Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
File:                     32372e3131322e36362e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier:          3nz/FmjCdOIPryhJq/SuZPBnQdmgDbmtKoREvwgz9Ak=
Subject key identifier:   DB:DB:DD:8E:27:9B:42:97:84:77:EF:1D:A0:34:4C:E6:9B:AD:EC:D6
Certificate issuer:       /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial:       37AF6CBC2D3671F80BE32A3AA2B9B11493BFE45C
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
Signing time:             Fri 03 Nov 2023 11:00:00 +0000
ROA not before:           Fri 03 Nov 2023 10:55:00 +0000
ROA not after:            Fri 01 Nov 2024 11:00:00 +0000
asID:                     46063
IP address blocks:        27.112.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
                          rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:af:6c:bc:2d:36:71:f8:0b:e3:2a:3a:a2:b9:b1:14:93:bf:e4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
        Validity
            Not Before: Nov  3 10:55:00 2023 GMT
            Not After : Nov  1 11:00:00 2024 GMT
        Subject: CN=DBDBDD8E279B42978477EF1DA0344CE69BADECD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:7f:a7:1e:fc:51:f1:8c:1b:6d:e9:53:d9:
                    0a:88:cf:6e:a8:59:27:eb:b4:3a:26:6f:b9:b5:87:
                    b1:7b:1f:a3:45:0c:ec:f2:c3:8d:8a:4d:a3:20:67:
                    a8:4d:92:eb:95:78:81:17:e0:46:58:90:7b:44:30:
                    78:54:2d:e3:98:c6:83:5c:b6:b3:d9:cf:cc:ee:0f:
                    f5:29:bf:f9:87:09:dd:6f:5f:86:cc:f6:e6:99:06:
                    ba:c5:14:87:32:7f:d7:60:ac:7c:1d:5a:ac:c7:8b:
                    6f:eb:37:5a:99:88:79:a0:02:8c:cc:4a:35:ad:86:
                    22:ef:37:5b:ae:c1:4a:f4:d3:c1:69:1d:20:ae:cc:
                    a9:76:6b:c5:cf:65:5d:a0:06:43:4b:75:dc:8c:01:
                    ba:87:4b:43:6d:5f:46:b4:a1:75:42:19:8d:fb:00:
                    9e:79:13:2e:57:09:5f:f5:c8:5c:59:b5:97:17:b8:
                    20:dc:6a:9d:c0:f0:d4:23:7b:3b:ca:e9:ae:d8:b0:
                    80:cb:55:d9:2e:19:20:81:05:8f:dc:4f:d2:80:8c:
                    4f:58:1e:26:a6:55:4a:6b:75:04:91:e9:bb:43:4a:
                    32:4c:9b:46:3b:b6:44:ec:5b:6a:bc:c4:95:1e:23:
                    5b:03:7d:71:10:fa:98:dc:c7:8e:54:4e:2a:a7:f1:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DB:DD:8E:27:9B:42:97:84:77:EF:1D:A0:34:4C:E6:9B:AD:EC:D6
            X509v3 Authority Key Identifier:
                keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:6e:d7:a1:b5:01:6c:49:50:a2:ca:cd:20:ed:ef:af:5f:
         f8:39:a9:f8:6e:0f:c9:98:d2:7e:12:db:db:a0:58:7d:84:47:
         8a:97:8f:18:98:d1:36:b8:f0:67:db:f4:fc:c9:0b:d5:51:40:
         4f:5a:de:25:70:85:69:1e:d3:08:f3:d0:dc:a3:ea:c2:ea:50:
         1d:82:52:5c:6c:d9:7e:44:84:7c:8f:48:6b:92:e0:09:e9:cd:
         2d:c7:e7:eb:fa:0d:cf:fe:ff:d1:01:9b:3e:32:50:f2:6d:d8:
         83:32:04:26:87:55:f9:70:81:b8:75:e1:08:25:37:92:83:89:
         22:82:e8:80:64:02:ab:86:a6:90:b3:7b:f4:9b:9e:32:a2:d2:
         0b:10:e7:ea:2e:77:33:14:55:0c:7e:3c:3e:98:d2:32:46:bf:
         c0:b9:07:7e:94:81:bc:c0:fa:24:24:2d:be:c0:e3:27:fb:3d:
         ee:29:f3:44:ce:aa:21:14:12:24:8e:7a:e8:93:38:1b:db:d5:
         5c:0d:c8:88:fa:c2:c2:a5:82:69:14:6b:0d:5a:20:54:dd:32:
         17:af:29:c5:ce:13:67:51:ff:b7:54:1f:c3:a5:fb:a1:92:65:
         20:ec:ca:58:4e:bf:33:fc:dd:c8:7f:fc:43:ef:30:a1:e5:ab:
         a4:27:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:27:24 2024 by rpki-client on console-ams.rpki-client.org