Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38362e302f32342d3234203d3e2039333431.roa
File:                     32372e3132342e38362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Hd/Nmo42n41z81Pj/xu1ffigpaHtxyrxOZjDlLjgZGU=
Subject key identifier:   49:FB:A2:45:91:2A:80:BF:40:28:92:33:A3:D7:28:10:41:A9:F6:D1
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       407299BEF461DDCA708BF35B5A4ACBB80C6ACC43
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38362e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 26 Jul 2024 14:00:02 +0000
ROA not before:           Fri 26 Jul 2024 13:55:02 +0000
ROA not after:            Fri 25 Jul 2025 14:00:02 +0000
asID:                     9341
IP address blocks:        27.124.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:72:99:be:f4:61:dd:ca:70:8b:f3:5b:5a:4a:cb:b8:0c:6a:cc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jul 26 13:55:02 2024 GMT
            Not After : Jul 25 14:00:02 2025 GMT
        Subject: CN=49FBA245912A80BF40289233A3D7281041A9F6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:82:2e:8b:02:54:62:0f:16:74:93:d7:d6:
                    71:d8:5d:45:af:20:67:67:5f:53:08:bd:b8:4d:c4:
                    3f:8d:95:d6:86:a6:ca:f9:42:6c:f5:60:15:ee:75:
                    91:26:b0:d6:e6:76:95:34:0b:68:df:26:91:88:0d:
                    81:cb:cf:39:f5:db:61:a5:5f:5d:75:3b:70:c3:84:
                    9b:80:17:e3:54:9f:e4:f2:eb:31:ea:41:08:2a:6b:
                    ca:a2:9d:bc:66:de:95:fa:4c:8f:1b:92:e1:81:0a:
                    07:2e:ad:07:97:79:5a:6c:09:fc:c4:76:cf:c6:e3:
                    56:f3:af:a8:f3:fc:1b:4a:d1:86:5b:6f:9a:4c:f7:
                    9c:a9:8a:92:7b:6f:34:a1:e4:bd:82:a5:a3:d1:13:
                    48:cd:dc:27:01:cd:e6:c9:a0:ca:4e:73:c0:dc:6d:
                    e3:ff:19:60:1a:45:93:89:e8:83:1a:6a:26:7a:f1:
                    90:d4:a1:19:cb:07:16:4e:b9:60:aa:63:c8:be:d7:
                    b2:4c:ce:18:6a:fc:7d:e9:7d:cd:85:55:33:f5:e3:
                    ff:53:23:3e:ed:84:d6:0e:15:66:0d:3f:b1:95:c1:
                    9c:ee:f6:7b:77:5f:5d:2a:95:83:6f:e2:35:97:3d:
                    07:fc:13:36:eb:22:6f:52:3e:0e:e6:e9:c5:b4:d3:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:A2:45:91:2A:80:BF:40:28:92:33:A3:D7:28:10:41:A9:F6:D1
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e2:9c:01:3c:2c:b9:d4:93:ac:ad:41:23:f7:dd:2c:89:52:
         ae:de:c9:70:c2:63:61:a6:76:ae:4c:e6:27:5d:51:71:c4:b6:
         22:58:b1:ea:73:21:1c:04:76:c6:8e:00:54:08:18:86:10:cd:
         62:9a:6b:82:39:75:dd:ed:6a:fc:45:79:fc:d7:37:9e:e5:a8:
         ff:a8:de:db:c9:07:b9:31:7f:cb:d9:e5:38:8b:1c:c6:1d:95:
         9c:69:35:8e:ab:37:ad:ec:6e:a0:59:64:3b:d6:33:14:1f:93:
         fb:87:dc:23:b8:7c:c8:94:8a:3f:fe:8c:88:87:7d:e2:9c:be:
         a2:af:37:23:0e:4b:16:f9:18:5b:73:1e:98:30:e6:a5:fd:02:
         28:43:68:a5:66:83:ae:a6:92:be:c2:e3:ad:e7:82:20:42:08:
         b4:bb:11:c5:0d:6b:0d:e0:e3:d6:a5:1c:53:1c:0f:e2:d5:13:
         d3:9c:5d:e2:40:24:bd:3f:31:bb:01:a8:0c:7a:a1:4a:3e:f7:
         8a:77:50:2c:45:53:a3:49:e2:41:3b:ae:4d:67:fc:b8:7c:31:
         37:cf:ca:86:e9:0c:6f:aa:3c:74:07:95:6b:98:a9:0d:e6:41:
         46:ea:09:a8:8f:12:51:e6:fe:0c:5f:6f:ba:23:d4:3e:f7:29:
         67:12:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org