Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa
File:                     3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          +SLRXlahaObHYrJgflPMiDjr0u2mDJrsOXf4SROIz+s=
Subject key identifier:   A9:E3:2F:95:28:A8:05:7F:58:A2:23:20:37:06:18:F3:1E:DA:4E:61
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       6EBF44B33F867F0D7078063DA349AA4E846D059E
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa
Signing time:             Mon 15 Sep 2025 11:00:01 +0000
ROA not before:           Mon 15 Sep 2025 10:55:01 +0000
ROA not after:            Mon 14 Sep 2026 11:00:01 +0000
asID:                     136838
IP address blocks:        103.100.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Sep 2025 23:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bf:44:b3:3f:86:7f:0d:70:78:06:3d:a3:49:aa:4e:84:6d:05:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Sep 15 10:55:01 2025 GMT
            Not After : Sep 14 11:00:01 2026 GMT
        Subject: CN=A9E32F9528A8057F58A22320370618F31EDA4E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:97:51:0e:d1:84:99:c9:28:df:d7:03:1c:
                    8f:18:00:16:7d:a9:22:b3:38:67:20:ea:5e:cf:52:
                    3b:c2:b3:ac:01:1d:cc:87:3e:18:a2:0c:c5:2b:6e:
                    05:53:8e:e9:73:01:59:73:42:d6:7c:73:c9:8e:ac:
                    a3:dd:81:a2:65:60:00:1c:1e:73:3a:ba:a6:9b:7d:
                    be:d7:e2:fa:5a:22:7f:b6:94:9b:71:f4:1f:eb:0d:
                    18:f1:46:15:b4:95:80:26:dc:05:e4:0d:38:0d:94:
                    a7:2e:41:d9:64:73:98:89:d5:75:f0:f6:72:2c:67:
                    27:12:c6:73:e8:53:d6:93:33:2a:9f:8e:1e:3f:65:
                    20:49:62:13:40:62:69:84:85:80:b2:10:af:70:89:
                    0e:09:26:19:30:64:8c:1b:30:62:fc:82:d9:9f:73:
                    dc:ee:c9:d7:19:c6:d7:15:6e:b7:18:c1:98:5e:5d:
                    e4:3f:ac:aa:e6:a7:fd:9e:ff:38:f2:ab:90:c7:1a:
                    02:3c:54:65:07:46:5f:e1:0b:5e:4e:5a:b0:8e:f6:
                    45:f6:b0:19:90:b6:18:e2:3a:2e:c0:d9:bf:6b:59:
                    45:f6:44:ae:86:42:92:69:c3:21:10:1f:eb:64:d3:
                    d0:1b:e7:2c:4c:8f:03:88:4e:46:95:35:b8:20:23:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E3:2F:95:28:A8:05:7F:58:A2:23:20:37:06:18:F3:1E:DA:4E:61
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:e6:56:dc:4b:f3:c4:46:b7:c8:2a:d7:3a:1c:8a:82:ca:
         cd:1d:7d:f6:eb:58:9e:ac:a3:d3:a4:f7:1a:7c:ab:61:b5:76:
         26:af:d4:ba:8f:ef:2c:76:7e:21:8b:79:88:05:9d:6f:5e:7a:
         cb:6b:8d:f5:0c:cf:08:50:05:94:0e:37:24:9f:8a:ca:7e:62:
         2a:ab:15:36:93:88:be:5d:64:12:d5:a0:a7:94:cf:f6:93:75:
         0d:37:2a:af:8b:e9:50:e9:9f:97:e6:58:99:02:2c:08:1a:bd:
         45:3d:35:19:02:b0:3a:35:05:2e:ad:18:e7:f3:37:70:49:89:
         70:ca:0c:15:88:7e:fe:1a:36:92:ec:48:30:7c:dc:be:15:d2:
         48:ab:39:e1:4d:0c:db:e9:cb:86:aa:88:3b:96:d0:9b:c1:3f:
         ee:89:d6:ba:c4:92:93:73:6c:a0:b6:10:dd:91:69:ed:c4:fa:
         87:93:66:64:54:23:49:9e:32:e3:74:5b:c8:f2:c7:f0:df:b6:
         79:3e:dd:45:6c:fb:93:c9:2b:8f:cf:f9:27:61:3b:9f:64:1e:
         f6:5b:07:2f:e3:6d:c8:f4:4b:cb:53:a2:df:7e:ee:8e:92:4d:
         3d:c2:7f:78:aa:7b:f9:96:2d:b6:77:74:e9:5b:78:bc:b4:22:
         65:0a:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:09:35 2025 by rpki-client