Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
File:                     32372e3132342e38352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          NrPMR4Cc/JuBc8yJ1zIyQqB9oRMHCw0TAhEvwX4jrZ8=
Subject key identifier:   6A:E4:7B:E3:BD:D2:B9:15:F0:C9:18:44:5B:24:A1:A7:F6:33:1D:7F
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       4D9A888173E063D63881C09DC1EB38BEE097B742
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 11 Sep 2024 12:00:02 +0000
ROA not before:           Wed 11 Sep 2024 11:55:02 +0000
ROA not after:            Wed 10 Sep 2025 12:00:02 +0000
asID:                     9341
IP address blocks:        27.124.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9a:88:81:73:e0:63:d6:38:81:c0:9d:c1:eb:38:be:e0:97:b7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Sep 11 11:55:02 2024 GMT
            Not After : Sep 10 12:00:02 2025 GMT
        Subject: CN=6AE47BE3BDD2B915F0C918445B24A1A7F6331D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:ed:0e:d4:49:ad:eb:c4:d6:3e:f8:8d:f2:
                    ae:e5:9f:60:12:e2:e0:88:fd:e1:64:b6:72:0a:35:
                    1c:69:34:d9:55:fa:0d:8c:35:0d:76:07:a5:49:a4:
                    2c:c9:1d:b1:6e:2f:ba:f9:91:6d:07:f7:c9:36:c9:
                    e8:2b:96:29:fd:38:4a:e7:fe:a8:06:31:e2:a4:23:
                    94:c6:84:d9:ae:72:8c:07:98:80:1c:fa:00:94:19:
                    e9:e4:3e:43:48:f3:a8:ba:5d:ff:d6:e8:b9:fb:1f:
                    f6:03:d4:82:dd:09:d2:71:fa:3e:9f:b4:66:34:50:
                    d1:27:f0:72:e3:65:e6:da:d3:18:86:f6:13:53:d5:
                    21:57:fa:16:6c:4d:4f:41:5e:07:e4:07:63:c9:dc:
                    ca:4c:be:17:12:c3:06:8b:ac:eb:a8:dd:64:48:86:
                    d7:7d:02:27:6d:b0:e9:c6:8c:91:e5:8f:0b:3f:f9:
                    14:bd:c1:0f:1a:cf:7d:53:36:7a:cc:15:62:f4:1f:
                    2f:57:d5:46:b8:d9:48:40:cf:d4:c4:79:ae:cb:66:
                    f6:fc:ac:4d:98:d1:17:e3:96:8a:9f:5e:29:3a:0e:
                    60:db:c9:5e:e8:37:62:91:3b:96:32:12:3b:0a:5e:
                    d7:88:dd:71:e1:d9:ce:15:c0:e0:c0:d5:77:3e:a3:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:7B:E3:BD:D2:B9:15:F0:C9:18:44:5B:24:A1:A7:F6:33:1D:7F
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:30:c3:1c:45:18:63:fe:1e:d8:ab:54:f5:bb:85:9c:af:
         b8:76:55:f2:bb:79:57:9b:13:a3:0c:b0:03:58:95:31:ab:7a:
         d4:b5:d1:6d:36:53:4c:48:14:66:cc:b2:73:3d:c2:8d:24:23:
         eb:f3:de:92:01:8b:42:42:2a:61:97:40:13:18:5e:55:a4:3a:
         f0:e7:0f:74:9b:e7:04:ac:fb:d2:7c:b8:e4:5b:ae:23:66:4b:
         c2:a9:61:89:50:cf:f7:82:6b:40:88:11:75:5d:0c:ab:fc:43:
         e5:3c:35:9e:be:28:8a:e7:bb:61:8d:e1:69:9d:12:5c:95:cd:
         8a:7a:fc:f7:fd:77:cf:78:04:7a:93:41:1e:bf:f9:fa:2f:d1:
         af:fd:6f:37:93:e0:f0:42:37:c4:22:b9:dd:0f:ae:d7:8a:ee:
         4f:c8:6e:48:22:c7:1d:60:c1:71:cc:11:a9:37:02:3d:8f:13:
         e2:48:7b:fc:43:0d:3a:6c:c3:76:e7:04:bd:aa:69:0e:c2:7f:
         6e:d6:1a:50:43:0f:c1:a7:04:ee:9d:f8:28:4e:fd:6e:5a:7d:
         d3:60:f0:bc:24:fb:46:3e:86:fa:1c:97:9a:ef:11:59:7b:7a:
         da:e9:92:01:d4:df:6d:2b:dd:41:e5:be:cb:22:02:4c:8c:42:
         fa:ec:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org