Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3232203d3e203538333639.roa
File:                     32372e3132332e3232302e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          HFZglbqfvUJ5UUA05mfoJxHTzCX9kcrV779daMxFWWI=
Subject key identifier:   19:9B:09:D4:DF:41:8B:DA:1E:48:7C:A6:35:0C:85:A6:32:2C:1A:67
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       5D659DEC9D0BA3E03FC68521B3B07E2FB4E491C0
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3232203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:31 +0000
ROA not before:           Mon 01 Jul 2024 00:59:31 +0000
ROA not after:            Mon 30 Jun 2025 01:04:31 +0000
asID:                     58369
IP address blocks:        27.123.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:65:9d:ec:9d:0b:a3:e0:3f:c6:85:21:b3:b0:7e:2f:b4:e4:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:31 2024 GMT
            Not After : Jun 30 01:04:31 2025 GMT
        Subject: CN=199B09D4DF418BDA1E487CA6350C85A6322C1A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:05:da:31:fc:3b:84:e6:96:e5:5f:30:5d:
                    7d:5c:6e:8f:e1:19:26:a1:f1:e7:32:bf:2a:20:92:
                    ee:c3:4e:18:30:a1:ff:36:0b:58:71:2a:b3:2a:a8:
                    5f:cf:e7:39:92:21:35:8c:58:63:fd:69:0e:93:39:
                    d4:7d:ee:5d:7c:18:64:2a:77:cf:b8:fd:b6:17:6a:
                    89:22:2f:52:19:e8:48:f4:cd:ff:3d:53:46:28:4d:
                    4d:46:49:a0:cb:12:1f:dd:e9:36:8f:85:3f:9c:ba:
                    a2:7f:c8:29:ef:03:d9:86:3f:b7:f1:10:06:9d:18:
                    d5:39:ef:4a:cb:93:85:a8:16:ac:fa:7a:01:11:c4:
                    ce:49:5c:5b:fd:17:52:7a:45:d3:5d:ea:3c:d5:f0:
                    21:eb:65:d2:d0:2c:f9:39:42:66:0a:21:a0:06:c7:
                    0f:68:d9:43:f4:38:93:34:a9:14:e0:7e:ef:19:c3:
                    b1:aa:1d:07:ff:d1:e8:f4:0d:47:4c:cd:09:29:5c:
                    1a:24:a4:34:2d:23:fe:af:02:18:4b:05:b1:dd:b5:
                    51:10:d4:81:77:45:68:b8:d9:70:f3:c9:b5:ba:1d:
                    46:25:9b:44:7f:6d:e8:3f:55:da:3a:31:90:d4:b3:
                    83:00:00:bd:66:a7:e8:3d:c6:35:9a:e2:9d:76:f0:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9B:09:D4:DF:41:8B:DA:1E:48:7C:A6:35:0C:85:A6:32:2C:1A:67
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:52:69:6c:41:6d:63:0b:24:b7:c8:87:ce:6f:33:15:28:34:
         39:4a:89:58:8e:1d:5b:d5:d6:60:34:52:76:5e:14:a0:bb:0a:
         82:c1:87:d1:b4:c8:8f:0b:d2:4f:cf:d7:a5:5a:cf:c5:3e:66:
         fb:9a:cc:e3:e8:31:1e:7f:13:82:84:d9:a3:f3:c1:75:ab:01:
         b1:2f:22:44:7a:7b:f4:e5:3a:28:c2:ff:99:11:4e:3d:2d:3c:
         55:fe:bd:8c:3a:46:f1:8d:fa:ac:b5:6f:19:9c:a2:1d:8e:6e:
         69:05:74:97:26:1f:25:e9:91:09:dd:71:2b:25:5e:de:93:5e:
         16:49:62:64:1e:25:0a:77:82:62:7c:9c:52:cf:89:5b:dd:a2:
         19:b5:ea:37:7f:6f:1d:11:41:a0:d0:ae:22:02:72:12:5a:39:
         c2:e7:cd:77:ad:aa:d3:97:20:83:f0:49:a8:b5:cf:af:a9:e9:
         e9:71:6f:49:14:73:23:96:a5:2c:e8:47:e4:83:f2:85:e6:45:
         ef:d8:9a:a2:6b:5a:0e:1d:22:7d:6e:85:05:1c:7e:16:4e:1a:
         c3:8c:18:6b:0f:24:8e:80:f5:12:92:17:ee:b4:60:0f:62:81:
         6c:31:81:b9:a7:1e:c5:11:ef:da:b2:6b:e8:7f:f7:db:be:89:
         b8:d9:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org