Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa
File:                     3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          VLkItKFaeejUHC1WgS1PSkZ19Q0bo3xj4xKJ0hQtCic=
Subject key identifier:   94:FB:28:5D:D1:4D:0F:1D:A5:F6:CA:51:5C:44:39:E8:A3:02:EB:53
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       6C11CB05E044C0A6F05EC73E5E172BB47309B4CB
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa
Signing time:             Mon 15 Sep 2025 11:00:01 +0000
ROA not before:           Mon 15 Sep 2025 10:55:01 +0000
ROA not after:            Mon 14 Sep 2026 11:00:01 +0000
asID:                     136838
IP address blocks:        103.100.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 05:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:11:cb:05:e0:44:c0:a6:f0:5e:c7:3e:5e:17:2b:b4:73:09:b4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Sep 15 10:55:01 2025 GMT
            Not After : Sep 14 11:00:01 2026 GMT
        Subject: CN=94FB285DD14D0F1DA5F6CA515C4439E8A302EB53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:5a:79:12:f9:30:86:46:dc:25:d2:8b:52:
                    27:7a:34:71:9e:f2:58:2b:1e:90:d9:d5:ca:53:c4:
                    94:ef:68:91:d3:8a:60:f6:a7:ed:df:0a:e0:df:23:
                    06:86:33:a6:ef:ea:cf:df:ab:11:67:3e:3b:4e:b9:
                    ca:db:3a:b4:d7:e2:69:98:31:a6:b3:48:07:0b:d1:
                    d5:36:9f:3e:f8:ad:75:99:f2:fb:ba:8b:36:cd:b0:
                    33:d5:cd:a5:81:a4:4b:0a:86:ad:55:63:d0:ea:a2:
                    2d:3a:1b:d9:3b:93:2e:c2:f2:7f:61:cf:25:a4:e3:
                    5c:27:11:06:e4:e5:17:63:2b:d2:6d:df:de:13:b7:
                    c6:11:d2:22:28:fc:8a:e5:25:71:c4:02:2b:0c:fc:
                    a2:9f:0f:57:b0:1e:97:37:06:88:ae:88:3f:89:b6:
                    cd:d3:ba:70:5b:51:dc:a2:aa:81:5e:41:b5:d8:79:
                    97:23:60:a4:ac:e5:63:9d:b7:c2:0b:e3:b4:53:5e:
                    a3:ba:db:5c:dd:b6:a5:fb:18:e4:74:51:c3:4e:91:
                    31:2f:2a:f9:02:32:2f:ad:8c:7b:b8:78:99:b3:01:
                    31:20:dc:bc:02:f8:fd:0c:04:9b:d7:50:6d:a7:6b:
                    ef:74:60:d4:6a:ed:1f:e6:2e:80:46:2a:86:57:34:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:28:5D:D1:4D:0F:1D:A5:F6:CA:51:5C:44:39:E8:A3:02:EB:53
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:9f:ce:65:6f:51:c6:6d:7e:b2:db:97:0f:6c:7c:20:a3:
         36:af:41:3b:8b:d3:18:6d:d8:28:75:f3:0a:3f:1f:f8:29:97:
         07:fc:c0:47:2e:df:6d:0b:a5:03:cf:d9:eb:bb:6d:9e:26:bd:
         0b:c9:cd:f3:ac:5a:4d:e2:2a:57:6d:ee:5b:55:eb:43:48:34:
         bd:6b:91:e7:fb:d1:e3:9f:4c:2c:d5:25:39:59:1b:b3:89:e2:
         c0:6f:3f:a1:25:6a:6b:7e:c1:92:a2:c6:31:a2:0b:a0:8e:33:
         3c:1c:b7:74:f3:e0:d3:80:f3:63:91:2e:be:bb:bb:51:d8:b6:
         fe:b9:97:93:0e:48:bc:37:1d:98:ef:40:b4:9a:b9:29:ce:b6:
         f9:9c:ea:ee:49:75:a8:a0:ae:0d:c5:00:37:4d:5c:6b:33:c7:
         88:bb:4e:1c:6c:f5:fe:60:87:aa:02:f6:d5:12:2f:6f:e5:5a:
         5b:02:19:fa:fe:55:d6:66:fd:11:47:c2:db:c8:00:fb:66:69:
         ce:f1:2a:0d:b0:88:d6:01:5a:ef:55:5f:cc:78:3d:b2:3a:22:
         af:5c:b5:c9:7b:70:89:a3:e0:e5:43:4a:af:84:36:c2:1d:84:
         d8:5a:0f:bd:ae:d7:08:d0:51:b4:34:f0:57:98:c5:64:26:60:
         37:4c:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:27:14 2025 by rpki-client