Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
File:                     3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (raw, json)
Hash identifier:          8eXmIfa2WKiyCToWNIZ0+G7GoNuy3hDgnxZJe2S+QFo=
Subject key identifier:   83:8E:CD:D8:EB:F5:E5:FD:1C:4F:9A:E8:46:2E:F4:49:CB:0B:8A:0E
Certificate issuer:       /CN=EB84D1FD50105DB5E145FF5740362A466529E4BC
Certificate serial:       5B83807EE47EA3C36A76A361523D6DBE0F20536A
Authority key identifier: EB:84:D1:FD:50:10:5D:B5:E1:45:FF:57:40:36:2A:46:65:29:E4:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
Signing time:             Sun 03 May 2026 02:43:17 +0000
ROA not before:           Sun 03 May 2026 02:38:17 +0000
ROA not after:            Sun 02 May 2027 02:43:17 +0000
asID:                     151582
IP address blocks:        103.80.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.crl
                          rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:83:80:7e:e4:7e:a3:c3:6a:76:a3:61:52:3d:6d:be:0f:20:53:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84D1FD50105DB5E145FF5740362A466529E4BC
        Validity
            Not Before: May  3 02:38:17 2026 GMT
            Not After : May  2 02:43:17 2027 GMT
        Subject: CN=838ECDD8EBF5E5FD1C4F9AE8462EF449CB0B8A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:b8:05:21:e7:94:ef:1c:04:2e:04:de:43:
                    b4:d3:95:2c:08:8f:82:02:5e:98:3b:31:39:24:b3:
                    05:f2:1c:6d:a9:4d:94:8f:29:80:ff:2f:11:77:4a:
                    a2:15:d3:4e:52:aa:8d:77:1b:01:6b:9e:6f:d0:7e:
                    1b:a5:ca:84:d9:d7:3d:52:23:04:db:59:e3:79:0b:
                    1c:20:a7:77:65:91:11:75:3a:15:04:63:06:ae:7c:
                    d0:a8:69:08:da:70:07:54:25:07:80:b9:a3:09:7f:
                    08:2a:bb:4b:25:8e:e6:12:4f:92:85:9e:eb:4f:35:
                    bb:11:08:38:81:a9:de:42:79:ff:0c:30:98:96:1a:
                    a6:8d:26:e2:9b:c2:b8:65:15:08:ec:54:d1:3c:86:
                    a0:1a:f0:9b:73:6d:a1:59:ed:e3:fe:04:6b:ff:dd:
                    6f:0c:23:68:dc:b5:14:d5:75:99:fb:85:8b:51:68:
                    b0:44:75:44:ec:cb:99:bb:0a:46:e5:75:71:10:2e:
                    02:a9:d5:7a:cf:00:aa:8f:f8:f5:ab:c8:79:73:b1:
                    b9:55:17:ee:59:f5:05:1f:96:5e:33:bf:1b:73:1a:
                    ac:f0:ac:33:31:6a:39:3a:9d:2b:41:3f:a2:96:11:
                    8f:38:a4:d2:12:9d:d4:97:a4:e3:07:ed:2a:94:af:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8E:CD:D8:EB:F5:E5:FD:1C:4F:9A:E8:46:2E:F4:49:CB:0B:8A:0E
            X509v3 Authority Key Identifier:
                keyid:EB:84:D1:FD:50:10:5D:B5:E1:45:FF:57:40:36:2A:46:65:29:E4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/EB84D1FD50105DB5E145FF5740362A466529E4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB84D1FD50105DB5E145FF5740362A466529E4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b4:e5:c8:05:0d:ba:70:c3:35:f2:2d:60:f3:e7:0c:1d:70:
         1c:cd:31:1d:8d:e2:f1:a3:ef:72:f1:52:3d:d5:f0:e0:c4:ea:
         09:16:33:9c:97:53:57:be:e2:4a:4f:20:d8:de:99:4a:37:6a:
         53:8f:d8:05:51:8f:48:ff:89:a0:09:93:27:e4:ec:b7:ff:29:
         73:34:fd:30:86:08:2e:97:b3:dc:65:6a:0d:8c:a3:9b:e4:22:
         e5:aa:58:aa:97:b2:5d:98:f6:70:b7:9b:18:71:37:cd:65:4e:
         e7:a8:87:cd:1e:78:72:03:a9:4b:42:53:55:d9:85:23:66:1b:
         d1:d0:30:3a:23:25:13:b5:62:3d:17:3f:80:da:16:8a:cc:ac:
         e3:aa:88:f3:39:b9:ae:59:c0:bc:e3:82:5e:ca:3a:a0:49:a4:
         76:a8:d7:71:c4:f4:e8:f0:b3:36:af:c9:f1:29:33:e9:7c:88:
         4c:09:b2:96:66:9d:42:73:e0:b1:fa:f7:f4:a9:6c:30:16:85:
         2a:cd:29:d1:9f:91:7b:17:a2:a5:8c:96:d6:48:e2:bf:c9:ff:
         8a:83:14:af:b9:2a:52:7a:bc:bb:d7:bf:f3:e5:ef:ba:11:26:
         73:13:68:c7:aa:c0:cd:f5:0c:ed:8f:83:35:90:58:37:e4:96:
         8e:82:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:56 2026 by rpki-client