Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e302e302f32332d3233203d3e203338373533.roa
File:                     32372e3133312e302e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          ePGOuVkhIpEqCpgknc66gIljq7IpOOlyBZWbPCgp5Qg=
Subject key identifier:   9D:4E:45:3D:70:21:19:60:42:B0:25:D7:79:8A:9C:FE:CC:8F:25:28
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       1308F806A1B573BA5FBA1F7C8B78C7500D3205B2
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e302e302f32332d3233203d3e203338373533.roa
Signing time:             Tue 02 Jul 2024 08:03:18 +0000
ROA not before:           Tue 02 Jul 2024 07:58:18 +0000
ROA not after:            Tue 01 Jul 2025 08:03:18 +0000
asID:                     38753
IP address blocks:        27.131.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:08:f8:06:a1:b5:73:ba:5f:ba:1f:7c:8b:78:c7:50:0d:32:05:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jul  2 07:58:18 2024 GMT
            Not After : Jul  1 08:03:18 2025 GMT
        Subject: CN=9D4E453D7021196042B025D7798A9CFECC8F2528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:d6:30:8a:26:55:0c:bd:3e:0b:18:7e:67:
                    76:63:ff:ad:02:64:d7:f4:ef:64:48:f3:bd:26:d4:
                    a3:c8:a9:e3:f8:52:dd:71:fb:ae:c0:d7:97:35:f7:
                    0f:a3:8e:cd:f1:4f:6d:7e:40:d1:77:d6:34:ab:62:
                    76:d6:4a:ad:6b:e0:93:62:2d:33:15:ef:3c:f4:4e:
                    c8:f0:51:58:5c:bc:65:2f:b5:ea:88:fa:a5:3c:2c:
                    bb:69:5f:1f:d0:ee:7d:6c:c0:a8:14:c3:ef:83:ac:
                    d4:c5:2a:e3:4c:52:74:b2:71:de:41:0b:eb:20:59:
                    7b:59:fc:bb:a7:a3:bf:0e:2d:20:44:ab:c7:35:1d:
                    4d:66:a9:cc:7a:ff:0d:c8:46:c4:c7:62:27:cb:73:
                    2b:b5:c5:4c:75:58:0c:32:14:16:91:f8:cd:5c:5d:
                    cc:27:56:65:40:ec:03:81:a5:e9:68:da:e1:e3:91:
                    2d:39:f6:39:3b:a7:a1:18:87:21:f9:9d:89:cb:1f:
                    05:b0:ac:54:d3:23:e3:d2:8b:92:1f:86:90:9d:9b:
                    8d:2c:5a:f3:fa:6b:a5:05:32:10:f5:18:6c:12:65:
                    c8:18:05:be:93:78:b6:db:37:7d:4b:1e:76:2a:88:
                    0d:c4:04:0f:bc:17:77:e0:2a:4a:c6:18:32:86:b9:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:45:3D:70:21:19:60:42:B0:25:D7:79:8A:9C:FE:CC:8F:25:28
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e302e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:a0:d9:4b:ee:3c:e5:bf:66:78:4e:11:75:a4:f6:e9:fb:03:
         eb:3f:fc:f0:7b:18:a8:4b:2a:ad:0b:ad:47:e3:c2:e9:db:42:
         9e:5f:ac:3e:e9:b8:12:5f:cb:3b:df:73:f8:34:6c:42:a6:5e:
         c7:1a:a5:d3:a9:48:9b:1c:f0:89:7f:37:8f:90:ee:a2:5b:c7:
         66:47:74:6f:b2:5d:01:3c:8f:66:53:44:fe:d0:1c:2a:39:99:
         8f:e3:87:89:61:10:5e:ac:5e:b1:a7:f4:13:3e:d4:39:84:b6:
         1d:33:0e:16:74:b8:f0:e3:44:52:48:63:63:12:47:1c:a4:99:
         2c:b9:dc:0c:59:77:1d:89:2c:86:31:62:29:36:74:3b:4e:78:
         ae:d1:93:d3:ee:d4:10:ff:0b:90:45:c3:1d:bf:c6:e4:d7:be:
         2a:3d:00:93:4a:7d:e4:8b:6f:e2:1c:86:04:de:86:d9:f8:e2:
         9b:3f:b2:ed:88:e7:18:6c:1b:56:4c:76:d6:2a:29:4a:8b:e6:
         eb:96:37:77:ef:0a:aa:cb:f7:47:07:1e:ef:64:f5:36:1e:75:
         fc:71:54:77:82:20:50:3e:46:0e:f9:d1:7e:10:a9:6c:44:cc:
         27:c2:4a:82:1e:78:94:ba:9d:4e:56:f9:e4:c6:32:c2:c4:88:
         22:14:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org