Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa
File:                     3130332e38302e39352e302f32342d3234203d3e20313439393138.roa (raw, json)
Hash identifier:          A6UMTyn/XyDhgO7CmlSw+G7+3RzdBJ8R2DM5W8WpS60=
Subject key identifier:   93:25:90:7F:36:3E:DF:6F:7F:BD:9A:E4:01:4C:82:39:72:66:6E:A5
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       0165D850B7B2F6692670EB939C8CE42DC06236FC
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa
Signing time:             Sun 03 May 2026 02:38:48 +0000
ROA not before:           Sun 03 May 2026 02:33:48 +0000
ROA not after:            Sun 02 May 2027 02:38:48 +0000
asID:                     149918
IP address blocks:        103.80.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:65:d8:50:b7:b2:f6:69:26:70:eb:93:9c:8c:e4:2d:c0:62:36:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:48 2026 GMT
            Not After : May  2 02:38:48 2027 GMT
        Subject: CN=9325907F363EDF6F7FBD9AE4014C823972666EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b7:c1:89:f4:88:1a:90:54:46:cd:1e:6f:75:
                    0d:86:61:e2:1f:d9:86:28:35:d2:aa:1a:7f:ac:1d:
                    ba:d7:7f:53:4f:68:3e:b2:75:dd:82:bf:51:62:61:
                    e5:a7:be:ee:a9:8c:db:da:09:d4:bb:a9:e1:e4:c3:
                    dc:91:4c:e2:b8:46:b9:88:4c:3d:1d:cd:2e:44:8a:
                    27:6c:d3:46:9a:6e:44:8a:11:34:33:e1:5b:ba:11:
                    44:14:e3:60:19:25:87:35:18:4b:59:da:ce:9f:78:
                    df:f7:77:f7:66:4d:76:17:59:cc:4f:6a:24:61:ba:
                    fe:a5:29:ba:6a:c3:43:98:19:00:df:cf:97:0b:f1:
                    8a:4e:79:42:18:b9:d9:7c:95:59:99:29:f0:2f:98:
                    b9:32:00:03:f2:8a:6a:4e:d9:e8:6b:2e:14:88:53:
                    7f:99:09:22:bb:84:1f:82:61:48:dd:92:46:7e:c8:
                    7f:c7:c5:a1:9a:c6:42:d0:01:c4:9b:54:02:d8:db:
                    74:4d:9d:82:22:21:ba:e6:7f:9c:2d:c7:5f:02:b8:
                    48:d2:96:12:bf:77:20:23:3d:8e:b0:c9:90:b5:e7:
                    58:44:2f:5b:fc:33:d0:98:9e:2f:c6:cd:7a:78:40:
                    b4:1b:3f:2c:1c:00:a1:3f:5a:be:2e:38:0f:da:f7:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:25:90:7F:36:3E:DF:6F:7F:BD:9A:E4:01:4C:82:39:72:66:6E:A5
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:15:1a:53:17:e4:25:0d:17:48:50:ad:e3:c3:73:17:c9:26:
         b7:7b:b5:d4:a9:ac:78:58:21:02:89:d6:77:82:69:e9:1e:33:
         71:bb:8e:86:d5:c8:59:93:6f:6f:c7:5e:bd:46:34:57:20:ea:
         26:08:17:57:f8:55:87:25:d0:0b:b0:58:8b:de:ac:0d:52:dd:
         5a:34:21:2c:a5:fc:05:a5:12:9d:20:cf:7e:89:92:46:26:4a:
         ab:6a:c1:8d:70:cb:1c:cd:95:37:0c:e2:2d:f0:5d:62:85:25:
         fc:ec:60:dd:99:e6:7b:cc:ae:10:46:64:59:9c:88:8c:85:b3:
         8f:46:1a:76:2b:7b:09:7a:a0:d6:35:ba:b0:0c:60:1c:b0:7b:
         14:0e:e0:56:4f:81:55:c1:e7:c2:37:8f:56:de:cb:bb:a2:de:
         38:af:fe:bb:30:1d:63:46:28:18:44:93:93:8b:a2:96:9b:d0:
         e0:0d:c1:08:76:36:a6:cf:1d:ef:30:0d:e0:bc:50:80:81:d3:
         55:0a:39:90:d2:bd:8c:ef:ce:dd:d1:f3:14:e0:21:85:67:00:
         ec:44:07:22:23:4a:0c:3b:1a:ed:bf:c4:bd:c2:7e:94:1a:da:
         e0:55:74:92:36:db:35:15:96:7f:fa:3a:4a:da:32:c5:0e:a0:
         a2:ff:86:e3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAWXYULey9mkmcOuTnIzkLcBiNvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF
NzA0QjVEMDAeFw0yNjA1MDMwMjMzNDhaFw0yNzA1MDIwMjM4NDhaMDMxMTAvBgNV
BAMTKDkzMjU5MDdGMzYzRURGNkY3RkJEOUFFNDAxNEM4MjM5NzI2NjZFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2t8GJ9IgakFRGzR5vdQ2GYeIf
2YYoNdKqGn+sHbrXf1NPaD6ydd2Cv1FiYeWnvu6pjNvaCdS7qeHkw9yRTOK4RrmI
TD0dzS5Eiids00aabkSKETQz4Vu6EUQU42AZJYc1GEtZ2s6feN/3d/dmTXYXWcxP
aiRhuv6lKbpqw0OYGQDfz5cL8YpOeUIYudl8lVmZKfAvmLkyAAPyimpO2ehrLhSI
U3+ZCSK7hB+CYUjdkkZ+yH/HxaGaxkLQAcSbVALY23RNnYIiIbrmf5wtx18CuEjS
lhK/dyAjPY6wyZC151hEL1v8M9CYni/GzXp4QLQbPywcAKE/Wr4uOA/a9zI3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUkyWQfzY+329/vZrkAUyCOXJmbqUwHwYDVR0j
BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND
ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC
NUQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzAzMzJlMzgzMDJlMzkzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzOTM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdQXzANBgkqhkiG
9w0BAQsFAAOCAQEAMhUaUxfkJQ0XSFCt48NzF8kmt3u11KmseFghAonWd4Jp6R4z
cbuOhtXIWZNvb8devUY0VyDqJggXV/hVhyXQC7BYi96sDVLdWjQhLKX8BaUSnSDP
fomSRiZKq2rBjXDLHM2VNwziLfBdYoUl/Oxg3Znme8yuEEZkWZyIjIWzj0Yadit7
CXqg1jW6sAxgHLB7FA7gVk+BVcHnwjePVt7Lu6LeOK/+uzAdY0YoGESTk4uilpvQ
4A3BCHY2ps8d7zAN4LxQgIHTVQo5kNK9jO/O3dHzFOAhhWcA7EQHIiNKDDsa7b/E
vcJ+lBra4FV0kjbbNRWWf/o6StoyxQ6gov+G4w==
-----END CERTIFICATE-----
Generated at Thu May 7 04:30:49 2026 by rpki-client