Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38372e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38372e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          Ni2Q+9o1Lnc/53J4LuW2CnXX0CdnXfdVZq1TGtNBkvo=
Subject key identifier:   AC:AF:71:9C:25:57:07:CB:4D:13:34:7A:6E:F7:A6:F3:20:B0:BB:5D
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       66179232E6D8BDEAD4B2DB7D7441AD50157FA22B
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38372e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 31 Aug 2025 09:00:00 +0000
ROA not before:           Sun 31 Aug 2025 08:55:00 +0000
ROA not after:            Sun 30 Aug 2026 09:00:00 +0000
asID:                     17727
IP address blocks:        110.35.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 05:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:17:92:32:e6:d8:bd:ea:d4:b2:db:7d:74:41:ad:50:15:7f:a2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Aug 31 08:55:00 2025 GMT
            Not After : Aug 30 09:00:00 2026 GMT
        Subject: CN=ACAF719C255707CB4D13347A6EF7A6F320B0BB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:91:7c:bd:4b:cd:46:39:0d:e9:fc:68:a9:
                    90:54:d3:f6:5a:6e:6d:04:e6:88:56:57:be:a3:f1:
                    56:8c:a4:af:a9:4b:cc:d0:b5:1f:c9:a8:2f:c2:fe:
                    81:32:91:30:7b:4d:4a:eb:32:10:9f:c8:32:ad:8c:
                    8f:37:20:2d:4a:62:f9:61:5e:93:3e:ff:db:0c:d1:
                    04:6d:81:c2:4a:ae:1d:8a:e0:33:cd:c3:1d:b5:95:
                    1f:1e:01:3a:06:94:27:99:dc:0f:cd:23:8e:c4:9e:
                    d0:9e:bb:29:1c:81:a4:49:1e:0d:8b:e2:39:62:ec:
                    66:49:19:23:54:9f:46:ca:4a:8c:0f:8b:ef:d8:5f:
                    82:d3:56:eb:64:59:a7:ca:23:92:80:e7:74:3b:31:
                    22:6a:47:a4:9b:2b:53:84:ee:70:16:c7:7f:3f:06:
                    59:f1:9f:4e:23:4d:28:20:74:a6:af:4e:d6:50:08:
                    5e:7f:25:50:a5:d1:de:57:85:12:68:a6:11:80:db:
                    4b:05:d5:d5:94:1b:00:67:d3:56:e8:62:ea:09:32:
                    cf:67:21:ee:24:9e:aa:62:08:a5:c9:c4:12:78:03:
                    57:3d:7c:37:ed:e7:9c:7d:20:fa:b2:d5:6b:81:85:
                    23:e5:c7:c4:eb:03:04:19:72:74:ab:c3:aa:d2:37:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AF:71:9C:25:57:07:CB:4D:13:34:7A:6E:F7:A6:F3:20:B0:BB:5D
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38372e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:24:8d:b5:9c:a3:ac:1f:41:a0:26:13:4b:23:e9:5f:78:ac:
         73:76:d6:49:5d:4a:51:dd:17:63:02:0e:80:a6:5e:11:88:fd:
         34:e7:ba:b7:ad:da:07:da:28:ab:a5:f9:ba:c1:4e:0a:ae:cd:
         74:ff:0a:c2:cb:bf:6a:f3:39:3b:62:24:ae:91:90:3d:05:30:
         ad:82:42:1d:31:bb:81:9d:3e:59:61:b7:7a:f5:86:81:50:a8:
         7d:3d:b7:81:c2:0f:00:20:75:61:84:76:1f:13:9d:22:e9:db:
         7f:f1:64:69:23:2b:ac:ec:38:b9:ab:f4:88:62:c5:64:c8:13:
         57:5a:11:74:f1:b3:7e:8e:dc:1f:84:24:04:fb:26:32:94:22:
         25:23:38:b2:ef:1f:3b:89:52:7b:b1:d3:08:9e:0c:d5:69:92:
         73:c5:3c:71:1d:21:a0:59:ca:81:47:ab:58:04:75:40:40:77:
         72:39:96:b9:4a:09:83:55:06:0e:5a:4d:7d:60:1f:b7:a9:02:
         54:bd:b8:98:bd:eb:f3:f5:75:d3:78:c7:9a:8a:eb:62:b7:d3:
         90:6d:f4:a8:12:31:b9:37:4c:72:ac:08:3a:32:a8:21:07:3e:
         a0:be:4b:a5:74:03:c2:68:cd:21:37:9b:93:c4:33:eb:bb:d1:
         16:65:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:38:18 2025 by rpki-client