Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38372e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38372e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          cSkX2vad3D+68aiHVpOyuu5ijQNnK/Q6KdmTAgmwDTE=
Subject key identifier:   AF:92:0E:EF:CB:54:0C:C2:CA:9A:EF:20:54:8B:67:5A:2F:3E:D0:F6
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       13FD47CCEF87FC6F4E90E3A8528068A58CC66264
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38372e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 29 Oct 2023 08:00:01 +0000
ROA not before:           Sun 29 Oct 2023 07:55:01 +0000
ROA not after:            Sun 27 Oct 2024 08:00:01 +0000
asID:                     17727
IP address blocks:        110.35.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 18:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fd:47:cc:ef:87:fc:6f:4e:90:e3:a8:52:80:68:a5:8c:c6:62:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Oct 29 07:55:01 2023 GMT
            Not After : Oct 27 08:00:01 2024 GMT
        Subject: CN=AF920EEFCB540CC2CA9AEF20548B675A2F3ED0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:06:a5:a8:cf:08:d6:a8:bf:75:00:57:fc:
                    d6:18:a5:f9:3f:ae:b9:73:95:c5:91:74:f8:9a:b4:
                    05:21:b8:6f:be:8f:29:68:f9:c0:b7:32:cb:e7:69:
                    25:f6:fd:95:8a:b3:a2:c1:21:31:c2:51:d0:ca:d4:
                    35:ed:06:ee:62:b7:59:a8:cf:24:60:54:5d:e2:7c:
                    ed:38:72:09:a9:53:5e:31:73:84:f9:5c:be:bc:52:
                    dd:2f:11:aa:fe:3c:94:0e:fc:75:f3:35:63:cf:7b:
                    a8:7b:7d:8c:06:7f:53:fd:f8:1d:0a:bb:95:86:27:
                    95:0a:ce:32:8a:c4:93:a1:8c:d6:ab:cf:5b:81:52:
                    27:c9:6d:d7:2d:5b:05:68:8d:de:a3:6d:43:38:1c:
                    06:32:72:64:a1:76:bf:b2:c1:64:fb:9e:79:6f:0a:
                    0d:27:9a:a7:f3:81:43:42:eb:35:d7:cd:ee:02:3d:
                    94:31:ed:ad:7c:28:79:ba:2a:4c:db:81:75:19:d3:
                    9d:5c:c7:eb:31:70:42:e8:25:bb:f7:54:a3:b9:bd:
                    5a:e6:6d:52:45:31:fa:14:ea:15:cb:ef:0f:e2:cc:
                    6d:53:49:69:4f:43:99:a4:d0:87:c7:36:b0:9b:81:
                    0d:ce:61:5b:01:40:bf:7c:fe:c8:61:ab:92:55:f4:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:92:0E:EF:CB:54:0C:C2:CA:9A:EF:20:54:8B:67:5A:2F:3E:D0:F6
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38372e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:f1:a6:41:34:f7:93:27:6c:b3:c4:d2:82:8f:1c:93:3a:
         f7:cc:d9:63:a0:f1:e0:fc:85:1c:c3:e3:df:21:cd:77:10:4e:
         64:09:2c:0e:ba:13:49:8c:cc:29:30:ee:78:26:4c:fa:7e:2b:
         be:e1:5b:16:d5:cd:5a:61:85:4e:03:20:d4:70:7f:96:42:f7:
         18:54:b5:e3:c4:de:3b:a6:03:64:8f:69:60:fd:3f:05:4e:e1:
         bf:26:e1:71:14:d8:26:f2:0f:c0:3b:75:31:8c:d9:e4:46:fe:
         0a:d8:18:c2:e2:8b:0c:a6:7e:5e:4b:90:b8:bc:65:ea:e2:f4:
         0e:ea:5a:c3:86:ac:ff:eb:be:96:67:e0:cd:42:cd:3f:10:fe:
         11:1d:4d:86:70:b2:f1:fb:a9:66:73:c3:3c:8f:0f:de:41:be:
         77:37:a4:9e:45:02:bc:71:e7:48:7e:ef:61:2a:64:98:67:66:
         d8:d6:5a:24:69:43:1f:dd:11:37:8e:86:f1:1b:01:7d:07:ee:
         73:a0:c3:45:23:2a:b6:63:f8:27:7c:b9:12:7a:bd:e7:ca:fc:
         b7:28:ef:73:3f:40:4f:e0:6a:3d:6a:db:e0:d2:6b:09:04:c3:
         f6:76:e7:78:e1:5d:36:24:5b:c3:85:ed:1d:1a:cc:50:ab:e5:
         da:b9:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:10:55 2024 by rpki-client on console-ams.rpki-client.org