Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38352e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38352e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          KH7Ab385/2rXWdd7ttn9zdbjgi2i6RRU6Xi7T2Upkfg=
Subject key identifier:   E9:46:F3:67:C1:13:ED:F9:C5:22:28:DF:89:D4:C9:11:B3:07:49:94
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       210380C773AF2CBA70D861375F374CCFE3772917
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38352e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 29 Oct 2023 08:00:03 +0000
ROA not before:           Sun 29 Oct 2023 07:55:03 +0000
ROA not after:            Sun 27 Oct 2024 08:00:03 +0000
asID:                     17727
IP address blocks:        110.35.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 19:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:03:80:c7:73:af:2c:ba:70:d8:61:37:5f:37:4c:cf:e3:77:29:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Oct 29 07:55:03 2023 GMT
            Not After : Oct 27 08:00:03 2024 GMT
        Subject: CN=E946F367C113EDF9C52228DF89D4C911B3074994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:cd:71:d6:57:27:c6:ec:6e:2b:07:73:dc:
                    2d:8d:8a:48:55:b5:48:25:70:bc:cc:c5:3e:5a:9c:
                    3b:84:5f:3f:76:d8:49:e5:58:41:c4:0e:39:77:29:
                    26:46:c7:7e:12:9d:02:cf:fd:d9:fc:cf:fa:8e:c8:
                    e4:cd:0e:ed:84:fc:e2:20:6e:a0:59:2b:37:36:64:
                    d7:87:63:db:67:12:0f:51:b1:6a:f7:77:ba:36:c9:
                    c0:c9:3d:4a:34:48:01:1f:c8:57:a9:54:ae:89:44:
                    b1:c2:45:0f:fa:07:b9:20:59:2e:7d:43:c9:2a:ae:
                    2a:30:43:b9:cc:34:04:0b:56:ce:7e:dc:92:af:7b:
                    5e:01:c5:04:b7:c6:a3:db:bb:a1:ab:c0:c1:8f:b4:
                    3e:d4:86:18:d7:64:63:52:d7:bf:76:eb:6b:af:9c:
                    d6:20:9d:88:b7:2a:a8:fd:c0:ef:bf:ba:b9:d2:7b:
                    32:20:5b:b7:7d:71:e3:ef:cf:95:96:02:e3:88:5d:
                    89:2d:59:a9:37:e3:56:95:fb:6d:64:4b:c0:f6:13:
                    57:88:54:58:a9:04:f2:c7:2d:6b:3a:dd:85:67:29:
                    0f:0b:55:63:9b:42:cc:d2:6e:78:ed:7a:d0:bf:a7:
                    9c:08:39:a6:df:1c:f4:12:a4:50:70:4d:0d:e9:fa:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:46:F3:67:C1:13:ED:F9:C5:22:28:DF:89:D4:C9:11:B3:07:49:94
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38352e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:1e:e0:5a:c1:ab:9c:14:60:92:58:56:bb:7a:84:28:d7:f0:
         65:17:10:3f:4e:f5:e0:6d:8e:5d:48:f3:b4:32:f7:a5:6c:d5:
         3d:cb:5c:3c:e4:1a:64:9f:fa:22:5f:5c:3f:ca:f3:59:99:b7:
         22:9c:ca:83:03:a9:6d:79:49:24:c7:ff:29:67:4f:cf:7a:15:
         51:1b:c1:1f:78:93:69:d9:a4:fb:8d:4c:fc:8d:7f:57:01:af:
         ab:0a:6b:56:2b:58:14:85:d1:f2:17:fe:91:a2:8b:8e:5c:cc:
         24:42:aa:86:a9:e0:92:d6:3d:05:f2:c7:8f:96:15:9b:8e:cf:
         f6:04:05:93:45:4e:07:71:85:0c:3f:88:5c:b0:b5:3c:e2:93:
         50:82:74:c1:13:90:c8:a1:4a:5a:f6:f7:c5:0c:4e:98:dc:bc:
         c6:dc:29:a1:c3:db:ec:2d:fb:6e:b4:7d:2d:1f:53:95:51:a6:
         fe:c3:f4:32:b4:c1:83:4b:f5:4e:02:b9:ee:40:b7:ed:c8:40:
         ce:bb:e7:6f:27:7f:de:fa:2c:39:a6:37:cc:75:2f:7d:12:97:
         0f:68:75:34:78:cb:46:8f:61:91:de:0c:f3:33:c4:88:47:bb:
         4c:61:62:60:4f:ee:c3:a1:c0:ef:0a:34:dd:28:e1:d6:06:0c:
         25:1b:73:7a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUIQOAx3OvLLpw2GE3XzdMz+N3KRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE
NjdENjUxMTAeFw0yMzEwMjkwNzU1MDNaFw0yNDEwMjcwODAwMDNaMDMxMTAvBgNV
BAMTKEU5NDZGMzY3QzExM0VERjlDNTIyMjhERjg5RDRDOTExQjMwNzQ5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWc1x1lcnxuxuKwdz3C2NikhV
tUglcLzMxT5anDuEXz922EnlWEHEDjl3KSZGx34SnQLP/dn8z/qOyOTNDu2E/OIg
bqBZKzc2ZNeHY9tnEg9RsWr3d7o2ycDJPUo0SAEfyFepVK6JRLHCRQ/6B7kgWS59
Q8kqriowQ7nMNAQLVs5+3JKve14BxQS3xqPbu6GrwMGPtD7UhhjXZGNS179262uv
nNYgnYi3Kqj9wO+/urnSezIgW7d9cePvz5WWAuOIXYktWak341aV+21kS8D2E1eI
VFipBPLHLWs63YVnKQ8LVWObQszSbnjtetC/p5wIOabfHPQSpFBwTQ3p+r4HAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU6UbzZ8ET7fnFIijfidTJEbMHSZQwHwYDVR0j
BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx
OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE
NjUxMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzMDJlMzMzNTJlMzgzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuI1UwDQYJKoZIhvcN
AQELBQADggEBAJ8e4FrBq5wUYJJYVrt6hCjX8GUXED9O9eBtjl1I87Qy96Vs1T3L
XDzkGmSf+iJfXD/K81mZtyKcyoMDqW15SSTH/ylnT896FVEbwR94k2nZpPuNTPyN
f1cBr6sKa1YrWBSF0fIX/pGii45czCRCqoap4JLWPQXyx4+WFZuOz/YEBZNFTgdx
hQw/iFywtTzik1CCdMETkMihSlr298UMTpjcvMbcKaHD2+wt+260fS0fU5VRpv7D
9DK0wYNL9U4Cue5At+3IQM67528nf976LDmmN8x1L30Slw9odTR4y0aPYZHeDPMz
xIhHu0xhYmBP7sOhwO8KNN0o4dYGDCUbc3o=
-----END CERTIFICATE-----
Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org