Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa
File:                     3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          FFItnTTMKt/KdS5iV3+5t51Nd97nxTmIPrWc7N6PUvw=
Subject key identifier:   A3:DA:EE:B2:83:EF:91:D7:7F:62:37:8F:96:80:4D:21:07:6E:69:E8
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       5D83F46A15F7014D1EDDB02D4C5C5B41D1F21077
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa
Signing time:             Mon 15 Sep 2025 11:00:01 +0000
ROA not before:           Mon 15 Sep 2025 10:55:01 +0000
ROA not after:            Mon 14 Sep 2026 11:00:01 +0000
asID:                     136838
IP address blocks:        103.100.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 05:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:83:f4:6a:15:f7:01:4d:1e:dd:b0:2d:4c:5c:5b:41:d1:f2:10:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Sep 15 10:55:01 2025 GMT
            Not After : Sep 14 11:00:01 2026 GMT
        Subject: CN=A3DAEEB283EF91D77F62378F96804D21076E69E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:f1:c1:59:70:ac:bd:d2:33:1b:c9:e6:7e:
                    57:ed:63:41:05:82:56:6b:96:4e:f7:6f:68:7b:e0:
                    ba:fd:39:fb:89:56:1c:90:26:ae:d9:3e:10:6f:2f:
                    67:34:59:f2:f0:e7:50:44:21:d7:54:9b:7f:14:6c:
                    d6:6f:c8:4d:7a:e7:79:3c:4a:7e:59:20:f6:9c:4f:
                    43:c2:ed:12:48:cd:80:30:68:88:3f:1f:f7:90:ca:
                    2c:1f:c8:1d:ab:f3:38:66:25:96:53:ad:7b:b9:c9:
                    f8:e9:ff:a4:2e:23:dc:f0:39:f0:da:c5:41:cf:3a:
                    e3:20:d8:c6:9d:f3:4f:cc:42:f7:8b:6d:bb:81:b9:
                    41:82:dc:33:02:65:a0:0c:91:e4:0e:ff:1c:08:e0:
                    58:a7:a6:24:d1:fa:66:58:23:91:c9:99:35:00:1b:
                    4c:21:ae:94:d6:fe:80:8e:2c:e3:af:44:87:26:2a:
                    05:69:ad:5e:75:b7:2b:23:ba:f0:83:40:e5:4a:cb:
                    4c:1b:c3:31:95:e3:0c:a1:61:db:65:9c:16:df:01:
                    9d:39:31:89:ad:1d:a1:85:22:08:a1:c3:e9:bf:ff:
                    12:2d:87:a2:0a:ad:89:0f:6e:70:15:0d:0c:91:9c:
                    96:3d:f4:8e:ae:9e:46:b0:55:0a:16:2a:a1:d2:b3:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DA:EE:B2:83:EF:91:D7:7F:62:37:8F:96:80:4D:21:07:6E:69:E8
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:a0:79:df:49:0c:8c:bc:ab:e1:85:71:5b:0b:9d:cf:f1:
         10:8c:16:40:9c:3b:f6:20:fd:6e:4f:d1:1f:f9:c5:84:87:92:
         80:fb:54:cd:cf:6d:21:85:f4:7b:28:d4:9a:be:59:24:1d:ff:
         c2:61:38:bf:8e:36:4d:e7:33:b0:80:c7:b8:27:5b:e1:0c:3a:
         db:dc:c5:a8:d9:b6:d1:40:76:b8:9f:2e:97:5a:a1:bb:46:ea:
         5c:ec:1b:8d:05:78:fa:d2:36:93:be:ee:f8:bd:dc:3a:0f:be:
         ca:bc:25:f3:c5:06:cb:38:5a:b6:11:06:9e:69:05:cd:75:32:
         ad:24:8a:a6:39:be:02:f8:9f:68:b6:3a:54:d2:1b:ad:eb:ef:
         45:88:48:bf:f2:1a:86:ff:90:2f:93:3c:ae:44:1c:4e:7a:fd:
         7c:2d:77:31:51:0c:5c:c3:61:16:7b:ef:70:6f:b7:c1:6d:5c:
         b3:a6:51:6a:b5:e4:b3:f8:fe:17:94:59:66:9a:30:76:df:5c:
         61:b2:b1:b4:7b:d2:ab:43:92:f4:9f:ea:a5:1d:f8:83:92:fa:
         cd:8f:53:19:dd:a5:aa:07:5b:b6:37:5b:84:10:13:93:2c:b1:
         f4:0f:ba:30:9d:05:05:e1:d7:17:b3:e6:79:10:41:e6:46:e0:
         96:f9:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:27:19 2025 by rpki-client