Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e322e302f32332d3233203d3e203338373533.roa
File:                     32372e3133312e322e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          QflVUa45jp5NVqYBvdpchhLYkK740nhyO0BhzLvs+TM=
Subject key identifier:   FF:03:E1:9E:4E:43:FA:6B:52:7E:77:24:E9:DB:2D:7B:15:00:64:61
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       6D80A28BD8AC5BC263456C9699DF2AC1C4CCE43D
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e322e302f32332d3233203d3e203338373533.roa
Signing time:             Tue 02 Jul 2024 08:03:17 +0000
ROA not before:           Tue 02 Jul 2024 07:58:17 +0000
ROA not after:            Tue 01 Jul 2025 08:03:17 +0000
asID:                     38753
IP address blocks:        27.131.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:80:a2:8b:d8:ac:5b:c2:63:45:6c:96:99:df:2a:c1:c4:cc:e4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jul  2 07:58:17 2024 GMT
            Not After : Jul  1 08:03:17 2025 GMT
        Subject: CN=FF03E19E4E43FA6B527E7724E9DB2D7B15006461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:21:6b:80:56:52:f0:dd:ee:d1:1e:40:58:
                    47:6c:9e:ef:e8:e0:64:b6:89:2b:1c:ff:04:94:52:
                    74:54:d5:8d:5c:18:e5:e8:33:fd:eb:fe:29:3b:a3:
                    c9:13:c9:4d:6c:2a:d7:07:ad:cb:f6:36:07:c9:6c:
                    fd:83:53:fe:98:e8:82:6c:af:5f:b3:06:cf:a2:c2:
                    98:90:c3:44:00:d1:dd:5a:69:b7:f9:d4:ca:d0:94:
                    00:1a:5c:72:ac:6a:10:29:0c:83:ef:76:33:3b:97:
                    b9:2f:31:fb:c9:a0:f2:b8:b5:9e:ff:5a:b2:58:8b:
                    25:64:37:81:fa:9d:8f:fe:96:76:c1:89:67:65:08:
                    74:40:2f:de:24:71:bb:92:22:6a:71:0c:48:ea:f7:
                    c4:5b:1a:52:1c:10:a9:c3:22:86:fd:8b:ce:f9:49:
                    78:39:e6:75:63:1b:c0:24:1c:f0:8a:a4:ad:2b:8b:
                    d8:a8:ab:d8:0f:01:d9:63:5d:20:40:b0:1b:f4:76:
                    bc:09:d6:aa:b8:f4:95:d3:26:78:73:5f:d2:7e:83:
                    1a:86:7e:76:2e:24:d3:5f:dc:ab:9a:85:3a:fe:74:
                    b3:51:9d:d3:c1:ea:e5:a4:56:9e:bd:86:82:87:ad:
                    51:94:77:32:a7:ae:25:0a:2d:07:0f:90:e1:32:1a:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:03:E1:9E:4E:43:FA:6B:52:7E:77:24:E9:DB:2D:7B:15:00:64:61
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e322e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:6b:a5:a6:6e:b0:8e:2b:37:33:22:6c:26:08:39:8d:70:dd:
         52:e7:31:2b:82:81:3b:07:70:81:88:f6:15:20:06:0f:80:6b:
         d8:68:f5:9f:bb:08:b0:60:d1:80:48:32:88:ab:fa:b8:e1:cd:
         5f:c9:da:29:9a:b7:1b:21:17:2a:69:75:8d:6c:5a:22:5d:69:
         03:32:47:7d:5c:3e:6c:92:0b:48:a3:e8:39:86:90:ed:6d:df:
         8f:df:1a:16:aa:39:3d:fc:bf:ed:80:23:da:9e:1b:e3:7b:56:
         79:74:27:5d:90:94:ad:d5:91:60:83:12:e0:98:a4:bd:34:97:
         07:a9:7d:5a:6c:a8:bf:eb:ac:08:9c:3b:11:1d:3f:3d:03:b1:
         b0:e1:77:ae:00:63:93:15:2e:79:d2:a9:d9:c8:d9:4a:20:d5:
         71:32:94:0b:57:60:0b:9b:e9:f0:58:08:e9:f8:54:e9:af:34:
         80:b7:72:94:a5:74:63:80:aa:69:5f:c4:19:38:7a:4d:fc:62:
         43:01:fb:1d:65:3a:0d:67:eb:73:f7:7d:ee:10:c7:c7:ff:56:
         35:93:72:c5:78:f4:98:48:df:b0:85:48:de:e7:1e:01:ea:bf:
         6b:f3:44:20:70:a0:ed:16:7c:f3:01:c3:77:20:29:df:36:a5:
         09:2d:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org