Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa
File:                     3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (raw, json)
Hash identifier:          w7m0P2uotwUdeBK8OhSkycahjMGtA6/23NDdSEsWGzc=
Subject key identifier:   15:26:E1:A3:FA:34:8F:7D:19:E1:93:51:16:34:90:20:F6:A8:92:B4
Certificate issuer:       /CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA
Certificate serial:       089A0FC55720951EB28008774DE2A8F687867570
Authority key identifier: 98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa
Signing time:             Sun 03 May 2026 03:11:42 +0000
ROA not before:           Sun 03 May 2026 03:06:42 +0000
ROA not after:            Sun 02 May 2027 03:11:42 +0000
asID:                     153092
IP address blocks:        103.80.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl
                          rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9a:0f:c5:57:20:95:1e:b2:80:08:77:4d:e2:a8:f6:87:86:75:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA
        Validity
            Not Before: May  3 03:06:42 2026 GMT
            Not After : May  2 03:11:42 2027 GMT
        Subject: CN=1526E1A3FA348F7D19E1935116349020F6A892B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1e:f1:96:4d:a3:b0:ac:e6:9d:a0:a3:44:74:
                    3f:fd:1a:2c:fc:cb:c0:8d:d3:82:8f:0e:46:71:3a:
                    d0:83:4d:69:22:8b:da:5a:91:f9:f5:38:0f:48:18:
                    10:4b:26:9e:25:89:29:b9:44:07:fa:2b:95:9a:f3:
                    6e:4d:db:2a:b1:12:24:ed:28:b8:ea:27:6c:7a:4e:
                    c2:c8:6a:c8:94:2a:da:e4:1f:73:a2:bf:f4:ea:fe:
                    ac:af:a4:22:1f:bd:a9:e3:e4:aa:f4:05:bd:c6:6b:
                    76:5c:f9:b2:1e:ba:75:8b:86:53:46:64:c1:e6:b8:
                    76:b2:dd:70:3e:2c:e5:a6:87:b4:25:37:8a:c8:96:
                    14:f8:32:86:69:cf:b9:b4:84:a5:d8:61:0b:52:12:
                    9b:d8:ff:63:57:18:a3:71:b9:64:7e:cf:8e:7e:e6:
                    75:38:12:b9:83:4a:ac:60:61:4a:aa:bd:52:55:d9:
                    d0:03:c8:c1:ae:fb:dd:3b:82:a5:fc:76:a8:1c:f2:
                    dc:c6:e4:92:45:02:ee:39:18:c5:b3:77:5c:cb:88:
                    1d:ef:60:31:ef:ca:a2:17:fd:15:73:cf:22:d3:49:
                    cd:a9:14:14:3a:24:74:d1:76:59:f2:51:0a:94:46:
                    91:67:c3:4c:a6:c9:40:02:8a:43:5f:14:64:6a:d6:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:26:E1:A3:FA:34:8F:7D:19:E1:93:51:16:34:90:20:F6:A8:92:B4
            X509v3 Authority Key Identifier:
                keyid:98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7e:db:82:5c:47:fa:7a:78:28:64:62:d3:2d:0d:3a:49:9f:
         12:58:9a:b6:61:2c:27:73:d1:b2:4f:78:e5:77:18:42:c4:21:
         93:e8:a3:87:e9:85:ce:8f:b3:fa:7a:24:83:e6:56:01:04:1e:
         13:d5:b7:ca:8e:d1:b0:c9:2d:e8:9e:41:24:73:74:bb:2c:9d:
         49:55:a0:4f:8b:9b:46:3a:a6:ca:2e:53:66:94:de:9f:54:4e:
         3d:4f:1c:03:f5:95:1b:ed:fb:8f:a2:a5:7c:f1:43:99:8b:62:
         6e:f6:3c:13:07:cb:d0:e3:0f:b5:4b:77:21:38:ea:f4:fc:5e:
         c6:dc:54:cb:02:a3:63:f1:5a:13:98:b8:ed:c9:68:0f:1e:9a:
         14:64:c1:6f:30:ee:2b:1d:cb:bf:f1:4d:46:6c:08:4b:66:ca:
         2a:bf:02:a7:f7:fa:6e:d8:f9:38:e8:9c:dc:c2:fa:64:9a:32:
         70:57:32:9e:2b:c7:25:9c:7d:0f:c8:63:8f:0a:ec:93:2e:cd:
         5b:5c:0b:08:dc:8d:11:67:ec:99:53:a5:05:90:b6:01:cf:e9:
         19:9d:2b:26:cb:6c:58:ee:87:65:1e:89:36:23:0e:0e:6d:96:
         bb:35:e4:6e:a2:f8:44:8b:0e:06:b7:4b:71:b4:c6:6a:7b:34:
         d1:f6:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:19 2026 by rpki-client