Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa
File:                     32372e302e3139362e302f32322d3234203d3e203539323838.roa (raw, json)
Hash identifier:          O8kAH8t08+9DH7Rdkzs7sp0HA8ViQO+3lyriqTCqhRw=
Subject key identifier:   1D:65:0C:BD:9C:BF:2F:14:E8:27:F9:85:E9:22:62:DB:30:14:EA:FD
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       5FBD700414B6F0A4C386AD0B6186FC6C03F33C3B
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa
Signing time:             Wed 10 Jul 2024 17:00:00 +0000
ROA not before:           Wed 10 Jul 2024 16:55:00 +0000
ROA not after:            Wed 09 Jul 2025 17:00:00 +0000
asID:                     59288
IP address blocks:        27.0.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
                          rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bd:70:04:14:b6:f0:a4:c3:86:ad:0b:61:86:fc:6c:03:f3:3c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: Jul 10 16:55:00 2024 GMT
            Not After : Jul  9 17:00:00 2025 GMT
        Subject: CN=1D650CBD9CBF2F14E827F985E92262DB3014EAFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:24:29:c1:b4:4a:bd:e5:3e:fb:b4:79:33:
                    55:64:6c:0e:0f:3e:3f:3f:79:f0:15:d2:70:71:78:
                    4c:1c:cb:3e:d5:ba:97:9c:2b:0c:89:d6:c8:50:f8:
                    14:45:6a:d1:50:48:64:16:b2:39:72:bd:29:ab:a9:
                    23:6a:f2:1c:84:53:b1:a0:8a:c0:bc:ba:c1:3d:85:
                    21:9d:b2:20:1b:71:4c:a6:e0:b8:e8:38:2c:d3:c4:
                    33:44:45:db:aa:9a:30:d1:df:52:23:2c:ae:de:cb:
                    a0:b3:c8:7c:a1:5d:23:80:14:2c:a5:ca:49:b4:72:
                    6d:71:6b:65:e8:90:53:70:19:3b:bc:ce:68:70:46:
                    e3:bc:2c:08:27:ea:d2:36:e4:83:8c:0c:45:48:dd:
                    d6:7d:5d:43:4d:ac:c0:d9:e3:ad:5d:ac:bb:f0:c8:
                    ac:3f:5e:e8:24:16:16:10:76:c3:1e:50:07:c7:7a:
                    8e:89:11:ed:4d:f8:17:73:1c:66:3d:54:7f:d1:c1:
                    de:54:73:0f:b7:18:56:a4:4a:91:67:5b:ff:68:19:
                    3e:9c:5d:dd:e3:8f:98:9e:09:63:59:5c:45:60:46:
                    67:cb:21:c5:55:f6:1d:b9:be:dd:24:1e:9c:02:10:
                    7a:89:24:0f:1d:3b:8b:fc:eb:fa:5d:f8:af:80:75:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:65:0C:BD:9C:BF:2F:14:E8:27:F9:85:E9:22:62:DB:30:14:EA:FD
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:24:86:f8:cd:37:f4:b8:32:1f:79:8d:a0:97:60:a2:cb:
         6e:96:b9:94:4b:33:00:5e:1f:4d:1c:f1:d9:f2:0c:ee:e8:54:
         7a:71:8c:26:ac:b5:ee:4d:cf:71:ee:1e:a6:39:73:75:a7:11:
         39:5f:97:cc:3f:78:9c:80:c7:ec:e3:08:8e:ce:d2:24:16:09:
         b2:a6:92:50:c2:f4:be:d9:a0:18:3f:37:b2:54:a1:a7:23:59:
         34:39:5f:b0:ff:1a:c9:6f:d3:eb:ca:04:67:31:e1:bb:b5:ef:
         7d:44:dc:41:fd:df:05:6c:94:2f:29:79:7d:bc:54:00:13:2a:
         77:be:b7:fe:8b:cd:37:bf:34:a5:0b:d7:09:ed:f1:f7:58:e3:
         09:e8:6e:bf:74:49:b6:69:98:3f:ef:f3:7f:85:70:9d:d6:72:
         77:52:b7:bb:90:fe:1d:1f:1d:af:79:88:58:2a:38:a6:97:76:
         17:48:1e:b1:00:48:75:75:53:da:fd:76:95:b2:68:73:85:07:
         56:85:5d:5e:a3:d3:bb:9a:79:b3:ed:de:9d:a8:af:4a:c0:cc:
         be:bf:63:0a:fc:d0:41:50:77:6c:92:33:6a:51:38:c3:40:96:
         96:1e:42:68:2d:48:b7:88:e9:ae:d8:92:9e:ea:15:ea:b0:3f:
         86:65:0d:2a
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUX71wBBS28KTDhq0LYYb8bAPzPDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5
N0U0OTgyRDAeFw0yNDA3MTAxNjU1MDBaFw0yNTA3MDkxNzAwMDBaMDMxMTAvBgNV
BAMTKDFENjUwQ0JEOUNCRjJGMTRFODI3Rjk4NUU5MjI2MkRCMzAxNEVBRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlSQpwbRKveU++7R5M1VkbA4P
Pj8/efAV0nBxeEwcyz7VupecKwyJ1shQ+BRFatFQSGQWsjlyvSmrqSNq8hyEU7Gg
isC8usE9hSGdsiAbcUym4LjoOCzTxDNERduqmjDR31IjLK7ey6CzyHyhXSOAFCyl
ykm0cm1xa2XokFNwGTu8zmhwRuO8LAgn6tI25IOMDEVI3dZ9XUNNrMDZ461drLvw
yKw/XugkFhYQdsMeUAfHeo6JEe1N+BdzHGY9VH/Rwd5Ucw+3GFakSpFnW/9oGT6c
Xd3jj5ieCWNZXEVgRmfLIcVV9h25vt0kHpwCEHqJJA8dO4v86/pd+K+AdZNLAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUHWUMvZy/LxToJ/mF6SJi2zAU6v0wHwYDVR0j
BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD
MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0
OTgyRC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2
ZGYtYjI0M2M1MTY0ZDIyLzAvMzIzNzJlMzAyZTMxMzkzNjJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDM1MzkzMjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIbAMQwDQYJKoZIhvcNAQEL
BQADggEBAKNKJIb4zTf0uDIfeY2gl2Ciy26WuZRLMwBeH00c8dnyDO7oVHpxjCas
te5Nz3HuHqY5c3WnETlfl8w/eJyAx+zjCI7O0iQWCbKmklDC9L7ZoBg/N7JUoacj
WTQ5X7D/Gslv0+vKBGcx4bu1731E3EH93wVslC8peX28VAATKne+t/6LzTe/NKUL
1wnt8fdY4wnobr90SbZpmD/v83+FcJ3WcndSt7uQ/h0fHa95iFgqOKaXdhdIHrEA
SHV1U9r9dpWyaHOFB1aFXV6j07uaebPt3p2or0rAzL6/Ywr80EFQd2ySM2pROMNA
lpYeQmgtSLeI6a7Ykp7qFeqwP4ZlDSo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:57 2024 by rpki-client on console-ams.rpki-client.org