Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32372e302f32342d3234203d3e203535373031.roa
File:                     3230322e37332e32372e302f32342d3234203d3e203535373031.roa (raw, json)
Hash identifier:          848GMHNPtJdGlisHHn1CoaHnfCzTPMw90FxtJ7N8CUU=
Subject key identifier:   3B:0C:92:2F:2F:73:82:FD:4E:B4:FC:44:C5:70:31:22:EF:BD:94:DC
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       3B93AED1BF0566F8BC1346E90244A517935590B7
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32372e302f32342d3234203d3e203535373031.roa
Signing time:             Mon 31 Jul 2023 00:13:39 +0000
ROA not before:           Mon 31 Jul 2023 00:08:39 +0000
ROA not after:            Mon 29 Jul 2024 00:13:39 +0000
asID:                     55701
IP address blocks:        202.73.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:93:ae:d1:bf:05:66:f8:bc:13:46:e9:02:44:a5:17:93:55:90:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jul 31 00:08:39 2023 GMT
            Not After : Jul 29 00:13:39 2024 GMT
        Subject: CN=3B0C922F2F7382FD4EB4FC44C5703122EFBD94DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:75:35:5d:2c:5c:75:61:bd:2c:ea:68:e1:
                    61:bc:9d:4b:10:8c:cb:e7:21:4f:2b:bb:dc:27:c9:
                    ed:b1:fe:83:03:f9:0c:33:e0:fa:50:3e:61:78:ec:
                    28:a1:bf:5d:e8:12:30:3f:97:e3:79:36:4e:d9:32:
                    02:00:cc:b1:d0:a5:0b:a7:26:bd:27:15:c6:e8:06:
                    64:5b:0f:f4:f9:a3:03:c9:22:c6:81:62:27:bb:b1:
                    34:d2:cc:d1:22:47:fc:00:7b:84:00:90:94:3e:23:
                    77:0c:37:79:7b:e2:b4:e2:21:0a:d7:7c:a1:c6:90:
                    18:74:0f:5d:fe:83:3d:35:62:76:43:a5:37:cc:c5:
                    0a:8d:e7:b2:e0:55:5f:c6:33:28:95:7d:16:67:11:
                    bc:70:db:b4:30:12:e4:64:49:19:47:b2:b0:83:c9:
                    01:d6:44:18:72:ad:53:60:93:0e:64:27:65:cd:74:
                    30:d2:e5:d0:2e:d2:ff:8b:d7:f0:f4:8a:e4:fc:b1:
                    c3:35:88:da:51:dd:ae:65:59:f6:6a:06:c8:94:e0:
                    05:c0:9d:a9:e6:72:3e:d9:95:1f:3d:10:7f:7a:08:
                    c6:3b:cc:e8:48:fc:8a:1b:27:f7:06:1b:4c:65:81:
                    f5:f8:04:df:5c:50:a1:ec:60:eb:0a:02:73:e9:5d:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:92:2F:2F:73:82:FD:4E:B4:FC:44:C5:70:31:22:EF:BD:94:DC
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32372e302f32342d3234203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:00:cf:7d:d7:50:1f:6c:e6:3f:46:9f:c4:4c:f7:a1:f3:
         7d:08:e1:79:cd:79:b8:6a:54:c1:bb:70:ec:36:28:24:43:6b:
         22:8f:75:d8:ed:91:16:a3:c1:24:89:e2:5a:da:f7:86:d9:98:
         6e:0f:83:5a:97:dd:f8:28:ed:82:4f:77:7e:d0:77:1e:c1:2f:
         ee:33:58:40:e5:1a:f8:1f:98:4f:43:10:0f:a8:8c:cf:1b:dd:
         a8:d0:4a:0b:2d:0f:a3:8f:49:dc:a1:bb:83:5d:b9:7b:9c:25:
         35:ba:92:02:a6:e8:5a:9a:f1:88:18:b6:ef:88:d1:e3:f6:88:
         01:c9:e9:ed:77:41:89:68:be:f1:08:9b:81:f6:0e:00:fb:4e:
         3a:73:18:ce:b6:3d:97:ea:70:c4:86:fb:92:95:0b:f6:40:87:
         88:25:b9:3e:7d:af:37:6c:a5:cb:e3:f9:4e:60:8b:fb:cf:ee:
         98:27:92:b8:e2:b0:28:b8:a6:12:81:e8:33:68:e5:26:3e:a1:
         06:ae:30:5e:b9:33:f6:fa:bf:40:ca:bf:ae:1e:44:45:bd:b3:
         a5:b2:da:d2:39:a8:6d:5b:0d:e1:d1:c3:f2:7e:24:72:ba:49:
         2f:2b:ee:c7:06:00:17:b5:f8:f5:4e:0e:c5:dc:10:08:0d:2c:
         a6:2b:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 00:10:35 2024 by rpki-client on console-fra.rpki-client.org