Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e31302e38302e302f32342d3234203d3e203536323435.roa
File:                     3130332e31302e38302e302f32342d3234203d3e203536323435.roa (raw, json)
Hash identifier:          QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=
Subject key identifier:   CF:A5:FC:AB:1D:9B:AF:78:D7:95:FB:B4:B4:56:AD:A2:AA:43:F4:6F
Certificate issuer:       /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462
Certificate serial:       7DF668B54920565D4E12C073296854AF56EF8BAD
Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e31302e38302e302f32342d3234203d3e203536323435.roa
Signing time:             Sun 03 May 2026 02:37:35 +0000
ROA not before:           Sun 03 May 2026 02:32:35 +0000
ROA not after:            Sun 02 May 2027 02:37:35 +0000
asID:                     56245
IP address blocks:        103.10.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl
                          rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f6:68:b5:49:20:56:5d:4e:12:c0:73:29:68:54:af:56:ef:8b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462
        Validity
            Not Before: May  3 02:32:35 2026 GMT
            Not After : May  2 02:37:35 2027 GMT
        Subject: CN=CFA5FCAB1D9BAF78D795FBB4B456ADA2AA43F46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:d2:6d:81:0d:c4:d3:33:31:ba:09:76:9e:
                    b7:e9:b2:1c:1c:6e:7f:34:3b:32:d1:d6:78:45:28:
                    30:3b:3d:58:e9:5d:9d:ce:3a:28:3b:83:36:60:b7:
                    6f:36:a3:64:52:e6:c6:4a:d1:3a:c1:1b:c3:54:25:
                    af:df:36:5d:ca:32:8b:22:63:2d:9b:ae:23:0c:53:
                    2e:57:ed:c6:78:ce:71:58:b1:5c:4e:d6:26:62:0b:
                    64:82:be:7d:7b:f4:04:75:82:ac:72:ab:db:2a:29:
                    62:0f:25:b6:eb:a3:0c:3e:b4:7d:4b:04:ab:5f:df:
                    2e:d6:9d:4c:4f:ed:c1:ee:32:2e:06:ac:63:11:d0:
                    59:82:20:2a:68:0b:58:d4:62:82:09:3b:fc:34:35:
                    d4:37:2b:20:a1:8c:69:be:6d:13:8e:88:9d:36:be:
                    ec:ae:7d:9d:80:b3:87:1a:9c:d4:b4:98:d5:5c:a5:
                    eb:20:a0:80:db:e9:a9:4f:20:36:40:65:0c:50:55:
                    bf:0a:60:5e:c6:c4:eb:81:f0:d7:16:54:b2:42:80:
                    d0:af:f6:55:82:f9:2b:dd:8b:7f:f8:93:35:d3:18:
                    ec:1a:ea:4c:70:c9:44:d7:df:a4:3d:cd:6b:de:6a:
                    92:1d:b4:50:2a:4d:ad:65:6d:e4:bc:a6:30:3a:73:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:FC:AB:1D:9B:AF:78:D7:95:FB:B4:B4:56:AD:A2:AA:43:F4:6F
            X509v3 Authority Key Identifier:
                keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e31302e38302e302f32342d3234203d3e203536323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:85:a1:cc:53:2e:20:61:2a:38:b1:88:82:13:02:78:f4:b4:
