Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38302e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          9M/uh61jfROxM23S5El2W312tSbkCMDtoJyfGJt8kRo=
Subject key identifier:   08:E1:01:11:CC:FC:C8:AC:93:EA:2C:01:85:AF:E8:41:DF:BE:5E:0B
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       3F5A50135B42F4C4D8D50FA128B73B8934A90395
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 31 Aug 2025 10:00:02 +0000
ROA not before:           Sun 31 Aug 2025 09:55:02 +0000
ROA not after:            Sun 30 Aug 2026 10:00:02 +0000
asID:                     17727
IP address blocks:        110.35.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 05:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5a:50:13:5b:42:f4:c4:d8:d5:0f:a1:28:b7:3b:89:34:a9:03:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Aug 31 09:55:02 2025 GMT
            Not After : Aug 30 10:00:02 2026 GMT
        Subject: CN=08E10111CCFCC8AC93EA2C0185AFE841DFBE5E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:77:03:91:49:0f:4b:19:ea:56:f5:82:79:
                    b8:d0:45:bd:92:04:69:98:c8:74:3e:a7:15:48:00:
                    8e:2c:2a:f7:55:70:bf:04:1c:e6:61:a8:02:15:d9:
                    65:b3:95:7c:96:1d:4f:62:4c:d3:67:86:1b:33:c5:
                    9c:de:18:1d:c4:2b:d0:bc:73:04:b0:0e:e2:75:79:
                    c2:c4:1a:c0:97:67:c4:5e:9c:2c:46:bc:1d:e7:9e:
                    66:0d:65:7b:f4:21:74:53:53:1c:b7:e8:c9:c2:d0:
                    9e:64:e3:a0:a3:cd:8f:4a:ea:b4:64:ab:f5:06:bd:
                    6f:c4:67:a1:b5:34:c6:36:93:18:e4:cc:54:48:60:
                    87:86:f9:3d:fc:69:12:ab:05:54:76:fe:4a:2c:0c:
                    86:6e:bf:d4:a3:c5:2e:62:40:28:73:50:33:3c:4d:
                    d3:89:5a:57:f2:be:b5:5c:af:82:9d:9a:6a:8d:0b:
                    ef:88:3d:f1:fd:53:2c:cf:a9:c0:89:c3:fc:80:d7:
                    88:1a:c1:d1:29:e3:08:a3:b0:2c:93:b7:5d:e9:ff:
                    4d:c3:64:96:20:7d:7b:28:dc:03:6a:1d:ae:e1:79:
                    37:26:07:49:e5:73:0f:c9:c0:d3:f7:8e:4d:16:e8:
                    3c:e4:32:98:fd:3b:9b:66:34:d0:a5:2b:f2:9d:93:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E1:01:11:CC:FC:C8:AC:93:EA:2C:01:85:AF:E8:41:DF:BE:5E:0B
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:34:c2:68:49:16:c8:a2:ab:86:ae:46:33:ca:cc:37:03:7b:
         b1:e6:f9:ff:68:60:b1:4b:34:99:d6:9d:c4:65:73:ee:e1:b8:
         0c:9a:2b:f4:0e:76:eb:eb:8b:45:36:4f:2c:64:cf:e1:9b:bd:
         5d:58:e3:69:e1:c6:37:a6:e2:71:39:9f:7d:ad:66:d3:ad:a4:
         89:9c:22:ad:77:13:41:9c:22:e0:34:86:4a:85:18:3d:20:03:
         1e:67:a4:d5:13:e7:06:6a:ed:05:e0:31:a9:0e:19:b7:e6:9d:
         da:e5:dc:52:6f:a4:6d:9a:90:6c:64:6c:d2:d0:06:ff:7d:6c:
         15:30:bf:1f:b2:47:56:ae:85:5a:e4:cb:eb:f6:fe:f6:8f:96:
         c8:4c:bd:42:fa:a9:90:f3:98:c1:c0:a7:eb:58:67:be:37:5a:
         c2:ad:53:14:64:45:26:78:12:14:82:24:81:77:9c:90:36:51:
         8c:b7:af:e7:ae:11:21:e4:43:fb:54:7e:cd:e1:6e:c5:fe:82:
         5d:a9:ae:55:99:7e:65:8c:83:31:e0:f8:ea:ee:ef:5d:02:84:
         ba:cf:09:cb:3a:53:21:61:4c:5a:49:27:7d:e4:d0:83:90:f5:
         d9:f8:5f:ff:75:ee:28:5d:a2:56:b5:13:82:6e:4d:c5:d4:9e:
         9b:6a:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:40:15 2025 by rpki-client