Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa
File:                     32372e3132312e38312e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier:          SuOdofmK77GpBE87JxQhSFdKAulfYnDbPWbuZqGvTag=
Subject key identifier:   A9:3C:F1:51:E2:4D:60:69:00:5D:ED:B1:68:AB:89:19:F3:C7:2D:48
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       624EF380B14386AC84173844B64800C028ECEC12
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa
Signing time:             Sat 30 Sep 2023 03:00:00 +0000
ROA not before:           Sat 30 Sep 2023 02:55:00 +0000
ROA not after:            Sat 28 Sep 2024 03:00:00 +0000
asID:                     55652
IP address blocks:        27.121.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4e:f3:80:b1:43:86:ac:84:17:38:44:b6:48:00:c0:28:ec:ec:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Sep 30 02:55:00 2023 GMT
            Not After : Sep 28 03:00:00 2024 GMT
        Subject: CN=A93CF151E24D6069005DEDB168AB8919F3C72D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:fc:d9:83:aa:14:3c:40:b5:8e:01:e5:c7:
                    d4:63:92:28:2e:f2:de:09:47:b2:92:0a:ce:03:c7:
                    1b:1b:9f:3f:e6:41:ee:1c:ca:59:67:6b:3a:1e:1d:
                    7a:0d:17:db:70:a4:6d:0d:ae:28:41:a8:39:24:bc:
                    79:59:36:7c:e6:ce:33:cb:61:b1:da:ca:0a:f7:0f:
                    d7:4b:5d:37:6e:bd:e2:a7:20:8c:fc:d3:9f:af:df:
                    37:bb:2a:e9:6c:50:3e:54:c1:8b:ac:c2:37:f1:86:
                    76:50:15:56:82:f8:cf:c5:9e:ab:92:45:72:4c:dd:
                    55:d9:c7:d2:d8:bf:bf:ec:56:80:86:72:00:67:67:
                    cf:a3:07:0c:ce:2e:bd:27:05:da:8b:ec:d2:5a:d4:
                    e9:89:a8:ad:3e:71:83:64:e9:54:f4:ac:cf:21:69:
                    ac:98:70:de:6a:ec:52:c5:6a:9c:d3:9e:e7:e5:35:
                    9c:0a:ac:f0:9d:9e:3b:48:61:c0:2f:b7:b4:ec:f2:
                    a0:24:27:79:50:96:d5:d6:3a:f7:90:70:92:45:fc:
                    f3:b5:77:66:0c:56:36:51:8d:4f:6b:f5:e5:be:98:
                    27:87:c0:3e:52:5f:8d:9e:bd:7f:92:21:8e:08:3a:
                    1c:06:c4:f1:7c:39:14:27:69:bf:ff:cc:20:f5:58:
                    e5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:F1:51:E2:4D:60:69:00:5D:ED:B1:68:AB:89:19:F3:C7:2D:48
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:8f:f4:13:64:2a:25:4f:1f:3e:7f:6c:44:9c:1c:b4:b0:
         96:76:36:45:e7:cc:f5:56:e8:9e:9e:bd:00:02:2a:db:4b:16:
         e6:79:5d:9b:45:e4:d3:38:f2:b0:2a:c9:e2:8b:88:35:9e:22:
         fe:19:43:94:30:ae:d0:47:30:4f:fb:71:25:5b:4b:78:c8:3f:
         c9:20:a9:64:63:bc:6c:74:3d:70:c1:20:ed:0a:e5:5f:e1:38:
         31:40:13:ce:ad:1e:47:29:03:78:44:30:d6:45:9c:27:3d:aa:
         aa:12:8d:90:7b:3e:b0:eb:14:34:78:b6:45:74:1b:f6:01:9a:
         fe:0c:58:a2:42:50:28:d2:13:2b:c2:7b:d6:b2:1c:ef:b6:56:
         d8:0c:7c:94:cd:e5:00:29:7e:22:9f:90:57:b0:b0:3a:09:d3:
         0d:5e:98:6d:83:22:2e:72:1a:44:61:8d:76:6b:a7:e4:dd:8b:
         66:0a:7c:61:88:d7:65:b8:84:59:6f:44:f1:a0:b6:5f:ca:76:
         ac:31:5b:5a:e5:8f:4c:a7:27:a5:3a:d8:80:00:f6:5b:57:98:
         f9:41:9e:cd:1d:68:45:98:3b:fe:08:90:64:89:b2:b0:30:4d:
         cd:a7:4e:17:4b:23:ac:0a:7e:df:8d:a8:be:ca:86:f2:65:d1:
         84:29:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:16 2024 by rpki-client on console-ams.rpki-client.org