Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
File:                     3130332e38302e38302e302f32322d3232203d3e203634333030.roa (raw, json)
Hash identifier:          e/qY4LpsifjFJ8z9K3gWHOX8kQ1mg4k/iAFjqdxwcPM=
Subject key identifier:   9F:DC:56:D2:09:E5:85:5C:8D:66:29:C2:E9:69:9F:1A:65:DC:F0:09
Certificate issuer:       /CN=A33230767964863363DEE33E7BD3F5C204182D74
Certificate serial:       5D491506000A8B871069B389B7015F9B39CBB107
Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
Signing time:             Sun 03 May 2026 02:34:53 +0000
ROA not before:           Sun 03 May 2026 02:29:53 +0000
ROA not after:            Sun 02 May 2027 02:34:53 +0000
asID:                     64300
IP address blocks:        103.80.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl
                          rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:49:15:06:00:0a:8b:87:10:69:b3:89:b7:01:5f:9b:39:cb:b1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74
        Validity
            Not Before: May  3 02:29:53 2026 GMT
            Not After : May  2 02:34:53 2027 GMT
        Subject: CN=9FDC56D209E5855C8D6629C2E9699F1A65DCF009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:ea:db:ac:6a:ff:70:38:c5:e2:c9:df:73:
                    10:07:56:e0:d0:38:16:8c:f9:ee:d7:26:3f:da:5d:
                    49:d8:e8:ff:3e:d6:41:dc:96:4c:81:f1:17:01:e8:
                    d5:8e:5c:39:78:44:6e:e6:4d:58:10:53:00:c7:f3:
                    3c:34:3c:18:cb:c2:a9:d0:79:02:1f:9b:e2:ca:84:
                    39:cf:79:c1:f6:52:1e:53:5d:2a:9b:14:ee:d2:bf:
                    96:35:9e:ac:1f:6d:85:ce:f0:d5:52:a1:60:af:b3:
                    4f:5c:9d:6c:61:12:80:cf:af:3e:3c:77:5e:a6:5b:
                    7d:91:0f:9d:12:22:0b:05:02:1d:4e:29:96:02:d8:
                    30:d5:41:ef:6b:8b:bc:db:45:20:a1:87:e8:8e:59:
                    b7:30:ea:ee:f7:ed:f9:39:71:df:8b:38:4e:3e:e4:
                    2c:18:0e:28:2a:9a:cc:fa:be:fa:30:c0:59:08:a6:
                    af:b0:93:42:cb:2f:d0:87:be:0b:c3:c1:86:71:f8:
                    85:2f:c2:03:ed:41:89:92:bc:c3:9b:32:99:b1:0f:
                    0d:33:a1:91:c5:ad:54:34:32:6b:e4:31:39:6a:eb:
                    98:71:6d:61:90:42:f2:23:9d:99:41:ed:9d:6e:c3:
                    3c:52:12:5d:8b:c5:db:eb:4d:b3:f4:e7:f8:85:a2:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DC:56:D2:09:E5:85:5C:8D:66:29:C2:E9:69:9F:1A:65:DC:F0:09
            X509v3 Authority Key Identifier:
                keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:ea:bc:ab:1a:3a:df:62:f5:e9:ef:27:9e:4e:6a:04:cb:67:
         7e:64:38:77:70:2c:10:78:07:1d:19:23:c9:d9:36:04:06:66:
         f3:88:d0:4e:88:55:a2:96:c1:39:c3:8a:d9:4d:eb:f7:45:f4:
         ea:49:3b:60:8e:83:87:75:dd:e6:bd:28:cf:0b:0c:29:a3:c3:
         34:62:83:1c:87:9f:f0:ca:6c:52:3e:a0:1e:af:19:6f:e1:96:
         f1:f8:da:dc:31:18:dc:af:85:ef:0f:7c:ac:4c:a2:a1:f4:10:
         6d:d9:88:51:bd:d3:a6:a1:ca:30:79:14:00:0f:43:14:67:75:
         4e:ad:40:d3:77:c4:64:90:56:88:92:78:64:28:51:3b:7e:db:
         1b:01:d4:81:db:b6:a8:d9:c7:3c:9a:3e:c3:34:b7:ce:66:3c:
         03:68:15:a6:4d:a4:28:b4:66:7b:61:fb:8b:ae:c0:9c:83:b9:
         1a:e2:69:eb:fe:6a:85:df:0e:5a:5b:aa:17:63:6b:e3:64:99:
         11:0d:93:f4:27:07:81:15:4d:e4:80:58:33:da:d2:23:77:ab:
         bd:7c:7f:ec:bf:d8:43:05:63:a2:b8:73:e5:d3:79:77:ed:1e:
         46:b6:83:19:b2:27:34:09:a4:fa:50:fc:c9:d1:43:75:ff:31:
         74:70:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:05 2026 by rpki-client