Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa
File:                     3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          8dCWJ4ZQZt5WChh6Narmgjs82k0+OBaAdDRG1XGcKLQ=
Subject key identifier:   A6:41:89:A2:B4:78:70:E8:35:19:09:01:B5:8E:24:F6:03:C1:A6:5A
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       6CB308636B48ED0394993FFD6FEE63A27033018F
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa
Signing time:             Mon 14 Oct 2024 10:04:32 +0000
ROA not before:           Mon 14 Oct 2024 09:59:32 +0000
ROA not after:            Mon 13 Oct 2025 10:04:32 +0000
asID:                     136838
IP address blocks:        103.100.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b3:08:63:6b:48:ed:03:94:99:3f:fd:6f:ee:63:a2:70:33:01:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Oct 14 09:59:32 2024 GMT
            Not After : Oct 13 10:04:32 2025 GMT
        Subject: CN=A64189A2B47870E835190901B58E24F603C1A65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:dd:a7:49:80:08:43:4a:bb:01:21:76:35:
                    6d:16:f5:2f:cd:2b:0a:60:f8:7a:e6:5f:5d:d2:1a:
                    bb:95:21:30:f7:42:f0:42:ce:2c:c9:6d:b0:88:fc:
                    e1:21:bc:6e:b2:53:a9:8e:0e:30:de:76:cf:b0:e0:
                    5d:9b:71:29:de:df:23:ed:35:6d:30:54:a4:cd:54:
                    04:34:0c:fa:63:14:eb:a6:d9:62:8a:86:24:eb:ab:
                    b8:83:8f:32:4b:a8:f6:7b:aa:eb:b8:ef:75:80:2e:
                    2c:61:a3:0d:17:61:23:b4:e5:07:62:50:cc:2e:5b:
                    97:06:84:c3:d2:ae:15:e9:a1:e5:6f:b9:8f:b4:d8:
                    4d:03:01:9c:5a:9b:ce:3e:b5:6a:d8:2f:20:70:5c:
                    c5:e2:0c:67:d9:1e:1f:c6:7e:3b:ad:89:f9:c0:7c:
                    5d:33:80:5e:d6:8b:96:77:14:59:a8:f7:81:e8:fd:
                    a8:05:90:7e:93:61:9a:4b:22:f7:54:de:d9:06:58:
                    17:83:46:19:b0:1b:9b:14:df:b1:ad:21:f2:99:a3:
                    87:d4:8e:2d:26:dd:c6:a8:cc:e3:b7:5b:39:f8:bb:
                    50:d1:14:0d:02:ce:e8:c7:6d:a3:3b:ba:c9:e1:4d:
                    3f:4b:d1:58:64:af:af:b3:28:bc:78:8e:12:a0:df:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:41:89:A2:B4:78:70:E8:35:19:09:01:B5:8E:24:F6:03:C1:A6:5A
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:f0:7f:d3:dc:f0:2a:91:d5:ec:29:b0:61:cb:9b:66:49:
         45:66:86:7b:cf:be:7d:b4:7e:ac:75:a8:a4:d7:8e:49:bc:d1:
         ea:6a:c8:e5:ba:54:61:c7:32:35:95:9e:6d:5e:ce:c7:45:0c:
         36:ee:a7:6c:70:e3:73:17:28:23:5c:b2:b7:45:ce:fa:c5:db:
         a7:ac:74:ea:e8:dc:9c:90:60:bc:91:bc:a1:01:ce:72:0b:d1:
         02:b4:c2:1c:27:72:89:0f:47:0f:c9:a3:c4:42:74:9b:85:ef:
         85:89:40:d4:d1:49:0d:37:61:b6:7f:d0:f9:39:f7:cd:94:d3:
         30:f6:38:f8:86:39:1d:09:ab:e4:47:bd:20:51:56:33:57:e8:
         5e:3c:bd:94:f8:92:84:36:5c:fb:5e:cd:aa:0f:1f:56:74:b5:
         af:f6:47:ad:e8:b3:32:7e:49:94:cf:c5:ae:88:e5:11:6c:13:
         22:5c:2b:f6:cf:36:31:34:db:5b:3c:5d:ef:52:ca:9c:06:4f:
         ec:64:46:60:33:f7:01:8f:70:22:77:ef:f7:5a:0e:7d:6e:28:
         ae:ad:f1:d8:28:f2:5a:52:52:65:0f:15:32:a5:08:50:b8:13:
         02:0a:95:fe:82:b7:54:09:33:fe:bd:45:34:45:97:7b:b5:5f:
         f9:cb:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:06 2024 by rpki-client on console-ams.rpki-client.org