Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa
File:                     3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          SlI7AhoOF3We3sIYmVmNNifD2NycJGbtgvQxMW2JHqo=
Subject key identifier:   39:5E:07:9C:F1:87:58:17:7B:9D:0C:3A:36:B9:08:1C:91:A2:D8:31
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       6A15FD7873504D87C48AFED60A35915F1FA5D192
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa
Signing time:             Mon 14 Oct 2024 10:04:18 +0000
ROA not before:           Mon 14 Oct 2024 09:59:18 +0000
ROA not after:            Mon 13 Oct 2025 10:04:18 +0000
asID:                     136838
IP address blocks:        103.100.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:15:fd:78:73:50:4d:87:c4:8a:fe:d6:0a:35:91:5f:1f:a5:d1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Oct 14 09:59:18 2024 GMT
            Not After : Oct 13 10:04:18 2025 GMT
        Subject: CN=395E079CF18758177B9D0C3A36B9081C91A2D831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:e7:ac:de:b9:66:1f:52:35:67:1f:78:f5:
                    90:27:ad:fb:c5:98:82:8e:1a:58:2e:16:28:46:d9:
                    d5:ee:35:dc:ec:ea:41:79:dd:89:fa:18:72:00:16:
                    56:d8:14:bf:fb:e6:65:93:10:c0:9d:53:2d:62:36:
                    8c:5c:66:50:7b:b5:2c:48:ce:95:c2:2b:24:6a:10:
                    20:eb:fb:39:51:03:43:2a:ff:87:76:30:82:fd:7f:
                    96:7d:12:53:f3:ea:43:8c:38:d2:9f:f2:19:74:65:
                    28:2f:72:25:e4:22:14:b7:5c:5b:c8:10:fb:d3:4e:
                    79:d3:cf:90:c5:f9:93:00:b3:a5:e3:cb:3f:2e:ca:
                    89:dd:16:97:5f:c0:df:d7:8b:9c:f7:f2:70:a3:21:
                    6b:b0:f3:78:4b:e4:bd:10:ce:d1:b4:5f:59:f1:24:
                    bc:d1:2a:cf:6a:d3:a2:aa:83:3d:31:06:c4:67:77:
                    8e:58:3a:2d:75:2f:7e:88:99:1e:16:19:6c:6c:e7:
                    52:83:2b:eb:cb:cc:87:20:86:27:5c:6c:fc:02:2b:
                    69:4f:2c:00:ab:1c:a1:3b:e0:b6:cb:2f:ec:c8:7c:
                    49:21:42:79:41:eb:c3:44:62:b6:6e:d7:12:b1:1b:
                    5d:ee:f5:14:82:4b:01:0b:1a:3e:93:08:b5:ca:5c:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5E:07:9C:F1:87:58:17:7B:9D:0C:3A:36:B9:08:1C:91:A2:D8:31
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:a9:a5:da:15:db:e6:f7:2b:d8:60:ba:29:90:32:2b:66:
         2a:87:78:8b:55:6d:22:f7:70:65:89:49:37:6e:a0:55:a7:1b:
         39:2a:59:f9:80:0d:21:29:f9:d0:f7:b6:15:ed:4e:c6:70:5a:
         af:3c:8e:36:f3:5f:a4:7e:90:56:fa:0d:43:a5:1c:ae:4a:2a:
         5e:1e:87:61:ff:16:cb:bf:af:ee:3e:ec:f7:dd:9d:72:14:22:
         d9:ee:31:93:63:9c:e3:1b:2b:96:b3:fc:cd:ff:a9:b5:60:24:
         8c:b8:2b:e4:5f:57:ed:0e:ac:d4:4e:e3:89:fb:8f:f6:86:3d:
         d8:b9:b4:0d:28:63:d4:a5:2a:b1:5e:ec:9e:52:f9:3a:8f:38:
         e8:c7:9f:b3:ee:56:2e:1b:54:96:cc:28:a6:af:30:33:12:8f:
         a5:fd:7d:79:61:69:9d:c3:74:f1:72:dc:f0:07:a2:d6:d3:ac:
         18:01:c6:e6:03:42:16:f6:f8:ca:91:e2:70:d9:1f:8e:af:58:
         dc:bf:16:bb:be:53:8b:b4:23:2c:1e:4a:b8:57:11:3a:63:46:
         d8:f3:6a:0d:9c:96:d8:5a:d6:71:3c:cf:dd:2b:66:87:55:cf:
         b1:2d:f3:49:30:c7:f7:97:62:a4:0e:23:8a:b9:bc:1d:e3:3a:
         5d:22:e7:e4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUahX9eHNQTYfEiv7WCjWRXx+l0ZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0
NjYxMDBBQzAeFw0yNDEwMTQwOTU5MThaFw0yNTEwMTMxMDA0MThaMDMxMTAvBgNV
BAMTKDM5NUUwNzlDRjE4NzU4MTc3QjlEMEMzQTM2QjkwODFDOTFBMkQ4MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYOes3rlmH1I1Zx949ZAnrfvF
mIKOGlguFihG2dXuNdzs6kF53Yn6GHIAFlbYFL/75mWTEMCdUy1iNoxcZlB7tSxI
zpXCKyRqECDr+zlRA0Mq/4d2MIL9f5Z9ElPz6kOMONKf8hl0ZSgvciXkIhS3XFvI
EPvTTnnTz5DF+ZMAs6Xjyz8uyondFpdfwN/Xi5z38nCjIWuw83hL5L0QztG0X1nx
JLzRKs9q06Kqgz0xBsRnd45YOi11L36ImR4WGWxs51KDK+vLzIcghidcbPwCK2lP
LACrHKE74LbLL+zIfEkhQnlB68NEYrZu1xKxG13u9RSCSwELGj6TCLXKXLTTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOV4HnPGHWBd7nQw6NrkIHJGi2DEwHwYDVR0j
BBgwFoAUEEVj6AaPOuGWMbH0OlyaR0ZhAKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
M2Q4MDY0My1kNWU5LTQxYWYtOTRkZi02ZDk0ZmJmNDY0ODcvMC8xMDQ1NjNFODA2
OEYzQUUxOTYzMUIxRjQzQTVDOUE0NzQ2NjEwMEFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0NjYx
MDBBQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzZDgwNjQzLWQ1ZTktNDFhZi05
NGRmLTZkOTRmYmY0NjQ4Ny8wLzMxMzAzMzJlMzEzMDMwMmUzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2RiMA0GCSqG
SIb3DQEBCwUAA4IBAQBYbKml2hXb5vcr2GC6KZAyK2Yqh3iLVW0i93BliUk3bqBV
pxs5Kln5gA0hKfnQ97YV7U7GcFqvPI4281+kfpBW+g1DpRyuSipeHodh/xbLv6/u
Puz33Z1yFCLZ7jGTY5zjGyuWs/zN/6m1YCSMuCvkX1ftDqzUTuOJ+4/2hj3YubQN
KGPUpSqxXuyeUvk6jzjox5+z7lYuG1SWzCimrzAzEo+l/X15YWmdw3TxctzwB6LW
06wYAcbmA0IW9vjKkeJw2R+Or1jcvxa7vlOLtCMsHkq4VxE6Y0bY82oNnJbYWtZx
PM/dK2aHVc+xLfNJMMf3l2KkDiOKubwd4zpdIufk
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:06 2024 by rpki-client on console-ams.rpki-client.org