Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38362e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          UBqIV1Wxja0E88NKlJzZ9lVr44tYJNu7EH4VS6N1pEo=
Subject key identifier:   ED:46:9A:1A:53:96:72:0D:6E:CF:71:1E:39:90:8A:A1:09:93:AB:7F
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       29F926DECC96B13BEEEE44A56822462EB185107F
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 31 Aug 2025 07:00:00 +0000
ROA not before:           Sun 31 Aug 2025 06:55:00 +0000
ROA not after:            Sun 30 Aug 2026 07:00:00 +0000
asID:                     17727
IP address blocks:        110.35.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 05:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:26:de:cc:96:b1:3b:ee:ee:44:a5:68:22:46:2e:b1:85:10:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Aug 31 06:55:00 2025 GMT
            Not After : Aug 30 07:00:00 2026 GMT
        Subject: CN=ED469A1A5396720D6ECF711E39908AA10993AB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:28:01:fd:52:74:b9:ed:88:d2:28:a7:02:
                    26:d1:6f:6c:4c:20:6d:b9:08:be:0f:ca:01:fa:19:
                    96:11:e0:22:43:56:c0:d2:ca:2a:33:c2:e0:49:0f:
                    5e:3f:ce:85:a6:04:b2:51:8f:47:3f:d5:9e:67:6a:
                    db:fa:f8:cb:e1:d2:db:b1:bf:ed:33:8b:8b:7e:bd:
                    3a:a9:8d:c4:95:d0:6f:72:bb:b8:b0:1a:f5:45:59:
                    5e:97:7f:ab:b6:d3:ea:3b:b1:c9:ea:21:73:f5:5f:
                    df:a0:26:b9:ee:9e:cb:07:ac:7c:3b:fe:9b:aa:e6:
                    80:4c:58:d3:e8:f5:23:4e:c7:b8:1c:25:79:68:3f:
                    d5:18:e1:fd:d9:61:2d:ed:72:df:5e:7c:05:57:fa:
                    8f:a4:6c:01:9e:94:38:45:8d:cd:c6:d8:1a:9c:d5:
                    df:30:ee:1b:87:35:f6:a3:bd:d5:ea:3e:c7:72:d6:
                    29:a9:dd:90:8f:1a:4f:ae:e8:32:73:83:1b:93:20:
                    d1:d7:5e:6e:0f:79:e1:69:76:6e:83:67:a5:cb:c9:
                    4e:b7:06:6d:b1:fe:e0:13:3d:c6:ac:05:8b:2b:a3:
                    f3:c3:25:b4:25:a8:0a:0a:9e:67:4e:3d:ce:b3:9e:
                    53:14:a0:24:e3:50:ed:07:cb:8d:a1:e1:b0:a7:6f:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:9A:1A:53:96:72:0D:6E:CF:71:1E:39:90:8A:A1:09:93:AB:7F
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:e3:ff:cc:36:62:84:71:d7:60:d3:36:3b:85:fa:60:4a:
         d5:88:ec:4e:11:eb:a3:37:ee:7f:d6:d0:49:d8:f8:81:8a:27:
         54:49:a7:1f:3f:5f:f8:14:f1:4c:90:6a:08:70:7e:7d:20:19:
         88:8c:d9:bb:86:6b:3a:75:d2:2a:fe:a9:32:49:c3:0c:4d:85:
         f9:23:3a:c4:76:10:fe:43:69:2d:e1:db:1f:7e:54:05:8d:8f:
         a1:a2:03:17:7b:34:43:89:c7:64:bd:20:af:11:c0:92:19:f8:
         b9:82:ba:f2:33:03:73:8f:80:4d:bb:f6:c8:e5:b0:43:4c:4c:
         c6:e2:c7:f9:96:25:cc:36:ef:00:2f:a0:79:18:ba:41:1f:ed:
         20:ae:b7:34:c3:91:be:2e:ee:90:31:23:37:ac:9b:4d:2d:f0:
         3d:8a:07:b2:2f:46:5b:ac:16:b5:03:d1:d2:ec:c4:00:60:98:
         c8:f2:32:72:fb:cf:67:57:d3:d7:ab:61:f4:b4:93:22:7f:3f:
         60:aa:79:97:99:ab:14:41:ed:5a:b6:52:96:bf:5d:d0:6c:00:
         b4:39:81:f8:26:6d:c3:6c:20:8d:9f:3c:47:8b:1f:ef:83:24:
         12:6d:8b:a3:db:0b:e4:4e:a2:b4:ae:03:a3:56:75:cb:45:da:
         09:22:5e:e8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUKfkm3syWsTvu7kSlaCJGLrGFEH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE
NjdENjUxMTAeFw0yNTA4MzEwNjU1MDBaFw0yNjA4MzAwNzAwMDBaMDMxMTAvBgNV
BAMTKEVENDY5QTFBNTM5NjcyMEQ2RUNGNzExRTM5OTA4QUExMDk5M0FCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDSgB/VJ0ue2I0iinAibRb2xM
IG25CL4PygH6GZYR4CJDVsDSyiozwuBJD14/zoWmBLJRj0c/1Z5natv6+Mvh0tux
v+0zi4t+vTqpjcSV0G9yu7iwGvVFWV6Xf6u20+o7scnqIXP1X9+gJrnunssHrHw7
/puq5oBMWNPo9SNOx7gcJXloP9UY4f3ZYS3tct9efAVX+o+kbAGelDhFjc3G2Bqc
1d8w7huHNfajvdXqPsdy1imp3ZCPGk+u6DJzgxuTINHXXm4PeeFpdm6DZ6XLyU63
Bm2x/uATPcasBYsro/PDJbQlqAoKnmdOPc6znlMUoCTjUO0Hy42h4bCnb6zBAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU7UaaGlOWcg1uz3EeOZCKoQmTq38wHwYDVR0j
BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx
OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE
NjUxMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzMDJlMzMzNTJlMzgzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABuI1YwDQYJKoZIhvcN
AQELBQADggEBACn74//MNmKEcddg0zY7hfpgStWI7E4R66M37n/W0EnY+IGKJ1RJ
px8/X/gU8UyQaghwfn0gGYiM2buGazp10ir+qTJJwwxNhfkjOsR2EP5DaS3h2x9+
VAWNj6GiAxd7NEOJx2S9IK8RwJIZ+LmCuvIzA3OPgE279sjlsENMTMbix/mWJcw2
7wAvoHkYukEf7SCutzTDkb4u7pAxIzesm00t8D2KB7IvRlusFrUD0dLsxABgmMjy
MnL7z2dX09erYfS0kyJ/P2CqeZeZqxRB7Vq2Upa/XdBsALQ5gfgmbcNsII2fPEeL
H++DJBJti6PbC+ROorSuA6NWdctF2gkiXug=
-----END CERTIFICATE-----
Generated at Mon Sep 8 09:38:04 2025 by rpki-client