Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38302e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          OglXizFwh4HFfIlffwPMi/xsToot5zFmP27BdI5KuSg=
Subject key identifier:   BF:AF:0F:3F:CC:DF:DF:7F:09:48:90:BD:7D:A4:3F:43:3B:02:E0:70
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       4ECDD3D064E5EDA1AC19E900ECCA47734252A08C
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 29 Oct 2023 08:00:03 +0000
ROA not before:           Sun 29 Oct 2023 07:55:03 +0000
ROA not after:            Sun 27 Oct 2024 08:00:03 +0000
asID:                     17727
IP address blocks:        110.35.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 18:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cd:d3:d0:64:e5:ed:a1:ac:19:e9:00:ec:ca:47:73:42:52:a0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Oct 29 07:55:03 2023 GMT
            Not After : Oct 27 08:00:03 2024 GMT
        Subject: CN=BFAF0F3FCCDFDF7F094890BD7DA43F433B02E070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:4f:8f:85:2c:15:12:a8:3f:d5:94:34:62:
                    db:e6:7f:82:08:af:d3:1b:02:55:de:fc:b1:77:06:
                    3c:cd:5e:58:12:00:b7:26:52:ce:85:51:8a:17:3f:
                    ec:63:aa:f2:b4:7c:64:56:d3:98:f0:40:69:f9:ed:
                    d7:42:ee:aa:ab:e4:95:65:8c:28:70:4f:cc:de:3a:
                    2e:bd:ba:27:4a:86:43:a9:e9:36:1a:00:5d:62:6d:
                    01:d2:be:8c:eb:3d:e5:34:68:37:e7:12:7c:c4:b4:
                    af:35:28:2f:b2:c0:39:6a:b2:b1:7a:b4:cd:c9:33:
                    51:d8:fe:85:65:51:e4:b6:04:87:a6:2e:6d:4d:b7:
                    49:8a:dc:01:17:b2:63:ef:72:83:dc:5a:20:48:9d:
                    cd:27:5c:00:2d:9d:70:d1:a9:90:27:71:9e:34:46:
                    a3:df:1d:66:c4:e8:d0:8f:65:5c:d2:ef:11:57:cb:
                    ed:c8:94:b8:a8:81:10:b2:c2:0b:43:3a:61:f1:18:
                    3f:6a:1f:17:de:dd:83:b5:c8:e0:16:f9:e1:71:23:
                    f3:f1:69:48:91:69:e2:71:fa:58:57:17:4e:2a:0e:
                    92:0c:f7:c9:29:dc:8f:e4:b5:b1:db:08:aa:22:95:
                    62:40:9f:2c:43:d1:00:67:44:66:fd:06:5e:f9:e8:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AF:0F:3F:CC:DF:DF:7F:09:48:90:BD:7D:A4:3F:43:3B:02:E0:70
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:a9:c3:95:fb:e9:12:d7:94:26:97:6b:c4:5f:eb:0f:e0:
         db:c2:c9:75:59:b0:89:3a:08:71:91:79:b2:7c:ee:f7:9d:5c:
         aa:de:59:17:46:e7:28:72:12:5d:ff:07:1b:59:6d:31:c0:0e:
         56:a9:e4:ce:bf:18:c5:0d:6d:f8:ca:4b:8d:00:2f:69:ee:0c:
         46:ee:51:77:b3:60:d1:eb:a1:15:ae:5a:b4:a9:44:78:ff:ed:
         bb:75:54:98:2a:4f:3a:59:d0:cc:bc:b0:a1:45:37:d6:36:5f:
         b9:7e:d1:6b:75:5b:d3:4f:7c:82:ae:e9:b2:a7:0f:d6:34:0e:
         08:16:28:6b:36:b8:65:81:7a:6e:f9:e0:4e:35:be:91:ec:e7:
         c9:21:64:28:f4:b0:35:61:87:f9:68:54:8c:99:fe:9c:a0:30:
         ed:73:12:10:55:4a:19:06:55:3a:0b:b0:bd:a5:65:a0:e7:5a:
         a1:72:29:dd:e1:f2:10:96:c8:53:65:65:63:3f:32:c6:f9:7a:
         17:88:ae:c0:df:96:96:41:6b:37:bf:0d:b4:de:55:7a:2a:89:
         4c:48:3a:98:af:3f:8a:c5:6b:e3:9c:81:21:69:0c:1c:3a:79:
         01:b1:74:7e:b7:93:8d:6b:bb:cd:d5:66:cc:4f:b9:c9:e6:c4:
         ff:c1:45:76
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTs3T0GTl7aGsGekA7MpHc0JSoIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE
NjdENjUxMTAeFw0yMzEwMjkwNzU1MDNaFw0yNDEwMjcwODAwMDNaMDMxMTAvBgNV
BAMTKEJGQUYwRjNGQ0NERkRGN0YwOTQ4OTBCRDdEQTQzRjQzM0IwMkUwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5U+PhSwVEqg/1ZQ0Ytvmf4II
r9MbAlXe/LF3BjzNXlgSALcmUs6FUYoXP+xjqvK0fGRW05jwQGn57ddC7qqr5JVl
jChwT8zeOi69uidKhkOp6TYaAF1ibQHSvozrPeU0aDfnEnzEtK81KC+ywDlqsrF6
tM3JM1HY/oVlUeS2BIemLm1Nt0mK3AEXsmPvcoPcWiBInc0nXAAtnXDRqZAncZ40
RqPfHWbE6NCPZVzS7xFXy+3IlLiogRCywgtDOmHxGD9qHxfe3YO1yOAW+eFxI/Px
aUiRaeJx+lhXF04qDpIM98kp3I/ktbHbCKoilWJAnyxD0QBnRGb9Bl756HjzAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUv68PP8zf338JSJC9faQ/QzsC4HAwHwYDVR0j
BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx
OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE
NjUxMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzMDJlMzMzNTJlMzgzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuI1AwDQYJKoZIhvcN
AQELBQADggEBAJPSqcOV++kS15Qml2vEX+sP4NvCyXVZsIk6CHGRebJ87vedXKre
WRdG5yhyEl3/BxtZbTHADlap5M6/GMUNbfjKS40AL2nuDEbuUXezYNHroRWuWrSp
RHj/7bt1VJgqTzpZ0My8sKFFN9Y2X7l+0Wt1W9NPfIKu6bKnD9Y0DggWKGs2uGWB
em754E41vpHs58khZCj0sDVhh/loVIyZ/pygMO1zEhBVShkGVToLsL2lZaDnWqFy
Kd3h8hCWyFNlZWM/Msb5eheIrsDflpZBaze/DbTeVXoqiUxIOpivP4rFa+OcgSFp
DBw6eQGxdH63k41ru83VZsxPucnmxP/BRXY=
-----END CERTIFICATE-----
Generated at Wed May 1 18:10:55 2024 by rpki-client on console-ams.rpki-client.org