Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/32372e35302e31362e302f32302d3234203d3e20313331313131.roa
File:                     32372e35302e31362e302f32302d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          XeSxvup/l7ZyKJrFVec5Gwe5l8c7X+yAxYuS+Ybl5uE=
Subject key identifier:   0C:80:E2:20:4B:36:E8:1A:0A:1C:21:0D:18:9C:AA:48:DE:A8:6F:C7
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       63ED734922A11CD4D9A34A2F2153467FE9A5653C
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/32372e35302e31362e302f32302d3234203d3e20313331313131.roa
Signing time:             Tue 08 Aug 2023 12:00:01 +0000
ROA not before:           Tue 08 Aug 2023 11:55:01 +0000
ROA not after:            Tue 06 Aug 2024 12:00:01 +0000
asID:                     131111
IP address blocks:        27.50.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 17:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ed:73:49:22:a1:1c:d4:d9:a3:4a:2f:21:53:46:7f:e9:a5:65:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Aug  8 11:55:01 2023 GMT
            Not After : Aug  6 12:00:01 2024 GMT
        Subject: CN=0C80E2204B36E81A0A1C210D189CAA48DEA86FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:0b:f8:44:32:86:14:69:82:88:1a:38:3c:
                    83:b3:33:22:12:f4:ca:9f:cb:a2:4b:74:b8:c1:5f:
                    8f:b3:2d:62:5a:c3:dd:ae:ed:2e:6d:10:66:cf:67:
                    49:9f:d8:df:35:c0:13:70:68:12:cf:c9:b7:83:d9:
                    f3:2c:e5:4b:72:a6:99:92:0a:51:76:32:e9:4d:67:
                    3e:b7:95:a9:72:1d:1e:0e:66:da:d6:5a:d5:2a:70:
                    ba:c7:13:95:53:9c:7b:79:8b:77:af:93:5f:8f:53:
                    26:06:b8:f1:f8:64:f2:9b:89:b7:c7:f5:de:9d:86:
                    58:4d:69:68:d4:17:89:42:3e:62:e5:9e:bf:c2:7d:
                    91:04:75:0c:5f:9d:00:98:1c:25:ec:d8:74:e5:12:
                    a6:29:fe:bb:71:a4:f1:a0:1d:94:ef:97:e8:6e:05:
                    b9:c0:c8:8b:d3:ce:ba:b3:6b:3f:10:97:95:3b:d3:
                    4e:ae:0b:d5:5c:a5:d9:23:12:76:a3:cb:11:e4:f8:
                    e1:df:0c:f3:3c:e0:d1:57:57:ac:db:cd:ab:71:63:
                    fb:e0:4f:eb:f7:dd:df:ec:c7:96:46:be:ef:93:3b:
                    98:05:90:9e:8a:a5:8e:a1:d8:2b:60:71:eb:7c:d5:
                    c8:c8:4f:1a:5b:aa:49:07:8b:0b:b8:ad:75:11:21:
                    96:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:80:E2:20:4B:36:E8:1A:0A:1C:21:0D:18:9C:AA:48:DE:A8:6F:C7
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/32372e35302e31362e302f32302d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:43:3a:79:da:43:a9:63:b2:ba:9c:88:ad:bb:0d:5e:e0:
         c3:38:02:ba:76:f1:09:2e:5a:c2:21:13:d1:ad:d9:3f:a8:e5:
         dc:75:40:91:0d:70:fe:7a:d2:dd:c1:78:19:a8:38:a2:2e:a1:
         32:68:29:cd:0f:34:f3:cc:71:59:2a:5d:45:1a:24:1a:9f:6c:
         46:87:d8:45:bd:75:3b:81:e5:cb:fc:5c:86:6a:6e:28:b9:75:
         d9:6d:55:93:ee:f3:f2:6a:83:00:62:5c:2c:21:07:93:e0:af:
         0b:de:dd:ec:5e:d9:c8:9d:a2:03:73:d2:de:55:e6:34:83:c0:
         b0:4a:62:1a:e0:5c:b4:7a:e5:3a:fc:dd:0d:1d:c8:72:6a:15:
         db:fd:15:78:8a:8b:ed:38:69:b8:ac:91:cb:85:0e:8f:08:20:
         d1:a0:b4:fe:5f:5b:bd:ed:e1:f3:d5:83:8b:98:b7:20:28:ff:
         18:ec:e5:93:21:a5:f1:18:bf:5a:f0:90:26:3e:0f:38:89:5e:
         94:26:5b:16:9e:36:6e:76:ff:41:96:88:8a:31:ac:05:cf:8c:
         81:8c:59:79:0d:64:d1:22:d3:33:a1:b6:8b:f7:c0:95:95:d5:
         b3:9e:2f:71:65:c4:ee:a2:5d:75:ac:fc:4a:42:ef:b4:ef:1c:
         90:cf:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:51 2024 by rpki-client on console-ams.rpki-client.org