Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232332e302f32342d3234203d3e203538333639.roa
File:                     32372e3132332e3232332e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          O018VB+Ri1Kk21oh8K5C+rJcR2x5HsTPI3cpBI7kEus=
Subject key identifier:   51:13:38:C2:6D:7E:0B:F4:15:B4:4E:01:29:2A:AA:44:17:73:01:83
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       57D4F0A031793072CD14EF86D9807A8F43B76183
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232332e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:30 +0000
ROA not before:           Mon 31 Jul 2023 00:02:30 +0000
ROA not after:            Mon 29 Jul 2024 00:07:30 +0000
asID:                     58369
IP address blocks:        27.123.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d4:f0:a0:31:79:30:72:cd:14:ef:86:d9:80:7a:8f:43:b7:61:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:30 2023 GMT
            Not After : Jul 29 00:07:30 2024 GMT
        Subject: CN=511338C26D7E0BF415B44E01292AAA4417730183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:13:de:3e:0c:b2:ca:3c:4b:31:3a:82:cc:
                    8e:01:e1:2e:b8:0c:95:0a:fb:2c:24:00:bc:28:af:
                    71:c0:af:11:12:6c:02:b6:d6:11:dc:ac:52:b7:71:
                    57:ea:62:b9:b8:24:c6:06:ea:72:d0:2f:62:89:b3:
                    40:9a:dd:50:3c:e2:80:ff:59:05:6f:3f:59:59:a4:
                    6d:72:fb:13:40:29:eb:df:f7:19:1b:97:27:99:5e:
                    73:eb:03:cb:8a:33:cf:00:2a:45:d5:17:e1:6c:32:
                    9a:d2:0b:74:f3:4c:97:a9:7b:34:1d:5b:1b:de:2f:
                    26:bd:14:07:51:17:f8:78:99:fa:cc:e6:7e:53:11:
                    d2:cc:97:78:6c:08:e3:d1:c4:64:99:0e:76:32:01:
                    ad:14:5f:74:46:ef:82:c2:8e:3c:17:42:d1:c1:a2:
                    8b:5d:f2:4a:0a:96:3f:f8:61:0d:ef:af:94:40:e0:
                    34:91:55:d2:bb:12:d2:02:a5:e8:65:28:e4:4a:ee:
                    3b:26:81:d6:78:1b:fd:25:ec:7c:7c:28:24:10:62:
                    94:1a:7f:34:90:38:bc:2a:62:5e:29:0c:49:6d:35:
                    e7:ef:b3:27:cf:75:56:33:85:b7:f4:7b:1f:97:63:
                    c2:b2:ed:8f:dd:ab:b5:95:53:5d:79:6c:41:01:df:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:13:38:C2:6D:7E:0B:F4:15:B4:4E:01:29:2A:AA:44:17:73:01:83
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232332e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:41:7d:4e:30:a5:ea:1f:c2:4e:e2:bf:3f:f2:4b:37:ad:
         60:b9:86:48:78:cc:fd:ff:c1:aa:85:e9:5f:b1:d6:70:f4:5d:
         ef:ab:e5:08:23:1d:4f:f9:ce:05:3d:31:23:e8:75:4a:3c:80:
         00:d8:e3:b7:6d:f4:53:60:82:50:ba:d5:9c:07:ae:cb:07:aa:
         9f:1e:37:9a:2d:50:6f:9b:0b:9e:12:2a:04:57:7b:8f:ca:86:
         22:fa:95:e5:5b:66:34:40:6a:cb:4c:de:4c:f9:7d:20:3d:35:
         0c:e2:15:14:9d:f9:fd:dd:e3:06:a5:8d:ff:48:c9:b7:76:cd:
         65:10:de:ae:0e:e0:7a:46:25:6c:61:57:28:ce:9a:5e:2f:08:
         8e:fe:e5:09:37:1f:22:54:1b:d5:c0:68:18:f1:75:f7:38:3c:
         ee:78:37:2b:ac:7d:de:71:a0:a8:df:96:e0:0f:92:38:24:08:
         bd:01:dc:fb:e4:8b:7e:84:f3:ee:37:0d:08:1c:42:4d:60:42:
         be:d8:d6:09:46:cc:06:04:fb:e8:37:1c:25:73:d9:0f:eb:4d:
         64:df:63:5c:db:fa:d2:2d:9d:32:86:d5:81:b3:b1:18:39:52:
         cc:2a:63:9e:50:fa:da:ff:60:74:99:7a:ff:ae:c0:dc:0e:a8:
         d1:d2:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:08 2024 by rpki-client on console-fra.rpki-client.org