Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38322e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38322e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          uCxjlrcfo93RFt+dkzoj+cvCEBl4MSDxq9zcbXP0JC8=
Subject key identifier:   2E:A4:E9:D2:1B:49:36:09:20:63:E9:C7:40:4D:90:AE:E4:30:E6:E9
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       06B0F4C7308B11190B1B0CD39D155921EA691888
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38322e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 31 Aug 2025 10:00:02 +0000
ROA not before:           Sun 31 Aug 2025 09:55:02 +0000
ROA not after:            Sun 30 Aug 2026 10:00:02 +0000
asID:                     17727
IP address blocks:        110.35.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 05:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b0:f4:c7:30:8b:11:19:0b:1b:0c:d3:9d:15:59:21:ea:69:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Aug 31 09:55:02 2025 GMT
            Not After : Aug 30 10:00:02 2026 GMT
        Subject: CN=2EA4E9D21B4936092063E9C7404D90AEE430E6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:5b:2a:36:ee:8b:e1:9c:9b:e1:88:b3:79:
                    5c:6d:e3:d6:e1:0f:ed:af:df:bf:d5:92:c1:ff:0b:
                    3e:d0:cb:e9:28:08:ca:34:61:e6:c0:ce:01:54:ab:
                    f5:cf:09:47:be:69:0a:65:6e:4c:df:13:52:ce:eb:
                    dc:5c:cf:95:a0:f5:ae:f5:6d:81:48:71:93:a4:b3:
                    78:38:9c:8c:4d:1f:ee:5c:39:b0:10:66:50:bf:d9:
                    6b:14:28:35:09:ae:99:df:5e:da:e6:6a:64:3b:96:
                    f0:67:1c:a7:16:82:48:bf:c4:77:55:10:7a:12:0d:
                    f7:7c:2b:3c:ee:63:f7:5c:90:12:1e:8b:de:ad:55:
                    ff:ac:3c:54:dd:e0:ab:8b:72:df:3b:61:81:b2:30:
                    8e:13:45:0a:a8:71:8d:dc:fb:4b:c6:29:ab:d5:ee:
                    5b:2d:8f:0a:ed:92:cb:66:17:ce:c9:22:62:2b:37:
                    86:85:ef:a0:19:05:ad:b9:cf:e0:6d:4b:3b:fa:23:
                    9e:f1:ad:8a:3f:a9:9b:bc:de:64:fb:ba:80:54:8d:
                    31:59:be:8c:bd:59:22:2d:79:80:e5:cc:13:66:32:
                    c8:a7:c4:a6:ac:a6:ee:00:93:2c:96:27:67:15:36:
                    fb:92:84:85:63:e7:b0:f8:32:a1:94:6a:39:27:d1:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A4:E9:D2:1B:49:36:09:20:63:E9:C7:40:4D:90:AE:E4:30:E6:E9
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38322e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:d9:25:c6:d1:13:de:a9:ee:dc:3d:ee:16:5a:f2:f5:4c:d7:
         02:d6:72:04:b5:ba:c2:15:fa:53:ea:85:cd:f9:ad:24:ca:f0:
         f6:7a:8d:4e:be:5e:2a:25:ed:08:56:18:9b:af:a2:49:5b:ce:
         bd:dc:1a:8b:bb:92:32:62:3c:74:f9:90:98:96:45:7f:4d:40:
         53:5d:25:bf:a5:00:bf:1e:e6:ad:af:d3:48:a0:db:f3:bb:b7:
         d1:2e:ff:c7:07:9e:ba:09:81:56:e8:08:95:b3:94:59:c4:46:
         12:7e:40:93:da:74:bc:15:40:db:08:12:6b:8d:cf:5b:81:91:
         84:78:4b:ea:12:91:22:a4:ef:f9:b5:29:b3:da:a5:33:f7:57:
         99:ee:f0:52:83:c3:47:e4:2a:22:f3:c1:2d:59:3f:ec:21:46:
         00:82:4f:42:07:3d:44:93:8d:e0:5e:49:06:ed:13:1e:ac:30:
         c5:2b:85:33:57:70:0c:0b:15:a2:af:b1:f4:ab:5e:a5:59:11:
         46:c7:b7:ff:d9:ac:bb:d7:8a:eb:4c:ef:89:63:6f:ea:b8:8a:
         c5:b3:fe:c0:61:05:2f:68:ba:ec:70:ad:b7:5d:96:ab:f6:da:
         06:e0:1d:95:70:7a:8e:fd:6f:19:70:24:5d:34:1d:43:58:b6:
         36:2f:8b:14
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUBrD0xzCLERkLGwzTnRVZIeppGIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE
NjdENjUxMTAeFw0yNTA4MzEwOTU1MDJaFw0yNjA4MzAxMDAwMDJaMDMxMTAvBgNV
BAMTKDJFQTRFOUQyMUI0OTM2MDkyMDYzRTlDNzQwNEQ5MEFFRTQzMEU2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFFsqNu6L4Zyb4YizeVxt49bh
D+2v37/VksH/Cz7Qy+koCMo0YebAzgFUq/XPCUe+aQplbkzfE1LO69xcz5Wg9a71
bYFIcZOks3g4nIxNH+5cObAQZlC/2WsUKDUJrpnfXtrmamQ7lvBnHKcWgki/xHdV
EHoSDfd8KzzuY/dckBIei96tVf+sPFTd4KuLct87YYGyMI4TRQqocY3c+0vGKavV
7lstjwrtkstmF87JImIrN4aF76AZBa25z+BtSzv6I57xrYo/qZu83mT7uoBUjTFZ
voy9WSIteYDlzBNmMsinxKaspu4AkyyWJ2cVNvuShIVj57D4MqGUajkn0SSxAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQULqTp0htJNgkgY+nHQE2QruQw5ukwHwYDVR0j
BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx
OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE
NjUxMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzMDJlMzMzNTJlMzgzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuI1IwDQYJKoZIhvcN
AQELBQADggEBAKrZJcbRE96p7tw97hZa8vVM1wLWcgS1usIV+lPqhc35rSTK8PZ6
jU6+Xiol7QhWGJuvoklbzr3cGou7kjJiPHT5kJiWRX9NQFNdJb+lAL8e5q2v00ig
2/O7t9Eu/8cHnroJgVboCJWzlFnERhJ+QJPadLwVQNsIEmuNz1uBkYR4S+oSkSKk
7/m1KbPapTP3V5nu8FKDw0fkKiLzwS1ZP+whRgCCT0IHPUSTjeBeSQbtEx6sMMUr
hTNXcAwLFaKvsfSrXqVZEUbHt//ZrLvXiutM74ljb+q4isWz/sBhBS9ouuxwrbdd
lqv22gbgHZVweo79bxlwJF00HUNYtjYvixQ=
-----END CERTIFICATE-----
Generated at Mon Sep 8 09:43:54 2025 by rpki-client