Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa
File:                     3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          mLstSys1ibyLiHgcMAosimwglWRWJ2SkAeeFcz0SnqE=
Subject key identifier:   18:9C:F7:B6:0F:3E:EC:84:1C:44:AA:D4:8E:32:8E:AD:8E:AD:65:D3
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       34168746E8456E87C670D744C2252812BE4C399E
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa
Signing time:             Mon 15 Sep 2025 11:00:01 +0000
ROA not before:           Mon 15 Sep 2025 10:55:01 +0000
ROA not after:            Mon 14 Sep 2026 11:00:01 +0000
asID:                     136838
IP address blocks:        103.100.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Sep 2025 23:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:16:87:46:e8:45:6e:87:c6:70:d7:44:c2:25:28:12:be:4c:39:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Sep 15 10:55:01 2025 GMT
            Not After : Sep 14 11:00:01 2026 GMT
        Subject: CN=189CF7B60F3EEC841C44AAD48E328EAD8EAD65D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:25:61:69:c9:42:5e:3c:4a:ab:d2:41:78:
                    fc:94:86:32:ff:7a:be:d3:be:39:85:da:49:e3:3b:
                    cd:d3:db:68:91:d8:8d:ce:b2:90:6e:a5:99:2f:ca:
                    77:2c:33:85:5c:10:fe:45:63:40:f8:49:62:d2:22:
                    64:f9:54:bf:e0:bf:8d:6a:6f:40:d0:62:a7:2d:1d:
                    e0:bd:56:53:e4:d3:fe:47:01:93:e5:ee:79:73:41:
                    ad:d8:92:ae:ad:e1:83:c6:38:af:2e:ad:17:44:51:
                    70:a5:44:be:98:9b:8e:22:a5:76:5e:ae:ee:75:de:
                    16:ed:90:9a:96:d7:7a:f8:4d:68:65:84:31:d1:ed:
                    0e:88:e4:bf:f3:fb:31:f3:be:da:79:fb:83:ea:12:
                    ad:75:47:93:c4:ac:ac:17:04:f8:8a:a8:e1:3e:dd:
                    cb:0b:4d:80:a6:1d:f4:08:b6:70:54:51:f5:ee:e0:
                    ac:0c:2e:83:b3:86:e4:e0:53:98:ef:b6:54:c5:14:
                    c3:1c:08:01:48:74:83:8a:ae:dc:12:d7:69:e7:5e:
                    c6:f3:c6:ea:54:50:ff:52:0d:2c:1c:5d:96:fa:92:
                    7b:45:db:74:36:ef:a0:ea:7d:51:25:3b:ea:97:4f:
                    e9:99:fc:92:85:1b:f4:ac:d8:d6:7a:4a:37:25:93:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:F7:B6:0F:3E:EC:84:1C:44:AA:D4:8E:32:8E:AD:8E:AD:65:D3
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:08:bd:1c:f1:1f:67:71:44:e9:d0:ec:00:77:c2:65:69:
         9b:55:db:49:9a:5d:82:65:2a:1c:9b:4d:33:5d:8d:5e:92:ef:
         96:3f:2b:90:6e:07:fe:56:d0:99:35:be:dc:39:4b:7c:35:04:
         53:f7:de:41:f6:e0:da:cd:fa:31:ce:90:65:58:6c:08:e0:48:
         c8:c4:b2:16:a9:d9:b6:d8:e2:02:74:43:95:1d:cb:0a:2a:d7:
         09:f0:fb:53:17:11:c7:a4:36:57:79:b4:02:8e:08:4f:5d:96:
         83:e4:a7:d2:e9:eb:13:06:99:3a:59:19:0a:51:12:29:ea:73:
         b1:5d:f1:86:4e:65:54:a5:df:13:8c:5b:32:4d:1c:2b:12:fd:
         33:9f:58:38:00:98:c4:1b:68:b2:da:ea:18:19:02:52:d6:17:
         cb:9a:35:29:17:54:53:6f:0d:7b:6d:b8:d1:91:40:3d:38:59:
         11:3a:57:d8:34:b1:2a:dc:6e:9b:99:92:8f:bf:c7:c4:af:da:
         f4:a9:2f:eb:b1:bb:f4:84:38:59:66:ba:a7:2b:a9:52:4d:75:
         d1:85:9d:86:73:3a:ec:8f:16:df:ae:05:f9:d3:9e:a1:3a:93:
         9e:2c:49:67:c7:89:1f:84:0a:c8:f9:ca:10:8b:80:03:08:07:
         4c:b2:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:07:26 2025 by rpki-client