Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa
File:                     32372e3133312e352e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          Z5indo3W3he//1vKrFKDUTP8LejI/xyv4FDMokBmuEM=
Subject key identifier:   C1:6A:28:16:1D:5D:AB:1B:81:C2:AA:4D:CE:1D:E6:E2:C3:BC:72:A0
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       643D64B14835758A6551EFF52AA9D1C9F3A09D27
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa
Signing time:             Tue 02 Jul 2024 02:00:01 +0000
ROA not before:           Tue 02 Jul 2024 01:55:01 +0000
ROA not after:            Tue 01 Jul 2025 02:00:01 +0000
asID:                     38753
IP address blocks:        27.131.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3d:64:b1:48:35:75:8a:65:51:ef:f5:2a:a9:d1:c9:f3:a0:9d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jul  2 01:55:01 2024 GMT
            Not After : Jul  1 02:00:01 2025 GMT
        Subject: CN=C16A28161D5DAB1B81C2AA4DCE1DE6E2C3BC72A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:00:62:4b:80:03:4f:06:43:0c:c8:e0:05:
                    dd:d2:b1:a8:56:01:a0:61:e3:71:ca:91:c0:3e:59:
                    c3:10:76:cb:81:00:37:a6:b7:9f:e4:08:01:bc:f9:
                    dd:6b:65:e4:c0:f6:42:77:66:48:c4:4a:62:2e:5c:
                    50:21:5d:4c:4b:92:ad:50:25:1d:8d:6a:27:0c:70:
                    2d:24:cc:aa:5d:27:60:3f:89:c9:7d:65:1e:41:ca:
                    0f:b4:f2:71:9f:f2:4c:35:7c:5a:cf:cf:3e:da:c7:
                    5d:b2:0a:e0:82:0c:ae:bc:f4:1a:a1:7b:08:ee:3d:
                    16:7f:7e:6b:30:58:a0:fa:93:15:25:af:31:67:6a:
                    20:c1:24:5e:99:e0:7a:2f:e1:d3:09:81:fb:14:d6:
                    3b:af:66:b2:17:4b:b2:a9:24:85:fc:d2:bc:34:4d:
                    2f:26:1c:37:ac:79:90:1c:09:46:f5:55:bf:c9:8b:
                    c8:86:6a:bb:8b:6f:17:f1:a0:96:18:b4:f9:83:94:
                    d2:c8:25:6e:a1:c9:c1:71:7e:d9:63:8e:d3:1c:f5:
                    5d:30:07:2b:86:21:da:c0:b2:5c:b7:b1:63:b4:fd:
                    41:8a:bc:eb:86:04:53:cc:f6:59:77:97:df:1c:c3:
                    aa:4a:9a:f1:39:a3:ca:c5:99:70:37:de:33:ce:50:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6A:28:16:1D:5D:AB:1B:81:C2:AA:4D:CE:1D:E6:E2:C3:BC:72:A0
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:11:9c:ad:21:fe:d0:83:30:6a:49:df:b1:89:fe:c8:99:
         be:6f:2b:69:61:ef:a1:38:5d:d7:e8:e7:ef:41:44:fa:79:0d:
         6d:8a:4f:44:4e:57:0e:49:be:79:a6:2b:c9:16:16:fd:a7:95:
         e7:97:20:64:b9:23:4f:95:95:ab:2c:30:da:00:8e:5e:0a:8d:
         18:80:5c:bd:a7:13:8a:09:89:ae:e8:21:bc:78:0d:c1:66:2f:
         8b:0a:06:f1:cc:36:93:d3:b8:25:87:63:1a:03:a0:00:3e:1a:
         40:13:06:be:b9:93:bd:e4:4e:41:a4:62:4b:f3:eb:ef:40:27:
         70:84:d3:b2:2d:d9:21:55:6d:31:fc:49:e5:2e:d2:03:cd:9d:
         07:64:36:b7:7a:73:58:14:a2:86:9e:4c:00:82:6b:f7:31:27:
         74:6b:59:ea:cf:6b:ee:f3:d5:95:bc:38:35:70:a5:2d:8e:d9:
         aa:56:a8:ca:ca:33:4d:31:6e:73:a1:bf:53:55:04:cc:c4:45:
         fe:34:44:3e:c5:7b:cd:1f:51:70:b7:ef:cf:e5:31:e8:f9:95:
         61:36:af:69:bc:15:39:3c:bc:a2:af:d9:08:03:a2:ec:75:54:
         11:0f:57:93:52:37:10:3d:22:03:f5:3a:5a:b5:89:45:96:c8:
         14:61:1c:7c
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUZD1ksUg1dYplUe/1KqnRyfOgnScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNDA3MDIwMTU1MDFaFw0yNTA3MDEwMjAwMDFaMDMxMTAvBgNV
BAMTKEMxNkEyODE2MUQ1REFCMUI4MUMyQUE0RENFMURFNkUyQzNCQzcyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUwBiS4ADTwZDDMjgBd3SsahW
AaBh43HKkcA+WcMQdsuBADemt5/kCAG8+d1rZeTA9kJ3ZkjESmIuXFAhXUxLkq1Q
JR2NaicMcC0kzKpdJ2A/icl9ZR5Byg+08nGf8kw1fFrPzz7ax12yCuCCDK689Bqh
ewjuPRZ/fmswWKD6kxUlrzFnaiDBJF6Z4Hov4dMJgfsU1juvZrIXS7KpJIX80rw0
TS8mHDeseZAcCUb1Vb/Ji8iGaruLbxfxoJYYtPmDlNLIJW6hycFxftljjtMc9V0w
ByuGIdrAsly3sWO0/UGKvOuGBFPM9ll3l98cw6pKmvE5o8rFmXA33jPOUDE1AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUwWooFh1dqxuBwqpNzh3m4sO8cqAwHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2
YzItNDJhYjhiNDc2MjQ5LzAvMzIzNzJlMzEzMzMxMmUzNTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbgwUwDQYJKoZIhvcNAQEL
BQADggEBAAiiEZytIf7QgzBqSd+xif7Imb5vK2lh76E4Xdfo5+9BRPp5DW2KT0RO
Vw5JvnmmK8kWFv2nleeXIGS5I0+VlassMNoAjl4KjRiAXL2nE4oJia7oIbx4DcFm
L4sKBvHMNpPTuCWHYxoDoAA+GkATBr65k73kTkGkYkvz6+9AJ3CE07It2SFVbTH8
SeUu0gPNnQdkNrd6c1gUooaeTACCa/cxJ3RrWerPa+7z1ZW8ODVwpS2O2apWqMrK
M00xbnOhv1NVBMzERf40RD7Fe80fUXC378/lMej5lWE2r2m8FTk8vKKv2QgDoux1
VBEPV5NSNxA9IgP1Olq1iUWWyBRhHHw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org