Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
File:                     32372e3132342e38352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          pfYX+mc8RwlKY2W5Dn4tXxtT3GTmgXSqm3nCXkjGfCk=
Subject key identifier:   3C:3B:9C:B3:46:69:5A:3B:48:6D:C9:B6:CC:76:4D:29:00:EB:BA:3A
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       1A7D28119A7536567BA68D1470154A6951EADE8C
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 11 Oct 2023 11:05:42 +0000
ROA not before:           Wed 11 Oct 2023 11:00:42 +0000
ROA not after:            Wed 09 Oct 2024 11:05:42 +0000
asID:                     9341
IP address blocks:        27.124.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7d:28:11:9a:75:36:56:7b:a6:8d:14:70:15:4a:69:51:ea:de:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Oct 11 11:00:42 2023 GMT
            Not After : Oct  9 11:05:42 2024 GMT
        Subject: CN=3C3B9CB346695A3B486DC9B6CC764D2900EBBA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ba:dc:cf:1a:48:63:59:6f:37:93:0e:ca:5c:
                    74:53:52:13:bb:05:1c:c0:41:56:d2:00:40:85:13:
                    94:5e:77:59:a8:1c:96:f3:c5:56:7c:1a:39:d4:a7:
                    95:a7:9f:38:14:9e:2e:26:a7:c9:b2:39:d0:9a:c5:
                    8c:75:9f:03:84:5f:0d:17:a3:a7:d9:55:5a:1b:8d:
                    39:d9:e2:8e:17:8a:60:7f:09:4e:1b:26:9f:62:34:
                    c8:6e:80:6c:a0:24:cc:e0:2d:c4:21:dd:30:00:b2:
                    b1:3d:99:17:00:35:43:90:bb:05:6b:60:11:80:d5:
                    ac:21:51:b2:79:81:c4:a7:a4:67:73:1c:d1:d5:2d:
                    90:51:a6:e9:dd:1d:d3:9d:62:e7:1f:5f:fc:89:af:
                    24:73:29:b9:ad:c7:bf:01:52:6a:9c:d5:5f:ff:be:
                    e2:38:b4:77:08:a2:50:43:a3:84:39:04:c0:2a:8c:
                    4c:89:53:8c:c6:0b:ba:be:f3:4d:fc:44:a6:e6:27:
                    5f:8b:a2:d8:c3:a8:bb:a2:8a:61:7c:42:bf:c5:63:
                    22:72:79:36:a1:72:fb:4d:5e:ef:47:c6:75:d7:a3:
                    41:6c:fc:76:c8:c9:de:60:87:5c:47:89:72:4d:03:
                    20:5a:71:b5:72:14:eb:4a:cc:51:cc:15:76:50:2f:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:9C:B3:46:69:5A:3B:48:6D:C9:B6:CC:76:4D:29:00:EB:BA:3A
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:6c:67:fc:87:15:65:d8:7b:94:b1:2d:46:04:26:b6:6b:
         1e:22:4b:a0:fc:5a:03:0c:c8:5c:ed:dd:f7:31:38:72:d2:2a:
         1c:b8:5b:6b:a7:6a:9e:c0:de:9b:3e:f9:01:aa:23:34:a3:00:
         a6:5c:ff:47:f1:6f:a0:9e:e0:52:34:ea:c3:61:5a:4b:18:a3:
         cc:88:ce:b8:e9:ae:9d:35:80:e6:7d:6e:7e:eb:cc:73:39:90:
         f8:af:fc:f8:6f:55:0f:e6:9e:ba:57:c6:b3:04:ac:38:c9:e5:
         a0:f0:06:71:dc:df:69:65:ba:e9:4f:82:47:56:63:62:e6:7f:
         80:0b:f5:88:51:8c:73:c6:71:5e:bd:79:60:2b:b5:55:1b:67:
         a0:ad:4e:4e:a7:11:6c:fb:09:e3:91:a9:34:f3:02:d4:a7:e9:
         9b:de:9a:b4:11:06:fd:fd:17:1c:f9:cb:a3:cf:9a:4d:ee:f5:
         76:68:0f:5b:66:55:e5:cf:e2:fc:cd:47:b7:00:70:d2:fb:0a:
         cd:f9:ed:0c:69:65:46:09:c2:40:5f:4c:3f:35:98:61:72:7e:
         05:3c:e9:fa:5b:13:e3:58:a2:12:4c:52:a4:3c:55:8e:23:dc:
         08:70:cb:28:b2:fd:51:8d:5c:e7:5b:7c:ab:e0:df:37:b4:a2:
         19:14:58:46
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUGn0oEZp1NlZ7po0UcBVKaVHq3owwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yMzEwMTExMTAwNDJaFw0yNDEwMDkxMTA1NDJaMDMxMTAvBgNV
BAMTKDNDM0I5Q0IzNDY2OTVBM0I0ODZEQzlCNkNDNzY0RDI5MDBFQkJBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3utzPGkhjWW83kw7KXHRTUhO7
BRzAQVbSAECFE5Red1moHJbzxVZ8GjnUp5WnnzgUni4mp8myOdCaxYx1nwOEXw0X
o6fZVVobjTnZ4o4XimB/CU4bJp9iNMhugGygJMzgLcQh3TAAsrE9mRcANUOQuwVr
YBGA1awhUbJ5gcSnpGdzHNHVLZBRpundHdOdYucfX/yJryRzKbmtx78BUmqc1V//
vuI4tHcIolBDo4Q5BMAqjEyJU4zGC7q+8038RKbmJ1+LotjDqLuiimF8Qr/FYyJy
eTahcvtNXu9HxnXXo0Fs/HbIyd5gh1xHiXJNAyBacbVyFOtKzFHMFXZQLx61AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUPDucs0ZpWjtIbcm2zHZNKQDrujowHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzIzNzJlMzEzMjM0MmUzODM1MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbfFUwDQYJKoZIhvcNAQEL
BQADggEBAI0qbGf8hxVl2HuUsS1GBCa2ax4iS6D8WgMMyFzt3fcxOHLSKhy4W2un
ap7A3ps++QGqIzSjAKZc/0fxb6Ce4FI06sNhWksYo8yIzrjprp01gOZ9bn7rzHM5
kPiv/PhvVQ/mnrpXxrMErDjJ5aDwBnHc32lluulPgkdWY2Lmf4AL9YhRjHPGcV69
eWArtVUbZ6CtTk6nEWz7CeORqTTzAtSn6ZvemrQRBv39Fxz5y6PPmk3u9XZoD1tm
VeXP4vzNR7cAcNL7Cs357QxpZUYJwkBfTD81mGFyfgU86fpbE+NYohJMUqQ8VY4j
3Ahwyyiy/VGNXOdbfKvg3ze0ohkUWEY=
-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org