Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38332e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38332e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          nVqUHOO8hW8HTaMJ/chyV4p2dx3G5o2MrNyoB1IKj88=
Subject key identifier:   BA:16:9C:7F:B1:D1:5B:C0:63:6C:A8:C3:A0:8F:C5:8D:D8:78:8F:5F
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       700A6F8BC3F9A8D0076F874423B2F64B4888D42D
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38332e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 29 Oct 2023 08:00:00 +0000
ROA not before:           Sun 29 Oct 2023 07:55:00 +0000
ROA not after:            Sun 27 Oct 2024 08:00:00 +0000
asID:                     17727
IP address blocks:        110.35.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 19:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0a:6f:8b:c3:f9:a8:d0:07:6f:87:44:23:b2:f6:4b:48:88:d4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Oct 29 07:55:00 2023 GMT
            Not After : Oct 27 08:00:00 2024 GMT
        Subject: CN=BA169C7FB1D15BC0636CA8C3A08FC58DD8788F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:e1:58:15:9e:84:0b:52:5c:ca:10:aa:f7:
                    d6:51:90:21:d7:aa:e1:8b:01:9f:d5:ee:f4:d4:24:
                    07:6b:8b:95:a5:c0:d9:36:73:f3:83:6a:f3:d3:a8:
                    10:93:d6:00:40:34:d3:04:4a:f5:2e:f1:13:34:c8:
                    4b:de:b7:a3:af:a1:6e:4e:93:07:b5:a7:cf:74:52:
                    37:66:80:f6:89:60:a5:be:de:de:a2:9c:b5:b5:49:
                    1d:8f:dd:88:b9:1d:99:5d:84:84:b0:fa:da:e7:8f:
                    c9:9c:ff:49:17:8a:ff:fe:f4:09:24:37:31:f3:c9:
                    91:b0:67:4e:cd:11:9b:bf:8b:17:2a:59:ac:af:39:
                    e2:53:ca:97:d4:54:61:ac:45:9f:19:d5:23:58:f2:
                    0b:1d:00:f1:03:c1:01:5d:09:2f:bd:aa:13:fa:84:
                    0f:52:b3:d7:21:1d:e2:6f:f1:b3:9a:63:2d:43:37:
                    c6:fd:67:3e:47:ef:af:2d:ee:86:4e:91:1d:a2:fd:
                    ff:1b:ad:2e:5a:c9:ed:17:b7:b9:a2:15:05:b7:6d:
                    dc:f2:c9:1b:64:2d:48:37:5a:50:3a:41:b0:94:90:
                    aa:53:36:12:51:35:a1:c1:07:fd:63:21:e7:03:ca:
                    2b:17:1a:15:32:29:c7:f5:ce:60:fb:71:5b:b9:9b:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:9C:7F:B1:D1:5B:C0:63:6C:A8:C3:A0:8F:C5:8D:D8:78:8F:5F
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38332e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:ca:a7:95:bc:45:c5:0a:5a:1f:0b:bd:8e:05:c6:f5:87:
         8b:93:89:d1:55:6b:0c:5c:fb:94:7d:20:e9:15:68:44:e2:74:
         c9:88:e2:87:b4:7b:ba:51:4b:a9:da:a3:4f:ed:fe:e7:7e:b3:
         ba:c1:0f:d7:7e:b2:6d:3b:33:28:45:38:a5:d7:f1:38:9b:56:
         f0:ae:b2:68:b0:6b:76:74:36:0d:8c:f0:c7:f4:2b:f7:5c:f7:
         b9:b0:74:21:c1:2c:5f:7a:be:61:6c:c2:a3:63:c8:47:ac:44:
         c0:b2:74:d2:45:5c:ff:23:d7:b7:27:30:f1:30:8a:da:92:69:
         e4:af:1a:be:77:7f:1c:a5:75:09:94:bc:8f:c4:8d:9e:0d:87:
         10:15:cd:88:d3:6f:27:d7:a9:79:ad:30:a8:ec:68:d3:a0:f9:
         a7:9b:42:3a:7e:23:b5:ea:3e:ba:7f:3f:a5:c2:96:28:0d:0c:
         a8:f7:ab:4f:6c:23:f2:7d:d8:7c:56:8e:e4:6f:dd:30:e9:ca:
         ba:05:ff:bb:1f:f7:9e:b9:fb:57:20:04:bb:0a:16:36:13:1f:
         58:dd:5a:f1:09:9e:2f:79:23:d5:ac:40:36:c6:db:c1:a1:c2:
         cc:82:3c:a3:43:81:6e:b3:9e:ed:d4:d6:68:3f:9d:01:9a:99:
         20:7e:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org