Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232312e302f32342d3234203d3e203538333639.roa
File:                     32372e3132332e3232312e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          B8ISkQ1a1AzTucAQNKPFqBF8UeXFjuz2gMEMk9qaPmc=
Subject key identifier:   77:57:61:BF:07:3D:BC:C9:20:CB:6D:75:0E:59:64:65:A4:85:38:6C
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       4914EDF280E01743336DA14AB4180A91BD14F2D9
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232312e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:33 +0000
ROA not before:           Mon 01 Jul 2024 00:59:33 +0000
ROA not after:            Mon 30 Jun 2025 01:04:33 +0000
asID:                     58369
IP address blocks:        27.123.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:14:ed:f2:80:e0:17:43:33:6d:a1:4a:b4:18:0a:91:bd:14:f2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:33 2024 GMT
            Not After : Jun 30 01:04:33 2025 GMT
        Subject: CN=775761BF073DBCC920CB6D750E596465A485386C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:6d:e6:70:c6:34:46:2d:3c:37:00:b4:8e:
                    db:83:d7:f9:a6:b1:f9:1b:42:e5:a4:ba:94:20:e7:
                    e7:49:cb:21:23:96:17:3b:f2:f2:31:f9:7a:35:05:
                    61:55:de:91:9a:c5:dc:0e:c5:04:26:37:f0:cc:17:
                    21:53:52:04:9e:ef:f8:32:28:86:7f:d5:bf:52:df:
                    03:cc:50:34:f1:c1:b8:82:0c:cd:07:2b:f5:83:c4:
                    18:e5:56:7b:51:33:8b:58:02:19:06:7a:36:93:2e:
                    88:7f:12:4c:e1:0c:6e:a3:92:bd:4d:59:0f:33:44:
                    8c:ef:b3:5f:3f:9c:7b:9c:16:e1:57:6d:32:31:b7:
                    a5:69:9f:56:2a:69:10:2a:92:c3:c8:62:cf:80:84:
                    89:b5:a1:7a:24:6a:78:52:dd:2d:c2:83:22:3d:33:
                    b4:ac:6a:7f:34:3f:83:00:b1:0f:ee:35:c3:80:37:
                    16:db:83:61:f8:b7:e8:37:e0:3b:24:7a:cb:38:56:
                    2f:7d:f9:b4:0c:fb:80:05:99:08:28:95:ce:e0:f4:
                    0b:e5:e0:b6:d0:68:38:b0:24:81:f7:8f:46:0a:a2:
                    9e:60:7a:b8:b1:b5:05:9d:b7:08:e6:9e:42:a7:d4:
                    56:90:dd:c0:3c:9b:55:49:57:b2:a8:5c:b4:9f:84:
                    be:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:57:61:BF:07:3D:BC:C9:20:CB:6D:75:0E:59:64:65:A4:85:38:6C
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232312e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:36:f4:03:f6:8b:38:78:c6:20:e3:63:be:f9:6f:b2:78:a1:
         23:5f:2c:f2:e7:20:8f:b0:62:6d:af:d4:0b:38:35:f6:bf:0e:
         89:86:ad:4d:d2:91:33:3e:fa:43:72:b2:23:e5:0a:a0:31:74:
         4f:77:51:bc:15:a1:c4:f6:6f:97:c5:ad:7e:f3:bd:10:8a:90:
         dd:69:55:f0:34:2d:21:3f:61:d4:e2:7b:6c:ab:a7:25:b8:a0:
         c5:44:9c:b4:ae:b4:a9:d3:a0:61:82:06:cb:8a:22:3a:29:ba:
         db:67:43:73:57:31:2e:d6:66:a0:31:17:00:06:b4:06:cb:f1:
         1a:ac:34:76:d5:a4:1c:e3:f8:07:0e:72:ff:76:38:5e:0b:ba:
         d3:37:eb:68:4b:9a:da:d9:32:12:e4:e9:9e:70:6c:fc:ee:82:
         ad:aa:be:04:a8:b2:4b:72:a3:2d:cb:c7:50:be:06:af:cd:5c:
         2d:58:3f:a4:fc:c7:aa:1f:79:ab:f0:4f:25:77:09:20:04:83:
         c4:de:0a:24:6e:be:21:bb:54:97:59:9d:c6:2f:55:b9:70:82:
         04:1e:9b:f3:b6:17:44:26:11:07:a8:79:8c:5b:6c:3c:56:81:
         be:44:bf:19:db:a4:a1:d9:28:34:88:a9:0f:53:cc:ff:4e:ee:
         a1:0f:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org