Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
File:                     32372e3131322e36372e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier:          urQF+d1uZLCb/Xxspk6boWaqVo9lHrklUsdPM9s+cao=
Subject key identifier:   5E:1B:27:2F:80:A0:28:50:D4:99:67:4E:28:D1:93:D1:E0:81:EB:F0
Certificate issuer:       /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial:       2136CED8498C7C74B8F6BF606E1DAF99A4B8E3DE
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
Signing time:             Fri 04 Oct 2024 11:00:01 +0000
ROA not before:           Fri 04 Oct 2024 10:55:01 +0000
ROA not after:            Fri 03 Oct 2025 11:00:01 +0000
asID:                     46063
IP address blocks:        27.112.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
                          rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:36:ce:d8:49:8c:7c:74:b8:f6:bf:60:6e:1d:af:99:a4:b8:e3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
        Validity
            Not Before: Oct  4 10:55:01 2024 GMT
            Not After : Oct  3 11:00:01 2025 GMT
        Subject: CN=5E1B272F80A02850D499674E28D193D1E081EBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:ef:c7:ba:87:27:42:fc:a5:fa:3e:b0:57:
                    ae:eb:ef:06:00:52:77:ac:fe:56:86:26:eb:f4:3b:
                    f8:61:8e:46:b2:da:d3:a7:47:49:17:20:fe:6f:00:
                    84:61:f7:8c:a8:3c:02:bb:9d:b6:c6:3b:8c:d5:3d:
                    2e:0e:74:dc:ec:bf:d0:f9:ed:1c:2b:7d:b7:ee:85:
                    b2:55:1a:f0:05:2c:29:b1:f1:e4:af:f7:41:30:6e:
                    6d:97:bb:80:10:42:d1:1a:90:c6:e9:c3:f3:a8:ef:
                    42:ff:bd:7c:83:37:22:8d:27:5b:e5:6c:b2:0e:64:
                    05:40:72:a6:e0:d1:f4:1f:f9:64:c9:d6:e0:6f:54:
                    af:1b:2e:48:8e:72:ad:45:d7:4f:e1:db:21:94:5e:
                    4a:56:09:76:36:c1:e2:32:56:f6:0d:92:f8:fc:e1:
                    77:59:99:b1:62:7c:fb:4d:7c:81:f6:71:04:58:bc:
                    a3:6c:99:b5:ac:43:55:1f:68:c2:58:e8:c6:7b:1d:
                    ae:0e:13:e4:74:dd:39:2d:48:06:be:f7:93:30:2d:
                    db:84:15:23:41:e0:fb:5d:b6:ac:bf:a9:5c:0d:02:
                    18:8b:58:f0:e1:a6:23:27:67:69:ff:4a:8e:78:32:
                    e6:01:47:0c:de:2a:0b:6c:9d:f9:f8:31:92:f4:ac:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1B:27:2F:80:A0:28:50:D4:99:67:4E:28:D1:93:D1:E0:81:EB:F0
            X509v3 Authority Key Identifier:
                keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:5e:5e:46:1e:79:ee:14:f1:79:5c:94:c2:8d:be:3d:72:ab:
         92:0e:42:3d:0f:51:78:2c:b6:e5:ae:ca:95:09:5b:7e:ca:55:
         fe:66:de:b8:d7:ec:e6:39:f4:f9:76:98:0b:73:b7:ef:ae:90:
         6e:ff:b0:7d:6f:b7:92:1c:cb:ca:17:8d:05:6c:2b:b6:82:23:
         dd:61:ec:10:90:2a:ad:35:0f:74:12:b2:98:b1:57:c7:6c:0b:
         79:42:77:d0:f4:e6:4d:9d:7c:1b:db:4d:84:af:ef:ce:7b:f0:
         75:73:5a:f2:78:23:5e:a3:df:5d:ed:0d:ef:1a:2a:c7:cb:d9:
         7e:12:2d:83:01:6d:58:9c:7f:de:b0:b9:a5:81:9b:9c:6e:95:
         26:49:65:68:da:a6:6e:0e:ed:8a:91:8d:3b:88:c4:1f:0e:ae:
         28:aa:93:7c:12:b5:59:28:09:b0:bc:0e:f6:04:36:a8:b6:20:
         b1:92:28:e2:3b:ba:e4:d3:84:c5:88:26:ca:80:d0:f3:00:24:
         8d:9b:fd:22:cd:76:1f:b1:fb:88:c2:8d:a2:cb:ca:c9:8d:b4:
         67:25:a6:74:7e:6c:7d:9d:b9:50:82:57:c9:b0:ce:f4:25:ab:
         73:98:18:64:e5:5a:20:b9:2b:24:c5:ee:e4:6e:f5:ad:6d:dd:
         ef:d4:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org