Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135312e302f32342d3234203d3e203338343936.roa
File:                     3232332e32372e3135312e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          7c2EgTGh/2nLnECG0mfnk/BprfOEU8FT2FL3crM3Hro=
Subject key identifier:   04:FE:AC:38:04:88:EA:1B:E5:BB:BB:7D:94:47:E6:71:90:DE:91:1D
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       75AB3F76013A4AD62571A3B4BCA98F82510CD00B
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135312e302f32342d3234203d3e203338343936.roa
Signing time:             Fri 24 May 2024 05:02:16 +0000
ROA not before:           Fri 24 May 2024 04:57:16 +0000
ROA not after:            Fri 23 May 2025 05:02:16 +0000
asID:                     38496
IP address blocks:        223.27.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ab:3f:76:01:3a:4a:d6:25:71:a3:b4:bc:a9:8f:82:51:0c:d0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: May 24 04:57:16 2024 GMT
            Not After : May 23 05:02:16 2025 GMT
        Subject: CN=04FEAC380488EA1BE5BBBB7D9447E67190DE911D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6c:0a:c6:9e:a1:35:d3:89:00:c1:1e:4c:27:
                    d8:02:13:05:63:ef:57:99:1b:4f:2d:68:a2:6c:7c:
                    8e:6f:cd:7c:fa:c9:62:8b:36:36:50:0b:50:04:c5:
                    59:23:a9:dd:76:76:30:b6:2a:c3:cb:90:cb:98:2e:
                    d2:51:38:6a:e6:21:a5:9f:9a:e4:1c:c4:f9:60:2e:
                    88:b8:f7:68:e6:3d:c6:e4:2a:17:bc:2a:bb:18:22:
                    60:76:e5:e1:13:ca:26:7f:8a:22:5f:40:c4:71:14:
                    c1:6c:cd:33:99:e3:fe:34:f1:3e:a4:e6:f4:3a:ef:
                    a5:ea:42:5c:29:c2:da:88:fb:4d:3c:2e:3f:59:68:
                    bf:90:bf:f5:c3:57:70:21:86:5b:65:15:0b:8e:c0:
                    cf:62:eb:3d:b6:98:19:2c:33:cc:23:52:b1:0d:c0:
                    0a:ba:45:f7:d5:69:c0:a0:e3:27:8a:37:9e:19:c1:
                    2f:1c:1e:5e:16:6c:f9:a8:7c:31:f6:2d:3e:97:10:
                    54:bb:cf:f8:ef:6a:c1:9d:04:5a:05:cc:0c:5a:c1:
                    e8:71:fd:da:06:37:ef:94:65:2b:4a:51:71:b0:fe:
                    b4:82:f1:b7:5b:f4:51:c1:a4:b6:ab:35:cc:ec:7c:
                    29:b6:a7:10:4d:3f:d6:ce:6e:e2:12:47:47:fe:18:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:AC:38:04:88:EA:1B:E5:BB:BB:7D:94:47:E6:71:90:DE:91:1D
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135312e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:45:68:f1:8f:ac:e3:54:10:b1:23:d4:95:bd:e7:d5:dd:67:
         8e:0b:1e:0d:7c:8d:b2:15:2e:cd:14:a4:7f:3b:5a:5a:71:a8:
         4d:9f:8b:93:54:52:2b:9d:df:dd:72:b7:b0:2a:39:75:7c:07:
         e8:37:3a:be:2c:0d:20:e3:01:9f:65:76:ab:6e:8e:2b:b7:7c:
         0b:18:1e:75:1d:1d:78:ee:94:b8:70:2e:4d:6b:d9:74:c0:29:
         b8:96:32:a7:8a:27:48:cd:2f:ed:e0:ed:6c:47:a7:e2:62:b0:
         2d:d6:06:3d:28:a8:0e:46:e4:40:85:27:d7:50:4a:7b:3d:9f:
         6e:05:62:fb:e5:6b:d2:04:07:c4:22:17:3e:a4:d7:07:9b:29:
         23:72:74:6b:17:12:46:85:41:83:cf:78:a5:a1:bd:db:d1:0d:
         2f:32:5a:83:3c:b2:d6:c5:16:42:10:96:38:ab:f2:2d:35:87:
         fa:47:96:f3:1f:ca:e8:78:e2:eb:a7:29:55:49:78:a5:94:45:
         10:12:20:af:fa:a0:c7:65:65:ff:46:58:f6:cd:ba:bf:6c:5c:
         c9:ce:fb:f9:a6:ef:49:00:ec:9d:62:43:aa:07:2a:07:81:06:
         8f:3a:89:c0:b1:c9:fe:0a:d2:a4:42:f2:95:a0:f6:4a:19:a1:
         2b:4a:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org