Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa
File:                     3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (raw, json)
Hash identifier:          q8Ei2VVafKxE002qRNQ0DMSM3DUgZSLz3BRJ3fBaCO0=
Subject key identifier:   3E:40:CB:F6:D2:8D:8B:2C:A9:F9:64:25:9B:EE:08:61:56:61:3E:77
Certificate issuer:       /CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Certificate serial:       22B50EA8EAF54C8C041BBDFA4D83CE02EBBD3407
Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa
Signing time:             Sun 24 Dec 2023 07:17:58 +0000
ROA not before:           Sun 24 Dec 2023 07:12:58 +0000
ROA not after:            Sun 22 Dec 2024 07:17:58 +0000
asID:                     150489
IP address blocks:        103.55.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl
                          rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b5:0e:a8:ea:f5:4c:8c:04:1b:bd:fa:4d:83:ce:02:eb:bd:34:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D
        Validity
            Not Before: Dec 24 07:12:58 2023 GMT
            Not After : Dec 22 07:17:58 2024 GMT
        Subject: CN=3E40CBF6D28D8B2CA9F964259BEE086156613E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:f4:44:3e:c6:3e:44:6c:c0:95:39:3e:54:
                    e3:a8:d7:d7:55:4f:9d:6a:88:5f:44:0d:c9:93:21:
                    0b:da:26:bb:e8:6a:5d:27:34:ad:ae:c7:ac:f5:87:
                    cf:87:42:93:28:ed:09:4f:09:66:3d:4d:cb:b1:ad:
                    a9:74:f3:18:8d:06:51:85:d7:ac:c6:2e:21:f4:9c:
                    02:d9:42:03:27:b9:6d:c5:d1:ef:42:72:13:44:73:
                    0e:da:ef:51:c5:93:93:17:34:bd:98:b9:45:66:f3:
                    34:27:c1:13:64:ce:b0:ed:3d:b0:e7:10:7a:a7:c5:
                    aa:56:13:7c:85:8b:d6:a0:d1:44:ea:f2:84:81:4b:
                    de:7b:f3:ab:6d:db:78:71:28:e7:b7:6f:56:32:35:
                    27:4e:5b:02:42:95:96:79:04:a2:d1:4a:48:89:10:
                    68:40:b3:ca:f4:5b:40:3d:90:ec:cf:e7:ae:51:28:
                    04:09:33:a0:34:95:09:13:93:8f:56:f5:f8:b9:9f:
                    78:35:07:01:4b:6d:87:d0:0c:49:e4:fc:43:53:06:
                    94:f5:4c:ba:17:f2:c4:91:89:c6:fd:7b:bc:db:e7:
                    b3:bf:4a:65:1b:09:9c:53:cf:e4:65:0e:bb:b8:52:
                    ca:3a:66:aa:a1:33:73:d1:3a:a0:de:00:c1:4f:99:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:40:CB:F6:D2:8D:8B:2C:A9:F9:64:25:9B:EE:08:61:56:61:3E:77
            X509v3 Authority Key Identifier:
                keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:53:7e:b1:20:d5:5b:2d:77:ea:47:9f:93:21:a7:d4:ac:4b:
         27:1a:12:b5:b7:10:95:cc:5a:1b:cf:18:7c:7d:97:7b:21:28:
         ae:aa:90:98:70:9e:cd:d8:ac:f5:83:b4:33:ca:99:6c:0c:4b:
         da:5a:2b:d9:5f:1d:e6:94:91:5d:9e:c6:6c:ca:9d:cb:15:56:
         aa:57:f3:c9:32:16:1f:ac:89:74:57:3f:65:98:67:ed:50:1f:
         2d:6a:86:5b:35:91:6f:40:6c:9e:ad:9a:8c:90:45:23:bc:80:
         8f:0f:57:bb:0f:03:18:fe:9a:91:21:44:7c:a1:52:eb:66:67:
         4b:88:fe:cc:67:33:49:ae:30:16:84:69:1e:d1:24:b4:e8:f9:
         b7:ca:b4:fa:fd:b4:1f:9e:af:05:6a:28:4b:e9:99:49:c6:f5:
         da:5c:6f:5d:5f:33:7d:bd:14:3d:24:e5:69:bf:ba:6e:b4:9b:
         7c:64:49:b7:21:fc:ba:d4:9b:21:34:97:0e:70:17:77:b1:fd:
         aa:5c:d2:4e:80:6d:f8:11:b6:fc:69:5c:e5:d7:9d:39:81:4c:
         6e:7a:fc:da:92:62:5f:6d:5b:ac:86:81:a2:56:1e:54:3b:a5:
         be:37:e0:f8:7b:2a:00:69:d6:9e:4d:d3:5c:a4:29:73:74:7e:
         c0:3a:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org