         6d:03:17:1c:a5:19:af:b6:59:1e:27:3f:a5:7a:39:0c:92:d6:
         e8:05:b0:7e:e9:d5:26:d0:7a:23:82:fe:db:e4:65:f3:05:3e:
         f1:a3:83:64:1d:c4:4c:b8:73:b6:1c:5b:9e:f1:da:d9:21:42:
         ab:a7:59:42:90:28:23:35:b4:34:be:e9:98:28:89:27:b8:0e:
         35:20:a0:b1:6c:9e:a8:27:6f:5c:65:6c:90:b5:86:06:c9:80:
         1b:f4:00:ba:3a:c1:53:9b:fe:ea:50:04:00:44:4f:17:ed:70:
         9c:9a:05:ee:44:9a:04:0a:97:5c:b8:2a:f3:60:3e:3f:eb:4d:
         e4:79:37:42:b3:5f:cf:ba:b8:95:97:65:a9:d2:b5:3c:68:99:
         4b:ba:4b:20:28:9c:9a:0d:53:14:a3:cf:54:20:6b:64:30:c3:
         8e:87:fa:63:cd:4e:08:10:4e:4e:6b:24:03:cd:20:24:01:de:
         9a:22:67:3f:9b:89:d6:6a:71:74:02:af:96:6a:05:73:82:7d:
         25:f0:15:30:c5:de:9f:9d:1d:16:48:4e:e2:c8:0e:28:a3:15:
         43:36:0e:1b:ea:00:d0:43:19:b7:a7:ea:8c:ef:aa:44:52:c5:
         af:be:ce:fc
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUffZotUkgVl1OEsBzKWhUr1bvi60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZBRkQ2NUFDNjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4
MDc5RjQ2MjAeFw0yNjA1MDMwMjMyMzVaFw0yNzA1MDIwMjM3MzVaMDMxMTAvBgNV
BAMTKENGQTVGQ0FCMUQ5QkFGNzhENzk1RkJCNEI0NTZBREEyQUE0M0Y0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYdJtgQ3E0zMxugl2nrfpshwc
bn80OzLR1nhFKDA7PVjpXZ3OOig7gzZgt282o2RS5sZK0TrBG8NUJa/fNl3KMosi
Yy2briMMUy5X7cZ4znFYsVxO1iZiC2SCvn179AR1gqxyq9sqKWIPJbbroww+tH1L
BKtf3y7WnUxP7cHuMi4GrGMR0FmCICpoC1jUYoIJO/w0NdQ3KyChjGm+bROOiJ02
vuyufZ2As4canNS0mNVcpesgoIDb6alPIDZAZQxQVb8KYF7GxOuB8NcWVLJCgNCv
9lWC+Svdi3/4kzXTGOwa6kxwyUTX36Q9zWveapIdtFAqTa1lbeS8pjA6c6ttAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUz6X8qx2br3jXlfu0tFatoqpD9G8wHwYDVR0j
BBgwFoAUpq/WWsZtTrcCeu1fiY6OzYB59GIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjA4ODY4MDUtM2I4NS00YzViLTliNmEtZDYyYWQ1NmE2NmFjLzAvQTZBRkQ2NUFD
NjZENEVCNzAyN0FFRDVGODk4RThFQ0Q4MDc5RjQ2Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNkFGRDY1QUM2NkQ0RUI3MDI3QUVENUY4OThFOEVDRDgwNzlG
NDYyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwODg2ODA1LTNiODUtNGM1Yi05
YjZhLWQ2MmFkNTZhNjZhYy8wLzMxMzAzMzJlMzEzMDJlMzgzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzYzMjM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnClAwDQYJKoZIhvcN
AQELBQADggEBAEiFocxTLiBhKjixiIITAnj0tG0DFxylGa+2WR4nP6V6OQyS1ugF
sH7p1SbQeiOC/tvkZfMFPvGjg2QdxEy4c7YcW57x2tkhQqunWUKQKCM1tDS+6Zgo
iSe4DjUgoLFsnqgnb1xlbJC1hgbJgBv0ALo6wVOb/upQBABETxftcJyaBe5EmgQK
l1y4KvNgPj/rTeR5N0KzX8+6uJWXZanStTxomUu6SyAonJoNUxSjz1Qga2Qww46H
+mPNTggQTk5rJAPNICQB3poiZz+bidZqcXQCr5ZqBXOCfSXwFTDF3p+dHRZITuLI
DiijFUM2DhvqANBDGben6ozvqkRSxa++zvw=
-----END CERTIFICATE-----
Generated at Wed May 13 05:36:09 2026 by rpki-client