Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38302e302f32332d3234203d3e2039333431.roa
File:                     32372e3132342e38302e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          ZsbD0/4tAps65WX3LSgFdMQrGqfUo3uqv6y5Rl1ltpw=
Subject key identifier:   7D:1A:58:53:95:E7:04:DC:12:5F:10:7B:B4:5A:89:FE:43:BC:32:C3
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       4B0F5BDB45D9B27A7EA1B59EE2E08CD3E8F725F9
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38302e302f32332d3234203d3e2039333431.roa
Signing time:             Wed 11 Oct 2023 11:05:42 +0000
ROA not before:           Wed 11 Oct 2023 11:00:42 +0000
ROA not after:            Wed 09 Oct 2024 11:05:42 +0000
asID:                     9341
IP address blocks:        27.124.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0f:5b:db:45:d9:b2:7a:7e:a1:b5:9e:e2:e0:8c:d3:e8:f7:25:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Oct 11 11:00:42 2023 GMT
            Not After : Oct  9 11:05:42 2024 GMT
        Subject: CN=7D1A585395E704DC125F107BB45A89FE43BC32C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:d4:3c:5f:af:38:13:96:26:7f:01:50:0f:
                    46:a0:f9:a5:58:fa:3d:69:23:6c:aa:ed:77:e8:26:
                    a1:ef:82:24:2f:b8:df:c9:b5:6a:c0:33:68:f1:c1:
                    42:37:bb:c8:ff:c6:31:87:24:5f:33:ea:26:58:55:
                    66:64:b0:dc:15:43:35:75:87:6c:44:9e:c2:5a:bf:
                    63:d2:41:bf:7a:1b:b6:5e:dd:e4:53:da:44:98:ec:
                    c7:96:40:a5:56:16:75:67:d5:4f:be:d3:6c:95:04:
                    e3:d2:3c:45:8c:d8:c3:39:79:ca:3a:a1:0a:34:b7:
                    77:2a:cf:ec:05:bd:03:da:5f:b1:75:77:2a:ec:71:
                    eb:fe:64:b3:db:79:63:53:39:89:41:f1:8a:29:28:
                    93:88:33:df:a2:a3:76:c4:90:b8:64:34:bf:79:a7:
                    fd:b0:b1:c5:2d:42:ae:12:50:f1:37:9b:c0:4a:1b:
                    45:33:a6:98:f0:b2:69:3c:b6:f0:74:c5:5f:c0:99:
                    02:65:07:6a:c1:64:6c:da:97:9a:21:48:1d:69:2b:
                    ed:14:e7:7c:19:16:5c:4e:c8:ec:c3:aa:45:7a:2c:
                    e4:91:32:28:45:20:c2:a5:4f:68:f7:c1:71:47:3b:
                    7a:e7:28:44:f3:6a:f8:98:dc:09:9b:59:6d:55:40:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1A:58:53:95:E7:04:DC:12:5F:10:7B:B4:5A:89:FE:43:BC:32:C3
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38302e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:d4:75:09:fd:6f:43:9c:c9:cc:12:04:18:48:5a:5b:3e:
         8d:1e:72:bc:6f:a1:36:d4:59:50:a0:bf:01:be:73:b1:69:35:
         eb:56:39:28:fc:71:ce:89:2a:56:25:fe:13:3a:2d:93:94:57:
         e6:e2:c7:3d:ba:be:ac:11:84:ec:f7:ff:12:10:a3:e9:5d:20:
         47:e9:2d:a3:b8:38:a8:5f:f3:d5:4c:b6:e7:47:9a:51:ea:91:
         d9:a5:1d:ce:c1:8a:ab:41:87:1f:fb:4f:ec:6c:0b:75:4e:f5:
         c8:19:36:19:26:79:35:cd:85:e3:3e:4e:5c:ef:b6:64:c7:85:
         69:2e:18:6e:5d:7e:67:42:19:e6:6c:36:cd:25:7a:39:36:5c:
         88:68:17:60:d4:de:6c:34:15:6c:fd:b1:18:cd:b5:0d:05:31:
         9a:3d:3c:7c:33:93:b1:5c:0d:28:c4:5c:98:84:aa:13:6f:2b:
         5d:df:20:7a:0a:76:67:61:dc:4c:54:b4:b0:08:64:06:27:3a:
         0e:98:d9:ed:33:73:ac:8e:73:fd:54:b2:89:fa:42:ef:17:7c:
         da:e0:5a:f1:7b:3e:68:26:d2:ce:73:d4:e7:89:54:d1:e4:7f:
         fd:d3:70:60:3f:27:0a:ee:96:1b:e2:aa:68:87:45:6c:bb:3f:
         de:b0:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:24 2024 by rpki-client on console-ams.rpki-client.org