Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa
File:                     3131302e33352e38302e302f32312d3231203d3e203137373237.roa (raw, json)
Hash identifier:          Ss/IdqODQlesFJ6ISDf8Q9otM3Op8rrNsac9It2iUiU=
Subject key identifier:   E7:29:56:F4:8D:F0:BF:3D:7C:A7:8F:76:B1:88:FB:71:26:76:5C:4B
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       73026342A51D90B8AF689E9EC3C0D714D9855856
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa
Signing time:             Sun 31 Aug 2025 10:00:01 +0000
ROA not before:           Sun 31 Aug 2025 09:55:01 +0000
ROA not after:            Sun 30 Aug 2026 10:00:01 +0000
asID:                     17727
IP address blocks:        110.35.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 05:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:02:63:42:a5:1d:90:b8:af:68:9e:9e:c3:c0:d7:14:d9:85:58:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Aug 31 09:55:01 2025 GMT
            Not After : Aug 30 10:00:01 2026 GMT
        Subject: CN=E72956F48DF0BF3D7CA78F76B188FB7126765C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:73:68:88:36:99:cb:26:73:6c:7a:f1:26:
                    db:c6:5d:bd:74:10:6b:7b:cf:d7:5e:e1:07:7c:ee:
                    bf:68:44:fb:4a:4a:16:53:e6:26:a4:c7:9c:d1:38:
                    71:94:c5:1a:ff:35:12:aa:0d:d8:d7:79:3d:38:42:
                    12:7b:66:51:e3:3d:4e:1a:85:6e:15:0d:c1:4d:21:
                    5e:5d:3f:b9:30:c8:58:1a:2b:5d:62:c5:51:df:3c:
                    3d:93:7a:8d:d7:ef:e4:d5:66:ef:9f:f1:f1:49:de:
                    34:86:f5:35:61:d4:de:44:22:dd:ca:a6:83:d4:f3:
                    96:bc:56:43:2b:f9:58:ba:db:98:4d:09:82:96:85:
                    2f:b1:f2:c1:a1:fd:68:56:de:be:e5:47:c7:c4:24:
                    98:a5:47:c3:0c:ed:e6:ee:5e:2c:28:33:c9:c0:66:
                    15:86:03:30:ac:be:eb:82:c4:b9:c8:0c:f5:15:64:
                    ee:14:97:99:82:c7:ff:09:52:c4:9e:4a:fd:ba:c9:
                    55:8b:93:66:3f:10:7f:3f:ab:b9:9e:71:69:5c:f6:
                    1d:c7:d8:29:b3:d9:5c:9b:7c:00:5a:4d:85:a9:bd:
                    8b:33:0c:9c:22:5b:41:e0:ba:03:8a:a8:e1:53:5d:
                    16:a8:90:16:1f:45:09:eb:90:58:49:d7:78:f9:66:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:29:56:F4:8D:F0:BF:3D:7C:A7:8F:76:B1:88:FB:71:26:76:5C:4B
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:1a:ca:e8:e2:f9:69:11:28:5f:25:45:d3:64:05:5e:ce:a0:
         1a:41:90:f0:95:99:08:d7:c2:c2:15:fb:18:cd:53:79:cb:a7:
         19:9f:eb:ac:15:c4:11:c0:08:cf:63:e0:0d:0f:4f:ab:a5:37:
         95:d5:8b:7d:5d:79:6d:a2:7c:b3:87:9b:0a:c4:df:fc:55:6e:
         a2:25:98:53:eb:48:2f:03:77:0f:33:f4:f4:ce:44:e7:49:87:
         88:32:d5:bf:92:d7:a2:d8:d9:1a:5f:9c:a7:a8:bc:15:d7:3d:
         92:12:d6:77:4e:8b:fa:a0:f5:43:29:c0:5b:52:62:68:3d:dd:
         38:62:53:82:3e:b5:71:b1:a9:16:4a:f5:86:0d:6d:62:1a:e4:
         3d:d6:1b:c8:bb:b0:56:c8:42:b0:14:c8:60:66:84:09:35:14:
         b7:51:55:88:d1:fd:eb:60:50:d3:4d:15:55:11:e8:58:40:06:
         c9:9b:f2:66:af:9b:02:76:24:31:d8:42:18:60:b1:86:38:a1:
         f3:85:3e:98:1f:7f:92:ab:42:a6:c4:97:90:54:ae:d1:d9:2c:
         8e:4d:69:3b:4a:b6:a2:a9:d1:4d:05:a7:73:ca:4c:d3:19:a5:
         13:8a:f5:98:cb:3e:13:12:b4:01:41:0f:53:d7:2b:85:cb:41:
         c6:ea:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:35:58 2025 by rpki-client