Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa
File:                     3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          E2yYTsCk6Z9EhH3CuGS/JtKeUD/mcVjv2foriJG4teo=
Subject key identifier:   9C:A2:6C:4A:03:99:63:08:8C:E7:66:4F:B2:4E:88:17:00:0D:A5:80
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       285A582AC53A8CAED78BCF8BE03AD475071FA169
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa
Signing time:             Mon 14 Oct 2024 10:03:25 +0000
ROA not before:           Mon 14 Oct 2024 09:58:25 +0000
ROA not after:            Mon 13 Oct 2025 10:03:25 +0000
asID:                     136838
IP address blocks:        103.100.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5a:58:2a:c5:3a:8c:ae:d7:8b:cf:8b:e0:3a:d4:75:07:1f:a1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Oct 14 09:58:25 2024 GMT
            Not After : Oct 13 10:03:25 2025 GMT
        Subject: CN=9CA26C4A039963088CE7664FB24E8817000DA580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c0:06:8b:de:8d:35:41:8e:27:cb:0c:e2:dc:
                    0b:26:e7:15:6f:2b:6c:65:f1:17:7b:c0:b2:39:90:
                    8e:bf:19:e7:73:6a:26:73:c8:e4:11:8c:88:28:77:
                    72:24:70:7b:c3:9b:f3:20:44:0a:f2:66:4a:48:a9:
                    9a:4d:48:01:57:c6:93:a5:fb:36:0d:56:2f:b9:97:
                    59:46:88:f1:7d:7d:b6:d3:70:0d:b1:78:28:db:cb:
                    0f:0d:ae:e1:68:b3:da:8e:df:21:d3:22:9d:92:df:
                    46:2f:19:99:b6:bd:64:d3:ce:47:5f:33:2d:bf:c7:
                    1b:77:ec:f6:f9:43:7a:2a:a6:d5:81:99:cf:9d:70:
                    23:d3:ef:85:56:6b:0b:10:d0:2f:e1:de:e2:34:e3:
                    75:77:51:64:38:d4:50:16:09:78:6d:74:48:90:f9:
                    73:7b:b4:26:38:e1:9c:86:14:a1:91:77:fa:fa:9a:
                    9f:0f:a8:cc:c3:0a:e3:cb:70:c1:8d:3f:9d:bf:a9:
                    96:bd:0b:99:37:22:dc:fe:98:68:42:81:d1:0e:8e:
                    77:d0:f1:6c:a2:7a:04:b9:4b:8d:4a:2e:38:2d:47:
                    c1:bc:f0:d1:9a:5b:19:86:e8:81:0f:d8:c9:dd:44:
                    db:28:ea:0d:a2:17:7c:98:52:b1:00:bc:8f:9d:05:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A2:6C:4A:03:99:63:08:8C:E7:66:4F:B2:4E:88:17:00:0D:A5:80
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:5c:d1:e2:4a:2c:31:49:5f:27:a7:e0:39:e3:b6:94:19:8c:
         31:f2:b7:0c:b6:01:4b:aa:49:42:aa:73:85:f1:dd:2e:70:d0:
         45:12:9a:f2:73:b7:df:78:59:3b:d2:64:08:97:ff:fc:7b:57:
         e8:35:9a:7c:4a:6c:99:9b:05:b1:2b:59:d3:f2:6c:b8:88:7f:
         c4:ef:94:36:8d:d3:cd:81:30:37:96:98:00:f7:a2:03:24:fa:
         54:23:6e:fe:07:f5:05:4f:63:d1:5c:b8:32:48:a6:57:d4:16:
         93:40:b4:1d:26:80:76:e8:d7:05:55:46:21:49:7e:3a:71:64:
         1a:4b:51:70:59:db:e2:d6:c3:5a:af:89:bc:b9:ca:de:47:86:
         59:ed:6d:a5:44:88:e6:4d:bc:a7:9d:40:04:ed:96:29:ae:a7:
         4f:68:49:64:94:ec:c5:ce:e6:32:ec:cf:c0:f7:d4:9b:37:2f:
         02:e4:48:0c:fa:cb:c0:88:43:2f:8b:22:f7:39:4b:8c:68:77:
         eb:1e:e7:7c:a3:75:7d:9f:43:b9:0d:5f:9f:76:89:9a:75:a6:
         7f:07:a1:8f:26:3d:f4:04:ac:9f:3e:d9:00:aa:29:90:69:d8:
         a4:17:85:8f:0d:f9:62:36:b8:91:a2:e6:9e:a2:3b:83:a5:2e:
         15:c4:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:31:23 2024 by rpki-client on console-fra.rpki-client.org