Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131382e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131382e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          oK5Hq+HwsJo+YnpRot8Pkin/ePTRH8Rf3OEKoAMoUzE=
Subject key identifier:   45:34:3B:78:55:42:0D:6D:6D:54:7C:9E:C0:84:11:88:03:D7:AD:F4
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       22B35E84018DD3EBBCA20F5D45FF8B4F30C69363
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131382e302f32342d3234203d3e203538333936.roa
Signing time:             Mon 01 Jul 2024 01:05:47 +0000
ROA not before:           Mon 01 Jul 2024 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:05:47 +0000
asID:                     58396
IP address blocks:        27.54.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b3:5e:84:01:8d:d3:eb:bc:a2:0f:5d:45:ff:8b:4f:30:c6:93:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Jul  1 01:00:47 2024 GMT
            Not After : Jun 30 01:05:47 2025 GMT
        Subject: CN=45343B7855420D6D6D547C9EC084118803D7ADF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:12:36:45:94:79:64:49:ae:0c:17:db:be:
                    92:21:6a:08:69:1a:01:e4:a4:72:a9:af:67:09:cd:
                    8a:50:cf:64:5e:69:70:99:50:e0:8d:46:d6:88:48:
                    fb:57:64:b1:43:68:ee:a4:e4:b0:68:1b:93:aa:88:
                    e2:25:12:2c:51:c3:47:07:70:9f:98:ec:d6:f4:c9:
                    0c:cd:6b:67:75:c8:e5:0d:57:05:73:a2:c0:9f:32:
                    a2:0a:ff:71:f6:e6:35:b8:bc:df:bc:16:f0:3a:6b:
                    1b:7d:86:f1:05:05:e3:4d:58:6e:e1:49:56:46:be:
                    ba:1e:34:29:38:0e:eb:4c:50:cf:c4:6b:e0:cc:d3:
                    f6:e6:e1:d2:af:e3:a2:a9:fb:cf:59:4f:9d:53:d4:
                    9a:0d:a7:ad:7c:0c:36:d9:09:06:ff:8b:4d:3b:fc:
                    9a:d9:2f:7e:f1:af:ab:52:b8:86:a5:6d:6a:60:ba:
                    e5:c7:e2:65:b9:23:e6:55:29:0c:3d:92:71:6b:8e:
                    6e:45:09:06:59:a2:b0:4c:ca:b5:86:e0:d3:48:a3:
                    91:50:4f:56:87:f6:66:ec:28:73:41:59:85:82:84:
                    5e:7c:8e:ad:f2:03:55:2f:0d:11:59:87:5c:4b:36:
                    dd:0a:d9:81:82:d0:d1:7e:26:79:11:54:8e:5e:04:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:34:3B:78:55:42:0D:6D:6D:54:7C:9E:C0:84:11:88:03:D7:AD:F4
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131382e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7c:44:8d:06:aa:96:30:c5:9b:fb:44:0f:ce:f0:97:7e:cf:
         99:45:c1:cf:59:d4:18:e7:7e:83:e6:97:c6:11:f2:48:8e:23:
         0b:f7:5f:b1:e1:04:d7:fb:2d:84:35:cf:98:ab:94:08:70:25:
         9d:01:c4:ed:d1:eb:e2:94:1a:aa:31:99:7f:a2:e8:6c:1a:62:
         4d:2e:53:40:07:37:d9:ea:4e:84:61:6d:90:86:b4:4b:ce:77:
         80:5d:0d:86:84:42:b4:8e:de:c2:7f:d4:af:0b:f3:78:d0:a7:
         82:e6:3f:f7:a8:05:47:b4:ad:0e:5b:30:d3:23:f1:f3:84:47:
         17:de:e6:de:e8:70:8e:d0:f7:af:e3:f1:28:86:4d:0a:cb:ef:
         16:53:7c:39:11:0b:4d:30:5e:d2:bb:04:f8:eb:66:f0:f3:74:
         99:04:d7:7d:7d:43:12:bd:d9:41:a5:32:b1:d3:d8:8a:9d:2d:
         23:f5:89:8c:3a:14:a5:99:92:4e:e7:6f:49:fa:25:8a:09:30:
         0e:c5:73:f8:1d:fc:f3:85:18:8f:63:b2:49:fb:48:4d:f7:5e:
         4a:e5:6d:25:bc:0b:20:73:53:21:77:ba:12:2a:31:d6:c1:27:
         38:39:29:7b:f8:38:c2:2e:fb:f7:9c:06:4a:bd:83:b9:24:e6:
         6c:89:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org