Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38372e302f32342d3234203d3e203338353237.roa
File:                     32372e3132342e38372e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier:          UcmU8aB4eGLwy3uk7kl62Yz0rtXFjCU+HO9XmOHngFE=
Subject key identifier:   69:04:BB:D6:38:28:E8:18:1B:4E:E2:17:B0:BE:B5:1E:F2:7E:5A:9A
Certificate issuer:       /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial:       01BB9AADDE0D96054ADBB5D10FFC5BF7E9E308AA
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38372e302f32342d3234203d3e203338353237.roa
Signing time:             Fri 17 May 2024 11:52:45 +0000
ROA not before:           Fri 17 May 2024 11:47:45 +0000
ROA not after:            Fri 16 May 2025 11:52:45 +0000
asID:                     38527
IP address blocks:        27.124.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
                          rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bb:9a:ad:de:0d:96:05:4a:db:b5:d1:0f:fc:5b:f7:e9:e3:08:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
        Validity
            Not Before: May 17 11:47:45 2024 GMT
            Not After : May 16 11:52:45 2025 GMT
        Subject: CN=6904BBD63828E8181B4EE217B0BEB51EF27E5A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:d2:48:11:6c:f1:4f:ba:4e:dd:df:00:65:
                    0c:63:78:8d:d5:48:fa:89:e5:97:bf:15:cf:74:a7:
                    b6:50:94:c7:50:47:4b:21:ee:f0:50:1c:64:44:3f:
                    13:a2:02:67:38:32:47:f3:24:ba:8c:55:4e:b5:df:
                    63:01:cb:e4:a1:a6:98:df:05:85:b9:43:f5:bd:81:
                    5e:cb:e8:e0:9a:c1:f0:be:c8:fc:49:94:9f:cc:57:
                    fa:03:6e:08:8b:6e:6f:bc:cb:41:31:02:f0:63:db:
                    d6:71:6d:b3:c5:5e:9f:70:54:18:7b:0f:64:5d:23:
                    81:b9:7e:32:4d:e4:d6:ad:30:78:1a:82:42:75:a2:
                    52:c3:26:e4:b3:2f:1e:6d:09:28:da:62:c1:3c:4a:
                    5f:53:c0:46:76:83:7c:44:99:b2:88:68:42:dc:9d:
                    10:31:a7:6e:41:46:67:78:0c:3c:26:44:2b:22:05:
                    c9:19:30:3e:eb:9d:52:48:10:68:68:9b:7d:16:ec:
                    c6:aa:e9:3f:c4:62:6f:f9:77:65:c0:83:b4:eb:5e:
                    13:69:69:f5:f2:e2:5b:1f:cc:50:5c:9e:a3:a9:f5:
                    cf:23:34:9a:47:59:28:03:72:57:d6:9a:73:56:19:
                    2e:9a:c3:c1:6f:f3:62:2f:d9:1d:1a:32:c2:03:c8:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:04:BB:D6:38:28:E8:18:1B:4E:E2:17:B0:BE:B5:1E:F2:7E:5A:9A
            X509v3 Authority Key Identifier:
                keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38372e302f32342d3234203d3e203338353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:d4:0f:c5:d7:4c:95:29:c7:6f:b0:be:35:be:38:4e:fa:
         44:fa:b8:b1:d7:74:d2:6e:98:25:c3:c0:17:5e:7f:92:a4:7d:
         b8:61:8a:91:38:72:e8:ab:bc:cb:2e:fa:4d:cb:83:43:ce:34:
         f5:b4:44:89:10:f1:18:09:c6:7d:19:7b:d7:41:5c:06:2e:d0:
         b0:3b:1f:cd:22:3a:8c:8c:b2:e5:08:39:9a:a7:8c:9a:37:4f:
         24:4b:f9:5f:58:aa:6e:cc:3e:86:b5:37:4a:97:14:a9:bc:c9:
         a0:9a:92:67:51:0c:79:d0:fc:a0:d7:6b:ad:c4:f0:e5:3e:e5:
         c8:8f:69:ee:35:09:e5:78:83:85:a2:63:b0:2e:1a:7c:c4:d2:
         8d:c4:ae:9b:20:00:c5:34:fd:90:55:d7:fe:e2:84:9e:55:e6:
         a4:a2:93:df:4f:be:4c:b9:ea:da:7a:90:d5:96:de:90:4a:3c:
         64:64:d2:b1:95:26:55:3b:5c:92:d9:e1:e2:bd:08:a6:95:98:
         dd:d6:7c:de:ce:47:43:5f:2a:e8:3b:72:9f:15:f9:6a:c4:96:
         0f:e2:1c:0a:47:e2:94:0b:9f:f4:c2:c1:12:4c:1a:2c:00:24:
         80:81:56:5a:cc:ab:f3:d6:38:59:6c:61:11:64:f1:88:06:26:
         3b:00:16:6f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUAbuard4NlgVK27XRD/xb9+njCKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yNDA1MTcxMTQ3NDVaFw0yNTA1MTYxMTUyNDVaMDMxMTAvBgNV
BAMTKDY5MDRCQkQ2MzgyOEU4MTgxQjRFRTIxN0IwQkVCNTFFRjI3RTVBOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwNJIEWzxT7pO3d8AZQxjeI3V
SPqJ5Ze/Fc90p7ZQlMdQR0sh7vBQHGREPxOiAmc4MkfzJLqMVU6132MBy+Shppjf
BYW5Q/W9gV7L6OCawfC+yPxJlJ/MV/oDbgiLbm+8y0ExAvBj29ZxbbPFXp9wVBh7
D2RdI4G5fjJN5NatMHgagkJ1olLDJuSzLx5tCSjaYsE8Sl9TwEZ2g3xEmbKIaELc
nRAxp25BRmd4DDwmRCsiBckZMD7rnVJIEGhom30W7Maq6T/EYm/5d2XAg7TrXhNp
afXy4lsfzFBcnqOp9c8jNJpHWSgDclfWmnNWGS6aw8Fv82Iv2R0aMsIDyBU5AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUaQS71jgo6BgbTuIXsL61HvJ+WpowHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05
NzBmLWY2OTlkZmY5N2RlNS8wLzMyMzcyZTMxMzIzNDJlMzgzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbfFcwDQYJKoZIhvcN
AQELBQADggEBAAvc1A/F10yVKcdvsL41vjhO+kT6uLHXdNJumCXDwBdef5Kkfbhh
ipE4cuirvMsu+k3Lg0PONPW0RIkQ8RgJxn0Ze9dBXAYu0LA7H80iOoyMsuUIOZqn
jJo3TyRL+V9Yqm7MPoa1N0qXFKm8yaCakmdRDHnQ/KDXa63E8OU+5ciPae41CeV4
g4WiY7AuGnzE0o3ErpsgAMU0/ZBV1/7ihJ5V5qSik99Pvky56tp6kNWW3pBKPGRk
0rGVJlU7XJLZ4eK9CKaVmN3WfN7OR0NfKug7cp8V+WrElg/iHApH4pQLn/TCwRJM
GiwAJICBVlrMq/PWOFlsYRFk8YgGJjsAFm8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org