Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38302e302f32342d3234203d3e203535363532.roa
File:                     32372e3132312e38302e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier:          yhslnPw/0kdUwo4Upa6wZ3S1y6iGaMJ+XsyQRvnqnpw=
Subject key identifier:   33:C0:3C:6B:CA:2A:44:03:5F:9C:31:28:B5:7F:83:D3:A4:86:36:75
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       50BA570F924FD31EDD40F252FF8BECDC0623C05A
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38302e302f32342d3234203d3e203535363532.roa
Signing time:             Sat 31 Aug 2024 04:00:01 +0000
ROA not before:           Sat 31 Aug 2024 03:55:01 +0000
ROA not after:            Sat 30 Aug 2025 04:00:01 +0000
asID:                     55652
IP address blocks:        27.121.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ba:57:0f:92:4f:d3:1e:dd:40:f2:52:ff:8b:ec:dc:06:23:c0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Aug 31 03:55:01 2024 GMT
            Not After : Aug 30 04:00:01 2025 GMT
        Subject: CN=33C03C6BCA2A44035F9C3128B57F83D3A4863675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:ec:cc:dd:45:67:92:83:6e:1f:b9:85:0e:
                    ed:ea:b3:91:b5:32:07:c9:8e:75:7b:21:62:f2:e8:
                    70:ca:37:ee:f2:be:40:e1:df:77:15:61:d1:8c:35:
                    a1:b1:da:7b:dd:50:0b:67:c9:da:16:95:5c:4d:3a:
                    e1:1a:a9:fa:d5:5d:df:ab:48:f4:ec:ce:9d:1b:c9:
                    3a:52:d3:50:28:ac:b8:de:06:91:00:c7:76:78:ef:
                    ca:cc:c6:bf:53:f4:cb:03:19:ca:1a:5e:68:23:8d:
                    45:c7:4b:00:54:e4:4e:8b:d5:7a:57:43:02:43:8a:
                    e5:31:82:f3:2f:33:20:d1:2e:4c:06:a3:cf:eb:df:
                    a8:2b:e8:b3:de:69:0a:ce:be:f5:34:b4:9d:0b:55:
                    2e:68:a5:98:44:4c:79:c6:c1:33:0d:96:b8:66:00:
                    3e:55:7a:ce:db:1d:b9:6b:c8:5d:9f:f3:6a:9d:db:
                    ba:4c:50:80:e5:66:57:dc:e8:2f:d7:fd:10:8b:b9:
                    16:e9:15:f5:7b:bb:be:e8:82:5d:00:ba:31:8c:b5:
                    fa:fd:81:79:ba:0a:72:60:47:00:86:21:c7:0e:7a:
                    18:8a:0e:77:f5:76:f9:78:2d:a1:84:51:b5:02:4c:
                    79:17:18:55:42:f6:91:65:7f:3a:2a:e6:2b:a5:20:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:3C:6B:CA:2A:44:03:5F:9C:31:28:B5:7F:83:D3:A4:86:36:75
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38302e302f32342d3234203d3e203535363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:3c:97:85:86:62:42:e3:a5:26:4c:a5:16:c1:98:b1:8e:
         1f:a6:d6:1f:37:b3:9c:e2:e0:d2:f6:a7:37:4e:ea:e9:73:51:
         7e:0e:4c:5e:8a:07:1c:d7:e9:5c:1b:52:73:c3:93:12:0e:97:
         63:e8:8b:ae:44:1c:f4:0c:5b:b8:71:c0:5b:7d:89:02:8f:23:
         92:d0:8d:de:69:fe:1f:73:4d:ad:96:87:89:43:82:65:9b:b1:
         6d:bd:d0:1c:ad:ba:2a:1b:0a:a1:72:59:6e:ba:31:d6:39:d0:
         ab:7d:ed:cd:07:ad:85:f7:5a:1c:44:25:ff:f9:df:94:08:57:
         ec:06:45:9b:21:19:1e:30:95:e1:fb:92:84:34:e9:18:f6:24:
         be:64:05:b6:51:5c:ae:d8:69:96:b0:b5:35:6a:af:75:82:2d:
         81:61:2a:bb:d7:78:1b:79:71:ac:e2:e9:03:38:1f:d5:52:e4:
         39:b8:26:78:4e:4b:25:c1:e1:60:9c:4a:b3:fc:e7:3c:d1:c2:
         b6:65:4b:80:65:a5:78:5f:b9:2f:6a:36:73:a3:5a:de:87:59:
         20:d9:7a:95:fa:c5:bd:be:22:e2:58:92:cb:7c:cc:4e:bd:60:
         db:cf:11:49:a9:4c:34:f8:8a:43:f3:c3:d4:2e:af:25:96:0b:
         2f:e4:a2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org