Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e342e302f32342d3234203d3e203338373533.roa
File:                     32372e3133312e342e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          +K9k/MgvhA/uNmFUonlpKK3xDZ9FsjzdKH121G/xCwg=
Subject key identifier:   A3:CB:4F:AD:30:C6:0F:C7:31:E7:0E:11:F6:C4:AE:E8:AC:C9:79:9A
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       23189580E18349AFF8462D2F1428D0604EC4B0B5
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e342e302f32342d3234203d3e203338373533.roa
Signing time:             Fri 31 May 2024 07:00:01 +0000
ROA not before:           Fri 31 May 2024 06:55:01 +0000
ROA not after:            Fri 30 May 2025 07:00:01 +0000
asID:                     38753
IP address blocks:        27.131.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:18:95:80:e1:83:49:af:f8:46:2d:2f:14:28:d0:60:4e:c4:b0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: May 31 06:55:01 2024 GMT
            Not After : May 30 07:00:01 2025 GMT
        Subject: CN=A3CB4FAD30C60FC731E70E11F6C4AEE8ACC9799A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:33:3c:b5:cd:a2:0c:f8:4f:ee:0d:04:c9:30:
                    20:2b:1b:91:35:08:70:ac:14:2f:52:c5:02:eb:40:
                    22:50:ee:f0:24:ac:db:6e:35:7d:c0:ea:84:f8:61:
                    5c:cf:a0:3b:82:b4:61:fa:c4:92:c7:c4:58:49:3f:
                    e8:c2:01:d0:24:c8:0f:ef:51:74:3e:3b:41:6a:14:
                    d3:b4:ef:3e:a5:38:5c:0d:50:f0:d4:da:d7:82:5c:
                    79:5a:27:6a:46:2f:c6:27:08:ae:d4:fe:5f:e4:2a:
                    3e:76:93:1a:c0:7a:18:df:8d:f2:be:61:13:54:ef:
                    c2:bd:88:54:5f:ae:87:6c:4c:e2:a3:e4:cc:83:8a:
                    ee:92:9c:26:6b:c3:23:74:cf:a8:fa:97:80:b9:7c:
                    72:b4:47:14:f6:c9:5a:af:19:f3:12:b0:1c:e6:6c:
                    6c:a9:16:ec:ee:51:bf:fb:25:35:bd:e5:e7:71:eb:
                    ac:09:1c:56:74:e5:ea:20:de:2c:61:38:cc:63:a8:
                    28:63:3d:17:cb:9d:23:78:4f:63:ff:c2:fc:b0:53:
                    bf:54:6e:5b:44:5c:64:e7:9f:73:20:b9:64:32:69:
                    4e:05:89:1f:e8:a1:96:27:52:e0:3e:38:de:71:f1:
                    f0:96:ee:b4:6f:37:fb:92:a2:c6:df:1f:f6:da:4e:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CB:4F:AD:30:C6:0F:C7:31:E7:0E:11:F6:C4:AE:E8:AC:C9:79:9A
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e342e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:57:c6:e6:86:4a:c7:2c:91:c1:ab:42:57:aa:1d:4e:83:00:
         01:eb:df:e1:07:79:be:17:cb:30:f5:31:99:c7:b4:b4:e6:b5:
         1a:57:2d:5c:14:7e:78:ca:73:da:7f:cc:03:dc:ce:b2:c8:67:
         11:a5:bb:b9:1b:a5:a7:f7:15:05:82:e7:be:14:20:28:ea:21:
         95:19:30:ad:cb:20:5a:20:05:b7:02:9c:b0:95:80:6f:72:d7:
         ee:6d:a4:61:6b:f2:24:17:46:d4:19:1b:c0:03:ea:89:61:f1:
         45:2f:2c:e8:f4:69:88:55:a8:d2:0c:61:7e:95:07:eb:5a:50:
         3a:65:18:2d:4c:4d:ca:34:26:e1:16:84:36:bf:4f:e3:3f:01:
         2b:91:d4:4c:68:63:b8:5c:c7:79:4d:30:a1:47:62:d7:0e:02:
         74:83:3a:c2:f2:a2:73:5a:f5:fb:e3:f7:14:8b:21:9e:4e:47:
         f0:e6:e7:de:40:c3:83:e5:0e:39:58:ae:21:7f:01:8b:28:a7:
         f8:39:1a:b4:48:4d:ce:e8:51:80:9c:40:7d:81:ca:53:d2:96:
         f1:45:c7:2c:4c:a4:30:c0:5e:0c:85:53:ad:e2:20:62:a8:16:
         5c:59:2f:f3:96:88:f5:c0:bb:d6:e6:e3:3a:1d:f6:11:33:10:
         fb:1e:1b:3d
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUIxiVgOGDSa/4Ri0vFCjQYE7EsLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNDA1MzEwNjU1MDFaFw0yNTA1MzAwNzAwMDFaMDMxMTAvBgNV
BAMTKEEzQ0I0RkFEMzBDNjBGQzczMUU3MEUxMUY2QzRBRUU4QUNDOTc5OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwMzy1zaIM+E/uDQTJMCArG5E1
CHCsFC9SxQLrQCJQ7vAkrNtuNX3A6oT4YVzPoDuCtGH6xJLHxFhJP+jCAdAkyA/v
UXQ+O0FqFNO07z6lOFwNUPDU2teCXHlaJ2pGL8YnCK7U/l/kKj52kxrAehjfjfK+
YRNU78K9iFRfrodsTOKj5MyDiu6SnCZrwyN0z6j6l4C5fHK0RxT2yVqvGfMSsBzm
bGypFuzuUb/7JTW95edx66wJHFZ05eog3ixhOMxjqChjPRfLnSN4T2P/wvywU79U
bltEXGTnn3MguWQyaU4FiR/ooZYnUuA+ON5x8fCW7rRvN/uSosbfH/baTj+vAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUo8tPrTDGD8cx5w4R9sSu6KzJeZowHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2
YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzNDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbgwQwDQYJKoZIhvcNAQEL
BQADggEBABFXxuaGSscskcGrQleqHU6DAAHr3+EHeb4XyzD1MZnHtLTmtRpXLVwU
fnjKc9p/zAPczrLIZxGlu7kbpaf3FQWC574UICjqIZUZMK3LIFogBbcCnLCVgG9y
1+5tpGFr8iQXRtQZG8AD6olh8UUvLOj0aYhVqNIMYX6VB+taUDplGC1MTco0JuEW
hDa/T+M/ASuR1ExoY7hcx3lNMKFHYtcOAnSDOsLyonNa9fvj9xSLIZ5OR/Dm595A
w4PlDjlYriF/AYsop/g5GrRITc7oUYCcQH2BylPSlvFFxyxMpDDAXgyFU63iIGKo
FlxZL/OWiPXAu9bm4zod9hEzEPseGz0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org