Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa
File:                     3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          BOFN0GMI61kC/DiDrBY854XkvtU/vjRFMol08vmHoXk=
Subject key identifier:   8C:9B:E0:FF:83:A8:FE:1E:89:FC:09:27:41:33:E0:A4:30:62:13:B0
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       0A6CAFFAE7F444E0450B2DFC5584E09A34D056E7
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa
Signing time:             Mon 14 Oct 2024 10:04:47 +0000
ROA not before:           Mon 14 Oct 2024 09:59:47 +0000
ROA not after:            Mon 13 Oct 2025 10:04:47 +0000
asID:                     136838
IP address blocks:        103.100.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6c:af:fa:e7:f4:44:e0:45:0b:2d:fc:55:84:e0:9a:34:d0:56:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Oct 14 09:59:47 2024 GMT
            Not After : Oct 13 10:04:47 2025 GMT
        Subject: CN=8C9BE0FF83A8FE1E89FC09274133E0A4306213B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:35:26:18:9e:e9:f8:ac:35:14:8b:db:74:
                    2d:cc:4f:f6:1a:92:3d:b6:3e:7d:17:ab:6e:90:92:
                    c9:7b:cf:ca:db:08:43:f1:49:43:21:52:5c:d8:fd:
                    f2:71:73:b7:79:a3:77:ae:3a:c0:b1:6c:07:05:b1:
                    d8:33:16:75:7c:2d:52:8d:a3:c9:01:31:16:7a:7d:
                    c4:88:a7:ce:fa:f1:71:2a:7b:42:e2:26:82:19:b4:
                    92:bf:b7:05:1d:79:95:16:9c:36:a4:b1:cd:b8:60:
                    c7:1c:42:e7:b0:e3:f9:d8:04:a5:47:60:01:37:47:
                    40:81:68:9a:49:21:55:c9:e4:9c:32:32:5b:2c:29:
                    e2:01:da:24:5d:43:54:0b:5b:ad:aa:73:3e:d9:4a:
                    00:2a:7b:4d:1f:9e:10:da:96:6e:ef:98:f9:d6:a1:
                    8f:3d:81:d0:62:91:6b:29:ba:90:6e:ee:a1:22:2a:
                    d0:6f:3a:08:d7:76:9c:0b:0c:1a:b9:7d:9c:72:b2:
                    8e:45:f4:6f:d6:e5:7f:3f:c6:12:45:66:4e:c4:c9:
                    62:33:a7:f6:5c:f4:18:58:dc:d3:51:70:3b:27:3e:
                    ab:e6:5c:63:fe:b9:e3:4e:1c:36:2e:52:de:a6:24:
                    ef:08:b5:20:84:03:1b:57:44:4f:61:03:db:a8:92:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9B:E0:FF:83:A8:FE:1E:89:FC:09:27:41:33:E0:A4:30:62:13:B0
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:af:dc:3d:65:ed:f0:02:4e:d1:bf:24:23:04:46:73:ad:bb:
         2f:fd:b7:9a:0b:7d:cc:68:32:2b:48:85:fe:19:cd:7d:c0:24:
         7d:bc:98:14:5e:21:ba:8a:6a:67:09:c5:d6:c2:ed:09:10:75:
         88:68:9b:7c:15:fa:6c:68:a3:bc:2c:4f:73:78:fd:84:6d:24:
         bf:3e:14:14:7a:44:e4:de:55:85:c5:84:4a:96:08:ef:d6:c0:
         01:5b:70:20:a3:9a:95:e5:1a:4d:00:ac:d1:05:29:e8:98:4c:
         a0:51:d9:7a:90:cf:ab:9e:99:12:2b:a7:90:b1:5a:ed:d6:79:
         08:2f:a4:28:d2:d2:04:e2:72:e2:33:91:66:fe:89:36:78:39:
         c8:86:2e:4f:5f:ba:db:ce:e8:7c:9f:53:2d:13:c9:e3:42:19:
         9e:68:4b:10:8b:bc:7e:91:38:b2:ea:3c:7b:4a:eb:23:72:81:
         23:26:0f:30:c7:70:c9:39:b8:6e:43:d5:f6:f4:ec:d0:fa:f2:
         ad:95:25:da:ba:2d:45:b8:83:e5:18:32:1a:56:a1:e4:25:5c:
         4e:d6:cc:15:0e:6e:22:0d:10:42:ab:bf:84:f4:88:94:58:b3:
         0e:8a:f7:85:94:20:5b:13:a9:2e:60:b4:36:80:21:1f:8e:09:
         39:7c:c6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:31:23 2024 by rpki-client on console-fra.rpki-client.org