Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39302e302f32332d3234203d3e2039333431.roa
File:                     32372e3132342e39302e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          oly4z8wIrCHktNAqqTJhm2RsBw8XbqPKemgDeHezsYU=
Subject key identifier:   F0:12:4B:EC:6D:B9:85:EA:43:6B:BC:20:16:B8:37:76:E4:00:BF:93
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       122DC133FCEF2B52BC57C4FBBFE1D8A260C52474
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39302e302f32332d3234203d3e2039333431.roa
Signing time:             Wed 11 Oct 2023 11:05:42 +0000
ROA not before:           Wed 11 Oct 2023 11:00:42 +0000
ROA not after:            Wed 09 Oct 2024 11:05:42 +0000
asID:                     9341
IP address blocks:        27.124.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2d:c1:33:fc:ef:2b:52:bc:57:c4:fb:bf:e1:d8:a2:60:c5:24:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Oct 11 11:00:42 2023 GMT
            Not After : Oct  9 11:05:42 2024 GMT
        Subject: CN=F0124BEC6DB985EA436BBC2016B83776E400BF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:f9:a2:29:7a:fc:1a:83:62:83:79:84:37:
                    13:24:a2:c6:82:df:09:6f:8a:f2:1b:9d:95:6a:1c:
                    4d:16:5b:77:c7:00:d1:db:ef:b8:2d:16:00:51:fb:
                    1f:ac:91:c1:01:c4:53:31:40:04:1b:2c:48:29:6e:
                    7e:25:70:92:ea:a3:8c:59:40:02:3e:14:3f:b6:5d:
                    52:1a:59:af:5e:f9:36:d9:3d:ae:c5:c3:54:3a:b1:
                    90:87:be:fb:69:ab:a8:14:e7:cd:21:1a:fc:4f:e9:
                    25:c8:e0:46:f2:ed:2d:f1:bb:3c:4c:bf:51:df:75:
                    c0:b2:71:c7:b2:94:36:09:bc:89:9e:82:6a:3c:40:
                    5f:fb:71:94:0b:5e:6b:7e:02:2e:b1:68:95:42:81:
                    ca:71:b3:09:1d:ce:2d:22:fe:13:c7:78:f6:11:5f:
                    a1:b2:f3:8f:8c:ad:0c:1e:1a:f7:37:71:27:ad:21:
                    8e:16:a0:97:b9:76:71:28:5f:23:00:db:ed:ba:c0:
                    e0:aa:a0:a4:09:b2:56:a3:54:32:1c:d5:30:bf:33:
                    9b:1a:d6:74:b1:04:66:ed:71:73:14:74:2b:f0:76:
                    ed:ef:23:6d:db:52:85:4e:b1:76:79:ce:2e:64:a4:
                    c0:ab:8c:ea:8e:53:41:b8:3d:c5:13:2d:77:d0:50:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:12:4B:EC:6D:B9:85:EA:43:6B:BC:20:16:B8:37:76:E4:00:BF:93
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39302e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:54:6d:3e:4e:0e:20:3a:ea:7b:e6:bb:b0:c3:70:93:7c:
         f8:bf:be:0d:b8:6a:fd:d0:07:fb:a4:4e:12:08:b0:19:0e:4b:
         26:ea:dd:62:e6:a8:97:f2:da:59:49:c1:0a:ea:4d:2e:59:9f:
         6e:05:b7:42:b9:f5:76:5c:3f:8c:aa:da:35:b6:6f:4e:9b:4b:
         06:ce:30:73:74:d5:ee:03:ac:86:79:dc:03:84:3f:b4:c0:a1:
         b5:55:a9:85:d1:af:1a:ac:33:44:cc:6b:0c:19:02:4d:a7:cf:
         10:a1:ee:dd:95:a2:ba:09:14:a6:ad:79:fc:00:d1:aa:4e:81:
         a0:af:60:6d:0d:39:ca:2f:e5:d9:2c:78:0c:d1:47:57:1b:08:
         69:8f:1b:a5:08:c1:5b:2b:6d:09:06:e3:80:39:8a:e7:3c:35:
         36:31:d9:d8:99:d5:72:4c:b3:4d:6c:8a:86:07:5d:46:54:b7:
         79:db:9d:cc:d3:2f:42:58:f2:15:1e:d9:d3:90:6d:91:45:80:
         6f:dd:84:6c:6a:50:a1:21:22:67:ea:1c:2c:b9:64:3d:77:26:
         0f:de:c8:ec:72:34:88:7f:ab:a2:a2:a8:a9:e5:b5:d5:77:3e:
         68:01:fe:c3:e9:07:38:c8:33:f8:b5:8e:7d:a8:b3:64:9c:f7:
         7a:dd:b1:bb
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUEi3BM/zvK1K8V8T7v+HYomDFJHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yMzEwMTExMTAwNDJaFw0yNDEwMDkxMTA1NDJaMDMxMTAvBgNV
BAMTKEYwMTI0QkVDNkRCOTg1RUE0MzZCQkMyMDE2QjgzNzc2RTQwMEJGOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOi/miKXr8GoNig3mENxMkosaC
3wlvivIbnZVqHE0WW3fHANHb77gtFgBR+x+skcEBxFMxQAQbLEgpbn4lcJLqo4xZ
QAI+FD+2XVIaWa9e+TbZPa7Fw1Q6sZCHvvtpq6gU580hGvxP6SXI4Eby7S3xuzxM
v1HfdcCycceylDYJvImegmo8QF/7cZQLXmt+Ai6xaJVCgcpxswkdzi0i/hPHePYR
X6Gy84+MrQweGvc3cSetIY4WoJe5dnEoXyMA2+26wOCqoKQJslajVDIc1TC/M5sa
1nSxBGbtcXMUdCvwdu3vI23bUoVOsXZ5zi5kpMCrjOqOU0G4PcUTLXfQUAudAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU8BJL7G25hepDa7wgFrg3duQAv5MwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzIzNzJlMzEzMjM0MmUzOTMwMmUzMDJmMzIzMzJk
MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEbfFowDQYJKoZIhvcNAQEL
BQADggEBAHmfVG0+Tg4gOup75ruww3CTfPi/vg24av3QB/ukThIIsBkOSybq3WLm
qJfy2llJwQrqTS5Zn24Ft0K59XZcP4yq2jW2b06bSwbOMHN01e4DrIZ53AOEP7TA
obVVqYXRrxqsM0TMawwZAk2nzxCh7t2VoroJFKatefwA0apOgaCvYG0NOcov5dks
eAzRR1cbCGmPG6UIwVsrbQkG44A5iuc8NTYx2diZ1XJMs01sioYHXUZUt3nbnczT
L0JY8hUe2dOQbZFFgG/dhGxqUKEhImfqHCy5ZD13Jg/eyOxyNIh/q6KiqKnltdV3
PmgB/sPpBzjIM/i1jn2os2Sc93rdsbs=
-----END CERTIFICATE-----
Generated at Fri May 31 20:32:24 2024 by rpki-client on console-ams.rpki-client.org