Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232322e302f32332d3233203d3e203538333639.roa
File:                     32372e3132332e3232322e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          v4rwMMefGRt3kKlhNWBtUUXEldYm9PG6C8BZg3eXge0=
Subject key identifier:   78:26:74:77:CB:CE:FB:32:C4:A9:B1:DE:BF:32:BE:FF:84:56:3B:D3
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       39285697C0A31B51BF15A84479F3546D17BC808A
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232322e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:32 +0000
ROA not before:           Mon 01 Jul 2024 00:59:32 +0000
ROA not after:            Mon 30 Jun 2025 01:04:32 +0000
asID:                     58369
IP address blocks:        27.123.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:28:56:97:c0:a3:1b:51:bf:15:a8:44:79:f3:54:6d:17:bc:80:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:32 2024 GMT
            Not After : Jun 30 01:04:32 2025 GMT
        Subject: CN=78267477CBCEFB32C4A9B1DEBF32BEFF84563BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:a7:b4:cb:fa:61:46:1c:a7:da:80:e8:0e:
                    b6:eb:13:93:91:73:17:7d:96:85:0b:04:14:e6:ea:
                    e0:8e:f3:88:fd:87:bc:5a:d9:06:23:2c:b6:b4:0d:
                    39:9b:92:6b:09:88:28:b9:df:29:2e:c0:28:57:8f:
                    0f:a3:5a:08:6e:cb:d1:e0:c5:69:6a:8f:75:b9:8a:
                    50:e6:7a:b2:9f:6e:bc:6e:b4:32:7b:eb:da:c7:91:
                    4f:e4:76:c6:0e:8e:c5:2d:40:29:fd:c5:c4:bf:44:
                    f2:cb:96:55:c8:93:d4:b0:6f:31:cb:d0:ed:94:64:
                    f0:a6:25:58:e5:22:75:7a:ed:2f:30:af:65:5f:a6:
                    29:fb:6a:84:c1:b7:c4:0e:b5:b6:1f:81:51:71:35:
                    4d:75:d7:6e:35:d7:e9:fb:84:81:3a:8a:6e:51:33:
                    9e:21:c7:5d:4d:4b:16:4c:74:54:ce:b1:4b:b6:74:
                    43:75:c9:aa:c1:e9:de:83:2a:51:9a:69:0c:6c:92:
                    6a:8d:50:0f:89:27:93:67:1e:70:d3:69:40:da:e8:
                    18:52:eb:b5:6d:50:10:e1:5f:85:ba:fe:07:e9:67:
                    d2:cf:6f:8f:ab:c0:f1:6e:8d:04:1d:ce:fa:e6:01:
                    a3:23:55:eb:e9:b4:90:e6:1f:c7:04:97:0f:41:17:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:26:74:77:CB:CE:FB:32:C4:A9:B1:DE:BF:32:BE:FF:84:56:3B:D3
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232322e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:a3:e9:d0:07:da:b0:02:75:53:72:0a:93:c9:c5:93:da:
         fa:60:26:67:cd:88:86:fa:b2:f0:e0:68:45:d6:62:13:65:d5:
         6e:7e:e2:da:61:b7:84:8e:dd:69:47:d1:bb:1a:f7:96:6e:71:
         35:1c:01:49:07:5a:63:29:d7:6d:e5:ae:b9:e8:ad:05:cd:ec:
         ab:ab:86:0b:f4:68:d8:c3:7c:7c:8a:0b:1d:0e:69:aa:f7:e6:
         59:01:c7:16:2c:51:a1:9f:b5:b5:31:e0:71:43:1b:d2:11:f4:
         21:01:46:47:f9:f6:6b:4e:a4:35:17:ad:e2:5a:50:db:43:93:
         e2:3b:ca:19:dc:7a:42:71:38:2c:25:46:ed:20:3e:cf:c5:56:
         1e:55:2c:e3:86:57:c7:e4:78:2a:d6:ef:af:7e:76:48:38:52:
         20:2b:8d:66:62:bc:da:4d:6f:25:90:61:29:37:86:c1:92:0a:
         c2:55:4a:5e:e8:62:a1:84:dd:3c:e3:8f:44:76:b7:34:19:dd:
         e9:c8:26:6d:81:fc:18:b6:52:11:b1:d8:49:b6:3e:c1:f1:b4:
         7b:ff:d6:d5:eb:fb:a1:e6:17:03:66:76:ef:9c:fa:e3:cd:eb:
         74:43:42:b0:e2:be:04:67:5b:79:42:49:18:aa:dc:2a:70:24:
         13:09:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org