb8O3Nt+jhk8mXIdB3E4Y
KCVAKZd1zKvOUvucGYRsE4rmYLTs0oToYcaUJA8aQs7xZmns4rYyA1DiIOGUml0I
k4upWELLvmzLSTZUsDvjpzmG+S3xFZq2ommSCt/8ws4zFNebhrNXFihPhT+PdPHg
MZ9W4/wM2rDCF9LADKrbDZf354lQ0gDXzL7dLSXw5syOsKwJIZ41zIM4/yELNeUQ
jnHpARZ3OTsvRWuaw7FQKlx07i2DLcE8mEVzpifUPMotdU3dZMD27ACuBMg9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6VoqaF+nWdDY3P/yPzX7drvz/7UwHwYDVR0j
BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND
ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC
NUQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzAzMzJlMzgzMDJlMzkzNDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzQzOTM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdQXjANBgkqhkiG
9w0BAQsFAAOCAQEAK0DfBCQClpmvETV0XLJa/HET1n3VdkI6OjUmrTB2pf0iTMmi
8esqHJKdeP+yfStj2bMo8lj+XCj0A7E6HMZs8eXPFO4i9k0SnBmaevaKTevCQqN5
j3fJtuLmvp4qIMLh4u7o541w8QxEp5tgA8bj6s3AX2NTEJPkjQx3uFWQuWkrK3+b
3kBd6TPJNp6lmnt7oxht3gYnWvY90CVPNWN9jT3A1Q34zVzzStZLPfLV5RvEzAKr
ekJODp4BiJ9GXA9l3n0rOJiMJhA2SVnp1hdOLY5F7I9Vr5kDrMwGYmipST3IBsGy
Yn58aFVIaJ1AmKf/35Q5PJeZB6Qyd05yEl1HHg==
-----END CERTIFICATE-----
Generated at Thu May 7 04:29:39 2026 by rpki-client