Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131362e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          oNsajEYeBxnduajk4efn83p8F/7wSvCS/2X8tN/2HFc=
Subject key identifier:   40:A4:88:DA:CA:83:E0:25:95:70:69:90:B2:A6:9D:21:26:1F:D0:07
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       4078654200BF740E499C64FDB39DC7F46275485F
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
Signing time:             Wed 03 Jan 2024 08:02:04 +0000
ROA not before:           Wed 03 Jan 2024 07:57:04 +0000
ROA not after:            Wed 01 Jan 2025 08:02:04 +0000
asID:                     58396
IP address blocks:        27.54.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:78:65:42:00:bf:74:0e:49:9c:64:fd:b3:9d:c7:f4:62:75:48:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Jan  3 07:57:04 2024 GMT
            Not After : Jan  1 08:02:04 2025 GMT
        Subject: CN=40A488DACA83E02595706990B2A69D21261FD007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8c:0d:c9:3c:ec:30:90:d1:c5:f6:ed:15:06:
                    82:03:62:82:5f:1a:7f:2c:31:d6:53:20:48:1a:55:
                    cf:1f:f8:8e:37:f1:bc:4e:39:00:12:2b:61:fb:cb:
                    ce:b7:49:94:21:69:09:17:50:79:d0:bc:ac:70:7a:
                    79:9d:bb:fe:be:bd:d4:eb:89:20:1f:15:ba:b1:b6:
                    ef:88:ab:57:c1:99:44:dd:04:4e:a7:44:b0:90:63:
                    84:3e:08:1f:d6:34:14:8b:e6:02:13:f3:f7:b2:a9:
                    59:ff:d1:9f:d6:0f:b0:46:6a:36:38:db:a1:62:e0:
                    44:8f:1c:1a:de:d9:46:ba:3b:c2:a8:e8:a5:45:42:
                    97:9f:49:7c:cf:8e:ce:66:b5:d6:60:92:8e:08:6b:
                    86:b9:f9:e3:60:bf:32:3c:78:bd:66:30:2c:50:28:
                    80:96:4b:b0:f4:66:b7:b9:f6:5e:47:d4:b5:88:fe:
                    05:74:79:43:04:5c:45:ea:75:a2:42:69:cd:09:15:
                    dc:1c:a5:16:6c:35:52:2b:29:b8:1b:6a:c2:c4:78:
                    13:95:0c:73:88:01:cc:40:76:e0:ac:a6:62:23:c1:
                    74:be:e8:f7:c4:5c:4e:49:aa:35:3c:6e:29:69:b1:
                    40:86:af:b8:cc:ca:ad:42:36:a9:ce:23:08:f2:dd:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A4:88:DA:CA:83:E0:25:95:70:69:90:B2:A6:9D:21:26:1F:D0:07
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e4:a8:4d:14:3f:48:14:d3:52:aa:c3:78:90:7f:ac:7b:7d:
         af:45:5e:42:3a:26:21:bd:7f:79:3d:48:dd:34:9b:9b:20:ba:
         c6:1c:88:88:b0:41:35:cb:f8:81:2d:c8:75:c8:ad:88:7e:b1:
         63:20:42:d7:24:73:2e:c8:35:03:e3:99:ba:27:53:d0:0c:5f:
         66:16:24:04:9d:fe:af:f3:cc:17:10:6c:25:9c:da:45:cc:ae:
         51:53:55:2b:5e:a8:42:be:b7:e1:aa:6f:f2:5b:48:8f:19:ca:
         53:4b:b1:c3:48:6f:04:1e:35:ed:8a:c0:13:8e:fb:7d:b3:3e:
         8a:9d:b3:bd:4f:f2:30:8c:6c:16:41:0a:ce:3b:35:9b:48:3f:
         16:1d:50:ed:4d:76:a6:22:e1:14:1b:01:83:60:31:04:12:13:
         46:b8:6f:03:95:e9:d4:bf:1f:16:fa:43:f5:d1:66:73:2c:22:
         70:1d:bc:3f:4f:1b:2d:2a:9d:5f:eb:1a:b6:3e:40:a8:19:2f:
         7b:a1:67:3f:6f:f2:ea:7f:53:b5:53:60:b7:d3:93:bd:05:79:
         45:4a:89:01:16:ab:61:be:11:6d:84:12:a3:a7:00:07:da:3a:
         b9:b4:56:33:45:5e:9d:4b:4b:44:17:6a:80:c0:5d:ed:78:a0:
         4b:ad:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org