Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa
File:                     3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          LeUyJ9o4fhoz/H6h0dDJDWn+lC9aUUwyzbGZ89Ocfng=
Subject key identifier:   A3:02:E3:83:73:C0:35:20:33:CE:4D:8A:AD:0F:B5:D8:31:07:C2:4D
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       3B8DF854B5BCB66D1877E726D7E358B948DC6284
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa
Signing time:             Mon 14 Oct 2024 10:03:00 +0000
ROA not before:           Mon 14 Oct 2024 09:58:00 +0000
ROA not after:            Mon 13 Oct 2025 10:03:00 +0000
asID:                     136838
IP address blocks:        103.100.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8d:f8:54:b5:bc:b6:6d:18:77:e7:26:d7:e3:58:b9:48:dc:62:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Oct 14 09:58:00 2024 GMT
            Not After : Oct 13 10:03:00 2025 GMT
        Subject: CN=A302E38373C0352033CE4D8AAD0FB5D83107C24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:97:36:1a:4f:4c:2e:7d:0e:ae:d5:70:25:
                    89:97:f5:ae:35:01:34:1b:04:cf:c1:b1:28:ce:c4:
                    02:f8:5a:4b:ef:99:98:37:c1:97:26:42:69:fe:32:
                    b9:9f:3d:78:bc:08:55:7b:69:78:68:fd:9d:b0:57:
                    b8:b7:6d:13:b1:d4:e3:1f:e8:a2:a4:30:00:e6:88:
                    2f:c2:b4:47:94:d5:fd:22:6c:88:90:e1:6a:48:58:
                    e3:8b:a4:5a:c4:e4:c2:5e:88:38:a8:bf:6e:88:3d:
                    2d:dc:da:dc:9c:43:c2:0c:71:01:16:40:b0:13:bc:
                    1e:06:f5:ca:e5:72:cf:8c:dc:8e:75:a4:a1:db:04:
                    20:03:f0:0f:c1:85:08:83:08:b9:b2:b7:39:2f:7e:
                    9e:5d:26:47:1e:74:8f:9a:20:96:a6:6c:97:63:4e:
                    85:d1:ad:ec:c2:05:16:10:5a:cc:94:15:cc:00:5a:
                    6b:9c:36:34:5d:71:24:bc:35:1a:c7:9b:f0:f9:39:
                    bb:59:5c:b5:de:8c:c1:d3:a1:c0:1d:50:e2:0b:85:
                    e7:ac:af:b4:a4:43:a6:e4:a4:61:62:f1:ec:50:07:
                    3e:bf:99:11:86:be:a5:c8:f2:1e:b0:51:d5:8d:e7:
                    ea:11:c1:1f:e4:ea:f8:22:a2:10:98:eb:3f:da:67:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:02:E3:83:73:C0:35:20:33:CE:4D:8A:AD:0F:B5:D8:31:07:C2:4D
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:40:0b:bd:1a:ca:66:8c:d5:4d:ee:af:fc:7f:35:a2:e8:45:
         3d:82:3a:41:26:e9:dc:a1:d8:df:3f:cd:3d:fd:66:db:5d:cb:
         df:b4:b8:df:dd:a3:4d:80:70:65:62:f5:46:89:8f:0d:50:7e:
         ef:8b:fc:3d:24:10:2c:cf:e0:06:24:40:90:db:d0:5c:88:a3:
         1a:1e:08:a0:cd:ea:d2:f6:e4:1b:54:12:45:3f:25:63:4c:46:
         28:14:b2:eb:08:11:c0:a2:90:6b:e3:34:d4:92:11:2c:15:35:
         ef:6a:0d:15:e6:30:86:c3:0f:83:3f:3e:a5:27:84:79:b6:26:
         48:70:3d:4f:78:2f:be:9f:6e:d5:73:9e:f8:09:bd:07:d6:d9:
         5f:76:09:bf:02:5e:a8:70:a3:3f:52:03:9b:55:f1:df:24:40:
         46:2e:5c:39:64:c1:10:84:df:0f:26:5a:38:63:a0:97:65:ee:
         09:fb:41:f9:c7:4e:bb:fe:ac:b8:c5:63:04:7d:77:bf:28:03:
         78:6c:9e:ee:b3:76:82:fd:52:09:6c:31:1e:97:09:16:2f:0f:
         13:24:fd:38:59:d5:96:65:c9:2e:0b:38:e6:03:73:d0:a0:d7:
         8c:15:cb:38:8f:eb:91:4e:89:49:a6:ed:76:00:71:51:a3:88:
         2a:63:48:e0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUO434VLW8tm0Yd+cm1+NYuUjcYoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0
NjYxMDBBQzAeFw0yNDEwMTQwOTU4MDBaFw0yNTEwMTMxMDAzMDBaMDMxMTAvBgNV
BAMTKEEzMDJFMzgzNzNDMDM1MjAzM0NFNEQ4QUFEMEZCNUQ4MzEwN0MyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vZc2Gk9MLn0OrtVwJYmX9a41
ATQbBM/BsSjOxAL4WkvvmZg3wZcmQmn+MrmfPXi8CFV7aXho/Z2wV7i3bROx1OMf
6KKkMADmiC/CtEeU1f0ibIiQ4WpIWOOLpFrE5MJeiDiov26IPS3c2tycQ8IMcQEW
QLATvB4G9crlcs+M3I51pKHbBCAD8A/BhQiDCLmytzkvfp5dJkcedI+aIJambJdj
ToXRrezCBRYQWsyUFcwAWmucNjRdcSS8NRrHm/D5ObtZXLXejMHTocAdUOILhees
r7SkQ6bkpGFi8exQBz6/mRGGvqXI8h6wUdWN5+oRwR/k6vgiohCY6z/aZ/wNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUowLjg3PANSAzzk2KrQ+12DEHwk0wHwYDVR0j
BBgwFoAUEEVj6AaPOuGWMbH0OlyaR0ZhAKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
M2Q4MDY0My1kNWU5LTQxYWYtOTRkZi02ZDk0ZmJmNDY0ODcvMC8xMDQ1NjNFODA2
OEYzQUUxOTYzMUIxRjQzQTVDOUE0NzQ2NjEwMEFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0NjYx
MDBBQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzZDgwNjQzLWQ1ZTktNDFhZi05
NGRmLTZkOTRmYmY0NjQ4Ny8wLzMxMzAzMzJlMzEzMDMwMmUzOTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2RgMA0GCSqG
SIb3DQEBCwUAA4IBAQC4QAu9GspmjNVN7q/8fzWi6EU9gjpBJuncodjfP809/Wbb
XcvftLjf3aNNgHBlYvVGiY8NUH7vi/w9JBAsz+AGJECQ29BciKMaHgigzerS9uQb
VBJFPyVjTEYoFLLrCBHAopBr4zTUkhEsFTXvag0V5jCGww+DPz6lJ4R5tiZIcD1P
eC++n27Vc574Cb0H1tlfdgm/Al6ocKM/UgObVfHfJEBGLlw5ZMEQhN8PJlo4Y6CX
Ze4J+0H5x067/qy4xWMEfXe/KAN4bJ7us3aC/VIJbDEelwkWLw8TJP04WdWWZcku
CzjmA3PQoNeMFcs4j+uRTolJpu12AHFRo4gqY0jg
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:06 2024 by rpki-client on console-ams.rpki-client.org