Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa
File:                     3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa (raw, json)
Hash identifier:          /1VP8Yhz+DakBzA1t7AN5Tr+7un6mgDjui+/U+1Wzsc=
Subject key identifier:   98:9C:2D:65:9E:9E:94:3D:D3:B4:FA:2F:73:11:2B:19:27:8C:E0:1B
Certificate issuer:       /CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B
Certificate serial:       5B9384E843C9C5BFAF433DED1965EBE99D486D04
Authority key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa
Signing time:             Mon 06 Nov 2023 07:27:02 +0000
ROA not before:           Mon 06 Nov 2023 07:22:02 +0000
ROA not after:            Mon 04 Nov 2024 07:27:02 +0000
asID:                     151995
IP address blocks:        175.111.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl
                          rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:93:84:e8:43:c9:c5:bf:af:43:3d:ed:19:65:eb:e9:9d:48:6d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B
        Validity
            Not Before: Nov  6 07:22:02 2023 GMT
            Not After : Nov  4 07:27:02 2024 GMT
        Subject: CN=989C2D659E9E943DD3B4FA2F73112B19278CE01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:f1:5d:d0:6e:87:3b:b1:ff:d5:c3:9b:b1:
                    79:ce:92:76:13:5c:0c:b9:4c:3e:ab:f3:13:6b:da:
                    40:b2:41:c6:83:df:38:df:8a:9d:af:ed:5b:8b:89:
                    5c:76:28:59:37:43:3a:2d:06:59:80:7a:c3:09:6b:
                    2c:a2:b8:c7:98:26:cc:6e:ab:2c:d7:0b:e8:27:90:
                    fa:3a:94:22:02:25:e8:19:37:2c:22:24:15:29:bb:
                    15:76:d4:c3:c1:61:f5:e6:65:1f:43:d4:07:dd:65:
                    5e:cc:a5:c8:cb:75:eb:ff:1b:19:5a:cb:59:99:ac:
                    3e:ea:0d:0b:20:9d:6f:1f:87:51:91:ac:85:9e:e3:
                    9e:3d:07:55:5b:41:b3:ad:8d:22:d5:e0:71:ca:7e:
                    b8:38:51:fb:ff:39:f8:09:57:78:fb:78:65:26:11:
                    2a:ce:11:f0:42:05:59:48:d8:1f:0c:6c:fd:18:00:
                    c4:39:57:49:41:2b:ea:81:4a:14:ad:03:fd:e9:8b:
                    c0:70:87:f8:af:94:f9:e8:83:d5:c1:a4:fc:16:41:
                    d4:b9:2a:44:6b:6a:db:6c:01:aa:73:87:c2:29:07:
                    c6:9a:5f:1c:d4:8d:2b:5b:22:0a:cb:25:2d:d9:3c:
                    e7:41:bb:08:7a:71:13:d8:b7:70:3c:58:04:4e:df:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9C:2D:65:9E:9E:94:3D:D3:B4:FA:2F:73:11:2B:19:27:8C:E0:1B
            X509v3 Authority Key Identifier:
                keyid:27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:7b:7b:79:59:87:4f:98:6f:64:05:ac:de:34:46:b1:aa:
         31:d3:77:92:83:90:bc:cc:a0:ca:b0:55:8f:70:79:ad:9e:02:
         1c:1f:30:8c:ba:84:88:b5:96:f7:7c:6b:75:0c:f7:ae:3f:f3:
         e1:ec:80:a8:a1:d6:8d:29:0e:6c:45:14:34:9d:fc:e7:37:19:
         64:1a:3c:48:41:b0:99:91:95:08:66:40:4b:f4:0e:57:10:a2:
         c9:09:c3:41:f9:b8:33:5b:7d:3b:82:ed:3f:40:e6:a3:bc:de:
         87:0e:e3:52:26:a0:c2:66:8a:ce:5c:5d:9c:8e:e5:b7:5f:8e:
         03:8b:c1:29:f8:56:b2:3a:45:fb:94:3c:dd:08:2e:9e:0a:2b:
         cb:12:56:ba:f3:48:b1:a0:cb:87:42:83:d9:1f:09:fd:76:21:
         0e:44:89:16:0b:6d:13:74:79:2b:4d:82:90:0b:8b:a7:5d:ec:
         e2:15:14:73:7e:7d:c4:61:57:26:82:df:e3:9a:f3:65:de:03:
         cc:ff:5f:ec:bb:c3:4e:08:6c:81:fe:a9:8b:1b:80:a4:06:10:
         29:bc:7b:99:c8:dd:d0:2c:c6:7b:4c:45:83:5b:8c:1a:ff:ad:
         c6:6d:23:b3:7f:ed:13:96:ce:9a:11:bf:db:a5:79:6e:6d:60:
         0a:24:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 04:49:47 2024 by rpki-client on console-fra.rpki-client.org