Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134362e302f32342d3234203d3e203338343936.roa
File:                     3232332e32372e3134362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          Otp614sWAYz8pRe5UkDa+JACWc43tXvLdEI5Bk7SsJM=
Subject key identifier:   6A:73:36:B1:B9:0B:5C:BA:25:70:5B:F4:46:2E:D7:AF:DB:30:98:69
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       248F46BCE653E74A2B2EE5D5C18C539A1B15BDE5
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134362e302f32342d3234203d3e203338343936.roa
Signing time:             Fri 24 May 2024 04:00:02 +0000
ROA not before:           Fri 24 May 2024 03:55:02 +0000
ROA not after:            Fri 23 May 2025 04:00:02 +0000
asID:                     38496
IP address blocks:        223.27.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8f:46:bc:e6:53:e7:4a:2b:2e:e5:d5:c1:8c:53:9a:1b:15:bd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: May 24 03:55:02 2024 GMT
            Not After : May 23 04:00:02 2025 GMT
        Subject: CN=6A7336B1B90B5CBA25705BF4462ED7AFDB309869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:63:c2:a2:7c:90:37:4e:79:da:33:80:6e:
                    cc:46:62:98:44:fa:07:fc:53:12:b8:19:dc:15:c7:
                    5a:de:62:f4:60:d6:a4:09:f7:62:b4:f6:42:df:e1:
                    b5:b9:08:ed:4b:20:77:ed:8a:a5:3a:ae:f3:b3:c3:
                    eb:bf:8a:72:ca:46:61:ec:33:8b:ca:94:3d:44:59:
                    07:b9:f4:af:5f:17:d9:ee:d8:5b:7f:3b:fe:81:38:
                    e2:26:a4:2f:b4:7e:b5:ba:7a:c0:f6:d4:92:2f:15:
                    e4:2f:57:08:e9:6c:4b:52:c8:f0:e1:fd:96:21:82:
                    91:ab:6f:de:74:6c:f6:f9:61:69:75:63:bc:92:b0:
                    0c:99:d0:b7:3e:d9:be:6b:93:cc:87:fb:66:45:09:
                    2c:7d:9f:0b:8a:14:67:4a:12:41:cf:f1:d9:de:70:
                    0b:e7:37:b2:b9:33:cf:2d:51:0a:5e:dd:07:53:af:
                    6e:c7:89:84:ff:40:f8:38:d1:31:8d:03:35:bd:3a:
                    cf:5f:01:e1:74:22:5d:13:d1:16:0a:1d:65:4f:78:
                    46:4a:da:21:15:df:b3:30:28:e7:66:02:52:08:fb:
                    a5:ff:0e:d7:7d:a1:16:89:a5:a2:21:f6:7e:1f:75:
                    2a:2f:03:58:03:b2:76:30:eb:69:85:88:40:3c:3e:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:73:36:B1:B9:0B:5C:BA:25:70:5B:F4:46:2E:D7:AF:DB:30:98:69
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134362e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:b8:a2:dd:9d:7c:cf:91:1e:be:76:8f:12:3f:90:44:3e:
         52:5e:d7:d7:84:55:86:64:8b:74:e4:3b:fc:2a:a8:b2:79:86:
         e6:2f:d7:2c:d9:7f:16:f5:ea:c7:6f:af:5b:15:32:67:07:bf:
         68:c5:f9:b7:87:3a:10:55:b8:2f:5f:0e:61:bd:e1:ae:c1:61:
         c1:c4:50:59:0f:58:ea:97:4b:00:47:44:2c:2d:d4:be:fd:ac:
         e9:c6:b4:ff:01:fe:e3:6e:ba:65:89:31:40:74:98:97:6c:27:
         e9:2a:4e:b4:86:8a:3b:0a:3a:0d:1a:ae:2f:1f:72:c0:13:00:
         ba:29:b8:13:85:28:68:1a:d9:35:1a:4c:31:ce:1d:53:cc:5d:
         d7:36:4f:98:d6:dc:5a:ac:af:b0:3a:04:6c:31:de:05:da:1d:
         87:d1:1d:ea:e8:39:8a:ae:99:b2:20:79:2d:c2:01:2b:d0:78:
         b3:69:89:32:8d:68:36:cf:09:e5:44:5d:ea:ab:93:bd:a3:4c:
         73:fb:ce:91:ff:c9:24:25:d3:b2:a9:78:c8:43:a2:00:ad:38:
         c2:6d:7d:c3:8f:59:a8:eb:99:a0:95:ea:52:fe:fa:06:7f:47:
         cc:ce:74:49:8c:6e:38:cd:b2:57:ec:67:30:e0:3c:fa:6c:97:
         0d:33:6b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org