Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38302e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          K5Ldq4Rjd3fey9gQtmdT75YigVyac+3EonPvrwlfIM8=
Subject key identifier:   E6:F9:6A:6E:04:F3:0D:D0:FE:C0:84:1C:05:55:0E:CF:26:CD:3D:E5
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       41AAD647A4E469317DA63C6C3969E901691668D1
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 29 Sep 2024 09:00:03 +0000
ROA not before:           Sun 29 Sep 2024 08:55:03 +0000
ROA not after:            Sun 28 Sep 2025 09:00:03 +0000
asID:                     17727
IP address blocks:        110.35.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:aa:d6:47:a4:e4:69:31:7d:a6:3c:6c:39:69:e9:01:69:16:68:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Sep 29 08:55:03 2024 GMT
            Not After : Sep 28 09:00:03 2025 GMT
        Subject: CN=E6F96A6E04F30DD0FEC0841C05550ECF26CD3DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:75:d3:da:bd:07:e9:6f:a2:af:5b:65:31:
                    0c:13:ab:39:c3:29:19:82:43:3e:94:d9:fb:53:9b:
                    50:f9:2c:0c:45:13:0b:47:bf:23:44:50:1e:68:3b:
                    9d:7e:16:4e:ac:0f:a3:94:08:90:1d:30:9d:e3:f0:
                    1d:10:b6:9d:09:d3:87:d5:de:a5:20:2e:c7:3e:fd:
                    4a:06:36:07:46:24:61:2c:cb:0e:2c:22:cf:f3:52:
                    d0:4d:93:c9:1a:a8:d3:65:ac:1a:09:f8:0e:3d:94:
                    68:4f:3f:c2:25:6a:ba:0c:64:74:ae:09:5e:88:6a:
                    53:42:8f:20:ed:2d:63:aa:5f:f2:b8:04:fd:43:66:
                    5a:4d:c3:61:46:0b:05:f0:0e:74:25:10:35:5c:0a:
                    d8:fb:6d:16:9d:f9:ca:dc:d8:c6:ab:5c:ea:00:af:
                    44:ed:b4:36:ea:2d:a7:d2:3f:a5:18:e1:29:db:38:
                    b8:e1:fd:a6:f3:70:28:30:5b:74:1a:af:e7:88:3b:
                    87:4b:23:b4:82:b5:87:49:71:e9:01:47:62:8f:ee:
                    af:35:41:42:9e:5f:b1:da:43:f0:c4:11:12:82:e5:
                    99:a3:57:56:68:38:ce:b0:e9:bc:da:a8:eb:0b:06:
                    1b:02:6f:75:74:fe:4f:85:fe:c5:b4:51:80:38:7e:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F9:6A:6E:04:F3:0D:D0:FE:C0:84:1C:05:55:0E:CF:26:CD:3D:E5
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:3f:37:3b:e7:8c:99:45:57:3b:f0:4e:ea:19:73:c6:89:56:
         32:aa:a0:0e:c7:6e:90:a9:69:20:c8:60:20:a8:9b:c6:c5:37:
         25:73:d6:03:d6:87:7f:a9:ba:e0:f3:5d:81:70:12:2d:bf:7a:
         03:a2:03:7e:db:4c:64:ce:f7:d4:4e:85:4b:a2:25:71:33:b4:
         53:b4:d5:49:fb:5e:0b:fd:8e:90:a6:07:e4:4e:89:fe:17:14:
         93:e4:3a:5f:3e:68:8b:91:d8:db:95:a0:cb:98:d8:30:5e:bf:
         ba:68:c2:88:f3:9e:e2:92:27:c4:67:66:1f:06:24:d7:4a:9d:
         b3:58:18:c1:bc:43:a0:49:c7:7e:a5:c2:03:27:d6:90:1c:1e:
         7d:42:c8:cd:a8:45:16:00:d7:6c:d4:b1:16:8e:cc:20:f3:b4:
         21:6c:c7:68:b1:31:79:f6:6b:c9:75:42:f0:7d:5f:d1:fc:ef:
         af:a9:66:57:d9:bc:a8:26:5e:d0:7f:c7:ef:e2:4d:c0:a5:dd:
         17:ff:78:c4:2a:fe:75:e3:a5:3b:c0:c7:20:65:7c:69:55:54:
         03:c7:93:6a:01:49:85:66:f1:37:fa:ad:68:2b:57:ec:f0:f6:
         1a:ee:a9:82:cb:7b:67:31:fe:6a:da:95:cb:2e:ec:cd:a5:a8:
         92:10:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org