Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39312e302f32342d3234203d3e2039333431.roa
File:                     32372e3132342e39312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          CJinGlV2XbCKLaSVnfRo6ikqFeA17e2e+xddPCdOI7o=
Subject key identifier:   EC:60:C5:6A:2C:2D:41:36:7E:37:28:84:DC:CF:B4:7A:42:57:99:0D
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       0FF1590BF0C8F1A91CFCC7224A0540EF04166E06
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39312e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 12 Jun 2024 07:27:06 +0000
ROA not before:           Wed 12 Jun 2024 07:22:06 +0000
ROA not after:            Wed 11 Jun 2025 07:27:06 +0000
asID:                     9341
IP address blocks:        27.124.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f1:59:0b:f0:c8:f1:a9:1c:fc:c7:22:4a:05:40:ef:04:16:6e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jun 12 07:22:06 2024 GMT
            Not After : Jun 11 07:27:06 2025 GMT
        Subject: CN=EC60C56A2C2D41367E372884DCCFB47A4257990D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:22:6f:d0:08:de:c4:8d:5c:52:5c:c4:3e:11:
                    18:53:f4:3a:5e:51:60:b3:f1:34:d8:55:a2:20:72:
                    55:f9:fc:fa:67:14:ee:3e:7b:1f:12:8e:37:ad:07:
                    d8:5d:b6:89:e0:81:76:4e:d7:31:1c:03:96:b6:92:
                    a9:16:04:99:eb:3d:84:d7:dc:68:72:36:fb:56:7b:
                    b5:dd:53:3d:ef:98:25:e4:fc:b2:92:20:cb:eb:93:
                    cb:81:88:3f:9c:fa:bd:8e:e2:b8:5e:42:3f:80:a9:
                    0c:d8:cb:5f:91:34:8a:77:4b:13:69:fa:12:7d:32:
                    5d:cb:0c:92:26:ed:7e:1b:b2:1b:e3:be:45:99:06:
                    52:8e:09:ec:26:84:c2:22:7a:0d:a4:2c:7b:a2:57:
                    d0:c1:cc:c8:5e:24:c5:b6:5e:d5:f1:0b:db:f9:72:
                    78:2b:4b:d4:83:ec:68:12:c1:33:44:f5:52:97:fd:
                    5d:1e:d9:70:a7:e9:bd:86:94:f5:0a:d9:f7:b4:a6:
                    d4:8e:a3:f8:cb:30:5b:93:9e:a0:d9:ed:73:d3:cf:
                    cd:bf:71:69:a8:77:92:ab:1d:07:86:4d:cf:37:8b:
                    52:07:de:06:fc:ea:1d:f7:a7:42:ca:9b:75:67:3c:
                    65:70:c1:bb:9a:02:52:1f:d1:ef:70:8a:c0:17:04:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:60:C5:6A:2C:2D:41:36:7E:37:28:84:DC:CF:B4:7A:42:57:99:0D
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:75:4b:62:67:87:bd:98:ea:03:a4:a7:bc:d2:0a:a4:85:eb:
         88:06:15:d7:41:63:f8:9f:e9:21:6b:a1:5c:88:13:cd:87:c1:
         9f:d3:ed:4e:6c:09:09:15:a8:f6:ca:17:c5:04:6a:bd:6f:61:
         33:b3:15:7a:1d:14:0a:ce:89:83:8c:95:40:32:33:ff:3f:c2:
         90:38:90:f0:57:cd:64:2d:de:01:09:1e:97:1d:5f:76:c0:46:
         8e:38:a2:f3:f6:08:86:1c:bf:c4:8d:74:30:88:c2:f0:47:9a:
         6d:96:15:ee:89:36:18:82:80:cb:1a:b5:6b:c6:8b:69:b7:1e:
         55:3e:a3:a9:94:10:87:89:c3:7f:bd:60:9a:1e:6f:38:a8:54:
         90:86:60:6d:43:a8:b9:60:95:3a:3e:a3:eb:07:75:77:6e:ac:
         28:7c:25:3f:f3:e4:5a:d2:0e:f9:c1:7e:76:15:8b:56:69:5b:
         25:11:2b:10:e9:91:e2:d2:66:ef:47:e8:3e:7f:55:cd:eb:4c:
         d8:13:e7:93:e7:b2:4d:58:48:b7:c9:a0:97:d2:f8:fe:31:de:
         af:80:87:00:f8:60:89:b0:cf:b2:88:dd:5e:bc:e9:c3:7e:82:
         19:ce:59:ca:03:67:24:23:c2:a7:d0:1e:9c:f5:9d:ac:e0:1a:
         9e:82:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org