Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134392e302f32342d3234203d3e203338343936.roa
File:                     3232332e32372e3134392e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          DAsnCFLEKbae1KpRs5q9ocmAqBqGRKDKFOLRbADxBFU=
Subject key identifier:   7E:B3:2B:CA:64:05:CF:C7:81:FA:9E:23:C7:47:34:1F:82:74:34:3A
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       3D188779239E0A379132D7D60F8E181DC9A79925
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134392e302f32342d3234203d3e203338343936.roa
Signing time:             Fri 24 May 2024 05:02:16 +0000
ROA not before:           Fri 24 May 2024 04:57:16 +0000
ROA not after:            Fri 23 May 2025 05:02:16 +0000
asID:                     38496
IP address blocks:        223.27.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:18:87:79:23:9e:0a:37:91:32:d7:d6:0f:8e:18:1d:c9:a7:99:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: May 24 04:57:16 2024 GMT
            Not After : May 23 05:02:16 2025 GMT
        Subject: CN=7EB32BCA6405CFC781FA9E23C747341F8274343A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:d9:97:84:9c:5b:73:9b:f4:4e:6f:d8:79:
                    55:0a:b3:33:9d:37:18:b6:a8:66:f0:6b:dd:66:65:
                    b0:51:2b:8b:a8:73:55:1c:77:d7:9d:22:bf:4b:f8:
                    83:1a:f5:34:0b:e5:34:de:76:57:3b:5d:14:87:31:
                    62:7b:8e:53:8e:3a:a8:7f:c3:0e:bb:62:a2:68:f4:
                    c5:f8:f7:8a:d9:98:f6:84:25:64:36:27:b8:43:0f:
                    78:cf:1e:5f:10:a1:30:37:a3:2e:37:88:13:22:3f:
                    94:3a:a8:04:61:3a:da:93:d2:ce:bb:13:2a:22:56:
                    6a:53:58:6e:69:83:36:b0:43:b7:6c:56:67:58:7a:
                    d3:b1:95:06:a4:ce:3d:52:58:4e:3f:d1:01:c5:44:
                    4d:54:cc:fd:8b:fa:84:fe:ce:9a:47:c1:b9:9b:b6:
                    c2:55:44:6c:91:43:24:26:78:73:f9:14:aa:c3:29:
                    6d:b6:a4:59:9e:8d:6b:0a:b7:72:e7:18:2b:50:58:
                    1f:4e:ea:2e:92:3f:d1:5a:11:9f:1e:d0:60:09:59:
                    77:b9:44:ed:49:c5:8e:d9:f8:d4:06:7b:06:ca:2b:
                    bd:b2:b5:b9:40:01:c6:15:f1:f2:55:52:9c:16:19:
                    53:1d:4c:67:ba:73:3d:54:f2:92:56:fb:76:fe:4a:
                    7b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B3:2B:CA:64:05:CF:C7:81:FA:9E:23:C7:47:34:1F:82:74:34:3A
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134392e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:aa:2e:af:75:8e:b4:ed:b9:32:37:a4:44:63:9e:53:44:2e:
         58:ea:12:31:cb:a3:72:10:06:6b:40:92:e5:fb:42:cc:b1:9d:
         d0:72:e0:a9:cf:73:18:79:3c:01:80:f0:22:42:cd:89:24:af:
         31:ab:f4:71:f2:9b:74:b5:fe:2c:f9:82:75:7f:e3:96:e0:b4:
         dd:49:5e:22:ce:af:5d:bb:d4:a4:15:93:c7:86:51:d2:46:f2:
         8e:65:72:30:14:78:88:ce:6d:d5:da:d5:b7:54:3a:58:69:17:
         4c:17:e0:24:ca:15:1e:a4:ed:aa:ca:a2:e7:b7:cb:3b:aa:ec:
         a9:38:dc:3b:22:e8:8b:57:81:71:89:91:99:72:58:73:4e:b7:
         00:8b:1e:2f:39:fb:b8:f3:6c:a3:5f:20:ac:f5:d7:86:da:2b:
         56:5c:96:a9:c7:1b:4c:4d:47:ee:31:27:a6:1e:cd:53:7b:a3:
         5c:b4:37:66:92:3f:56:5c:b5:a7:99:81:6a:2e:99:29:31:2a:
         81:97:46:80:74:9a:c4:fb:e5:2f:bf:2c:d1:b9:bb:6a:d6:be:
         3f:f8:1f:da:f6:0c:66:96:21:f6:18:78:59:9e:c9:d8:a0:10:
         f5:15:75:d1:a0:5b:a8:a9:87:55:0b:c4:02:d8:da:22:27:07:
         18:95:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org