Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa
File:                     3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (raw, json)
Hash identifier:          vatB6xTCpKTsE4tbG+JDKUhfyJC22x4PAXCG04Pc2lA=
Subject key identifier:   23:F3:2B:D4:FC:BD:B6:26:6E:4F:EE:31:F3:4B:20:C2:8B:C3:2D:F3
Certificate issuer:       /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
Certificate serial:       62C44B0524E39A04C16B06283B87EC2075EBC3CF
Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa
Signing time:             Sun 03 May 2026 02:47:06 +0000
ROA not before:           Sun 03 May 2026 02:42:06 +0000
ROA not after:            Sun 02 May 2027 02:47:06 +0000
asID:                     137303
IP address blocks:        103.80.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl
                          rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c4:4b:05:24:e3:9a:04:c1:6b:06:28:3b:87:ec:20:75:eb:c3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
        Validity
            Not Before: May  3 02:42:06 2026 GMT
            Not After : May  2 02:47:06 2027 GMT
        Subject: CN=23F32BD4FCBDB6266E4FEE31F34B20C28BC32DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:10:db:f3:1d:55:aa:d9:04:3d:12:b0:b6:
                    f5:1b:72:c1:5a:86:ef:14:dc:23:5d:c1:d8:8d:10:
                    99:ce:d3:37:b3:09:05:08:7e:42:a8:6d:ec:dc:f3:
                    3f:2a:6d:f8:7c:1d:e6:cc:a3:9c:f0:83:b2:57:92:
                    1f:c2:a3:53:83:32:bc:f0:31:e9:98:28:82:01:cf:
                    e0:29:62:b7:78:f7:51:ff:5e:cc:3a:44:25:d2:2f:
                    b7:30:a8:3c:fc:18:f9:9c:98:39:e7:85:26:48:1b:
                    1a:13:5d:d1:15:1c:86:b0:d3:92:90:cd:85:48:2b:
                    d8:6a:ed:ed:a4:41:d1:a8:71:bf:50:2e:7b:24:de:
                    f6:dd:07:af:77:75:e9:25:66:92:b1:c8:b6:53:83:
                    2d:ad:80:d0:33:28:b1:06:ed:1a:2f:42:04:70:bc:
                    54:fe:8c:e5:f6:1a:e0:01:f2:ef:3c:a5:d4:45:bf:
                    78:b9:6d:e4:7a:14:36:cd:b0:ea:4f:71:3d:7e:36:
                    8b:ab:bd:e3:4c:4a:47:57:80:e9:02:ae:71:73:5f:
                    3a:37:2c:f1:37:3d:d8:da:70:34:82:c4:c0:df:c2:
                    6c:af:01:93:aa:11:a3:a1:05:7d:28:56:ef:90:4a:
                    1a:79:49:d3:8e:bd:59:42:eb:ef:5c:59:e0:07:c5:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F3:2B:D4:FC:BD:B6:26:6E:4F:EE:31:F3:4B:20:C2:8B:C3:2D:F3
            X509v3 Authority Key Identifier:
                keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b5:30:be:ba:c8:ce:75:b7:07:93:c7:09:52:0b:02:af:26:
         26:e3:b7:da:89:2c:ac:94:5d:0a:7b:65:46:b6:bb:7d:22:ae:
         73:20:09:66:26:8b:f5:0d:3d:6c:ee:5e:63:e6:ea:6b:ad:be:
         a9:2c:05:35:da:c5:3b:47:33:ae:7a:39:f0:b5:eb:bb:da:54:
         52:e0:fd:c6:6f:eb:ce:0c:50:40:19:42:ce:df:37:4d:e3:78:
         05:50:32:0f:c9:3e:bc:a6:fb:22:49:0c:17:2a:c1:0e:04:62:
         32:ee:ae:14:33:ac:fc:14:a2:ab:91:96:30:f3:37:2c:2c:84:
         b1:69:b8:03:d4:1f:bc:73:39:93:6d:50:d3:d4:51:2d:70:75:
         f7:c2:60:90:64:55:77:bc:ab:eb:50:d2:ad:30:09:66:93:0c:
         54:b9:ee:af:1b:f4:1b:94:e5:72:03:cb:1d:39:fd:ac:f0:8b:
         50:fa:fb:ea:73:70:84:78:e6:ea:a7:c9:0b:5f:6c:73:4b:57:
         04:20:a9:4a:af:23:b9:b7:2a:c8:4f:c7:aa:28:7d:92:0e:e0:
         39:c1:fd:4c:7b:98:d3:f1:5e:00:0e:60:35:e5:7c:ee:88:41:
         92:94:49:02:37:4d:a1:97:b1:58:16:b7:1f:db:e0:d5:d1:fc:
         af:f8:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:17 2026 by rpki-client