Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa
File:                     32372e3131322e37312e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier:          yO9dnKFN9zlpHOZzkZ8VS+2FhIP3vvVtlP91AUvmN9o=
Subject key identifier:   C7:90:79:C3:8C:56:21:53:D0:6D:B4:37:AD:32:E0:C7:CA:5C:40:FD
Certificate issuer:       /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial:       6DCF4A490A6A7191D8A1643FF5ACF0BAB2438EDB
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa
Signing time:             Fri 04 Oct 2024 12:02:25 +0000
ROA not before:           Fri 04 Oct 2024 11:57:25 +0000
ROA not after:            Fri 03 Oct 2025 12:02:25 +0000
asID:                     46063
IP address blocks:        27.112.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
                          rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cf:4a:49:0a:6a:71:91:d8:a1:64:3f:f5:ac:f0:ba:b2:43:8e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
        Validity
            Not Before: Oct  4 11:57:25 2024 GMT
            Not After : Oct  3 12:02:25 2025 GMT
        Subject: CN=C79079C38C562153D06DB437AD32E0C7CA5C40FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:66:a9:48:9a:81:13:a9:af:f9:b8:fa:2f:
                    7f:85:4d:bb:0d:92:5e:47:39:5b:9b:62:c9:84:79:
                    6c:76:dc:46:45:b6:0a:cf:8f:59:38:07:5b:e4:47:
                    cf:72:0e:35:f3:d9:0a:1b:62:4d:a8:90:02:da:a5:
                    6f:44:08:8c:ff:8a:b0:96:ef:aa:2f:2f:b4:ff:fe:
                    87:2f:bf:08:06:cf:c1:87:3c:51:f1:da:91:91:2e:
                    dd:25:a7:9d:fd:d2:1e:92:f3:a8:38:4b:97:4b:6e:
                    f3:95:d0:40:70:3c:4b:2f:74:63:4f:84:f6:97:75:
                    48:8a:4b:24:46:11:57:40:e3:ff:7d:fd:f9:63:30:
                    ad:cc:c2:4d:4d:c9:c6:64:f8:81:03:3b:b4:2d:46:
                    1e:80:28:c2:d1:80:0a:8f:e5:6c:18:9b:24:ab:b5:
                    dc:34:1f:c1:95:a8:13:8a:9a:0d:f4:b5:c6:b3:ba:
                    69:bd:83:c8:80:3f:78:03:7b:28:45:ce:06:0c:2c:
                    89:71:6b:2a:94:c7:6a:08:a3:49:f7:8a:4b:56:08:
                    0e:63:39:b6:3d:50:12:17:43:84:e0:d4:f1:97:6a:
                    92:c0:18:c3:7c:7b:72:c3:9a:9d:2f:e8:6c:7e:55:
                    26:71:f5:c1:6b:16:97:be:63:f8:67:a5:f0:0a:df:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:90:79:C3:8C:56:21:53:D0:6D:B4:37:AD:32:E0:C7:CA:5C:40:FD
            X509v3 Authority Key Identifier:
                keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:4e:2e:f8:a0:a9:4d:13:51:5b:c5:7f:89:ea:c8:6e:29:
         3b:e6:91:8e:ab:b1:05:1f:24:5c:1c:2c:53:49:2a:96:86:c6:
         91:81:18:62:ab:08:3f:5f:ed:bb:e0:98:8f:6a:0c:34:2f:09:
         7c:7a:41:56:f6:64:5b:c5:82:2b:47:ca:c1:6f:9a:5c:54:1a:
         7d:3b:4c:6a:4a:38:d8:96:55:a6:dc:51:b0:38:b1:4f:21:1a:
         55:02:59:74:43:1d:31:8c:9a:57:58:50:9c:16:03:24:22:17:
         a4:6b:55:08:43:c8:6c:19:e3:f2:e3:86:00:cc:a0:85:79:de:
         11:52:91:f6:5e:2f:b7:a2:da:39:d0:4e:26:8b:89:f4:e2:9f:
         9b:df:07:17:56:ce:1c:70:03:91:e0:b1:31:99:f1:11:e2:07:
         34:fb:db:a2:6f:97:b9:1b:87:7e:47:81:b3:37:37:d0:88:1d:
         ab:3f:dc:07:4d:8e:4b:37:37:79:05:ad:29:6e:c2:f4:67:42:
         83:6e:5f:3c:06:17:c5:5e:50:33:e0:e6:bc:01:ac:40:3c:ea:
         43:b6:46:fd:7d:6b:21:df:5a:f2:c3:b7:1a:cc:3c:36:ab:ea:
         6e:ee:f5:1f:a8:fb:52:16:57:10:45:f6:54:ea:cb:5a:1d:f5:
         de:db:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org