Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39312e302f32342d3234203d3e20313337333033.roa
File:                     3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (raw, json)
Hash identifier:          nLub1P+aFMPWReFe8FfiX+yqIND5D1X2l5ebLcrAixg=
Subject key identifier:   9E:44:42:21:9E:BA:17:AB:15:27:84:EF:86:72:17:81:A0:10:95:01
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       49066F54CFD041EE4351ABF40C7444774D10D3F7
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39312e302f32342d3234203d3e20313337333033.roa
Signing time:             Thu 07 Aug 2025 06:00:02 +0000
ROA not before:           Thu 07 Aug 2025 05:55:02 +0000
ROA not after:            Thu 06 Aug 2026 06:00:02 +0000
asID:                     137303
IP address blocks:        103.80.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 15 Aug 2025 06:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:06:6f:54:cf:d0:41:ee:43:51:ab:f4:0c:74:44:77:4d:10:d3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Aug  7 05:55:02 2025 GMT
            Not After : Aug  6 06:00:02 2026 GMT
        Subject: CN=9E4442219EBA17AB152784EF86721781A0109501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:38:56:e0:e3:3c:b0:2d:65:b6:5f:64:a1:
                    59:bf:7d:30:16:aa:38:43:ac:60:31:3a:ab:65:40:
                    d5:b3:95:f0:be:2d:f0:72:46:f9:87:5c:f0:a8:53:
                    fb:c9:04:70:cb:1a:19:72:d5:55:31:b3:e2:57:d0:
                    77:c1:11:81:0d:ef:a6:91:a1:82:44:68:8f:e8:86:
                    6e:e8:a9:a8:55:27:ce:e7:cd:7b:02:17:74:be:9b:
                    3e:51:31:77:b8:0f:e5:8e:e8:b2:8f:71:67:0d:1e:
                    a9:5c:b3:35:20:3e:9b:e5:03:b9:92:56:51:99:91:
                    37:ec:33:44:b5:6b:ce:0d:e7:c6:d1:d4:fd:5c:ea:
                    d7:09:03:f8:d1:93:00:4c:cd:90:3c:cb:51:8d:f1:
                    22:d3:07:33:09:c5:85:51:f6:67:28:55:8f:d1:dc:
                    24:58:f9:aa:b5:10:55:37:14:2a:26:a3:45:36:bd:
                    2b:c7:cc:4d:f5:f2:1f:fa:53:10:8e:3f:d3:7a:0d:
                    9f:ac:5e:6d:4c:98:af:44:50:97:fd:a0:0c:9c:1f:
                    99:09:60:ee:4e:82:26:75:3c:73:42:39:0f:bc:b8:
                    67:68:c9:92:09:9c:13:17:ee:1c:2d:2e:67:8f:6c:
                    b5:e9:95:f8:87:63:c5:8f:89:37:27:7f:07:45:18:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:44:42:21:9E:BA:17:AB:15:27:84:EF:86:72:17:81:A0:10:95:01
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39312e302f32342d3234203d3e20313337333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d7:a2:8c:ef:24:6a:e4:18:ed:08:69:e9:bb:cc:9e:db:aa:
         ab:e1:ae:08:34:57:9f:45:b2:09:5b:f5:8e:90:f2:a8:8e:22:
         ff:47:79:4e:1c:12:4d:8a:f6:8a:b3:64:b8:83:e3:07:87:30:
         2f:a5:ae:2b:12:ba:75:ad:65:fd:26:e7:b2:0f:fe:90:52:28:
         58:78:48:91:5e:07:35:61:5b:49:04:18:db:36:d7:a8:82:65:
         89:44:3b:95:00:93:1d:5d:7b:d3:58:9b:13:3d:d5:4b:d2:fd:
         41:77:a7:3a:02:eb:bc:88:3b:1c:96:44:a3:28:62:f8:99:f6:
         28:82:2a:3a:46:43:8c:b5:42:dc:9b:d6:99:ce:cc:0a:c7:48:
         3d:7b:8e:39:d3:64:36:ac:97:40:94:16:5f:41:fc:88:25:ec:
         ce:4e:2d:66:a9:eb:e5:b8:40:91:ba:70:ce:3c:39:27:f6:c1:
         b9:d2:07:ea:4b:11:f0:3c:df:57:e0:71:93:04:5c:6c:99:50:
         b1:db:16:b4:a7:ba:36:75:3e:db:8c:2a:61:d6:33:b4:ad:25:
         69:1f:3a:82:ee:47:40:12:d6:89:9b:2f:3a:e2:71:3c:94:f7:
         86:3b:eb:d4:d3:10:64:a7:7d:4d:df:aa:59:d9:92:6e:bf:ee:
         9c:64:fb:33
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSQZvVM/QQe5DUav0DHREd00Q0/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw
MTI1MkE1QzAeFw0yNTA4MDcwNTU1MDJaFw0yNjA4MDYwNjAwMDJaMDMxMTAvBgNV
BAMTKDlFNDQ0MjIxOUVCQTE3QUIxNTI3ODRFRjg2NzIxNzgxQTAxMDk1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgjhW4OM8sC1ltl9koVm/fTAW
qjhDrGAxOqtlQNWzlfC+LfByRvmHXPCoU/vJBHDLGhly1VUxs+JX0HfBEYEN76aR
oYJEaI/ohm7oqahVJ87nzXsCF3S+mz5RMXe4D+WO6LKPcWcNHqlcszUgPpvlA7mS
VlGZkTfsM0S1a84N58bR1P1c6tcJA/jRkwBMzZA8y1GN8SLTBzMJxYVR9mcoVY/R
3CRY+aq1EFU3FComo0U2vSvHzE318h/6UxCOP9N6DZ+sXm1MmK9EUJf9oAycH5kJ
YO5OgiZ1PHNCOQ+8uGdoyZIJnBMX7hwtLmePbLXplfiHY8WPiTcnfwdFGPIlAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUnkRCIZ66F6sVJ4TvhnIXgaAQlQEwHwYDVR0j
BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG
NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1
MkE1Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyMDMyYmM5LTYwNWEtNDI1My1h
NGNkLTYyZjEyNDEyNmVhYy8wLzMxMzAzMzJlMzgzMDJlMzkzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNzMzMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdQWzANBgkqhkiG
9w0BAQsFAAOCAQEAfteijO8kauQY7Qhp6bvMntuqq+GuCDRXn0WyCVv1jpDyqI4i
/0d5ThwSTYr2irNkuIPjB4cwL6WuKxK6da1l/Sbnsg/+kFIoWHhIkV4HNWFbSQQY
2zbXqIJliUQ7lQCTHV1701ibEz3VS9L9QXenOgLrvIg7HJZEoyhi+Jn2KIIqOkZD
jLVC3JvWmc7MCsdIPXuOOdNkNqyXQJQWX0H8iCXszk4tZqnr5bhAkbpwzjw5J/bB
udIH6ksR8DzfV+BxkwRcbJlQsdsWtKe6NnU+24wqYdYztK0laR86gu5HQBLWiZsv
OuJxPJT3hjvr1NMQZKd9Td+qWdmSbr/unGT7Mw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:39 2025 by rpki-client