Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa
File:                     32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (raw, json)
Hash identifier:          gIAcydxXI/E/yyUjgeTfPGg4hYVM3/dB/YJGVfE92TU=
Subject key identifier:   D5:82:A7:2D:6F:F7:34:67:FE:22:48:02:98:93:05:DF:37:DC:6E:7A
Certificate issuer:       /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045
Certificate serial:       3B9DF94048B8AC715BE8420EE186B6F5CC385A4F
Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa
Signing time:             Sun 26 May 2024 22:00:02 +0000
ROA not before:           Sun 26 May 2024 21:55:02 +0000
ROA not after:            Sun 25 May 2025 22:00:02 +0000
asID:                     140482
IP address blocks:        27.112.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl
                          rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9d:f9:40:48:b8:ac:71:5b:e8:42:0e:e1:86:b6:f5:cc:38:5a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045
        Validity
            Not Before: May 26 21:55:02 2024 GMT
            Not After : May 25 22:00:02 2025 GMT
        Subject: CN=D582A72D6FF73467FE224802989305DF37DC6E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:d7:9e:5a:d8:6b:f6:06:42:f5:50:02:99:
                    b8:7a:90:1f:32:8e:c4:59:89:d2:2b:2a:7c:df:bb:
                    fe:bf:2f:ee:93:8d:41:43:eb:b6:0c:86:3a:0c:3b:
                    a0:77:04:73:6d:3e:e4:c8:75:15:72:97:65:62:99:
                    c8:a9:45:5f:00:97:20:5f:7f:73:97:17:a4:15:02:
                    86:e9:9c:59:c1:40:28:cf:9b:9f:9c:2d:ae:47:34:
                    79:02:3c:eb:db:8b:4e:57:01:15:c9:04:59:6b:5e:
                    0e:df:a6:cb:1e:0f:87:7f:ba:59:22:cd:8a:b8:6c:
                    1a:2a:63:73:1e:8d:47:d6:70:c8:5a:f6:1f:3b:d6:
                    9f:35:af:fd:11:c1:d9:d3:12:4b:3f:f9:a1:0c:fe:
                    00:0c:57:6e:a9:83:67:0a:26:80:ea:a5:f8:e7:1f:
                    58:f5:b1:ff:e0:15:f6:55:5f:d7:f3:c5:0f:f4:0c:
                    67:6c:4f:89:ac:2e:65:ab:8a:32:cd:2a:b7:08:15:
                    96:42:30:39:7d:39:14:89:cf:16:08:10:46:cd:14:
                    6d:d7:a2:11:ba:90:18:51:0d:91:9c:d3:80:21:68:
                    9d:b9:54:28:18:8b:54:0b:a0:31:06:8c:f9:1c:cb:
                    81:76:5b:71:04:59:31:72:84:e5:a2:a7:41:2f:8c:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:82:A7:2D:6F:F7:34:67:FE:22:48:02:98:93:05:DF:37:DC:6E:7A
            X509v3 Authority Key Identifier:
                keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:3b:a6:e3:05:ed:e6:f9:b0:31:9b:be:8c:15:c8:b7:79:
         10:26:1b:fb:32:17:ad:ae:f9:98:48:b5:45:d0:56:58:b7:9f:
         69:19:1e:dc:14:46:26:4b:da:fd:40:eb:a2:ec:e8:8c:24:64:
         ce:10:ca:49:01:5a:e3:96:fa:d2:c3:49:5f:35:e6:11:1f:ec:
         48:16:67:78:c0:75:a6:4f:98:94:57:2c:75:79:93:75:fc:5c:
         9c:b0:25:6b:55:9c:ac:28:c9:ec:80:b2:eb:5b:49:bc:7b:20:
         4c:4b:68:fd:37:41:96:50:10:e5:00:d7:c6:d5:f1:cc:6c:ff:
         b3:72:93:c6:db:5f:49:bd:af:70:a2:61:2f:27:36:2a:0d:cf:
         1c:53:2c:73:8c:f2:31:b2:f2:b8:dc:f9:6a:75:f0:74:0a:ef:
         a7:7c:a4:da:3a:fc:29:a9:bf:fe:12:50:b0:0e:76:eb:40:08:
         7a:41:88:2d:ea:86:72:5f:da:3f:f6:c0:51:78:2e:69:f2:39:
         ad:ff:7b:22:86:10:32:4d:da:21:dc:14:4e:fd:9d:97:cc:93:
         dc:3a:c9:9c:7d:03:ca:93:92:db:c5:9c:a3:9d:a1:d1:ea:65:
         ba:be:88:6c:72:39:20:96:b3:ce:2b:95:b6:af:35:6b:c8:7a:
         bb:6e:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org