Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa
File:                     32372e302e3139382e302f32342d3234203d3e20313338313138.roa (raw, json)
Hash identifier:          MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=
Subject key identifier:   00:41:5F:19:29:5F:49:88:B5:9B:99:AB:EF:61:6C:EE:98:5B:04:22
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       4E4C6EB7F3AE7257EAA433108EE51093567D99D6
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa
Signing time:             Tue 06 May 2025 15:13:54 +0000
ROA not before:           Tue 06 May 2025 15:08:54 +0000
ROA not after:            Tue 05 May 2026 15:13:54 +0000
asID:                     138118
IP address blocks:        27.0.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
                          rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 01:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4c:6e:b7:f3:ae:72:57:ea:a4:33:10:8e:e5:10:93:56:7d:99:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: May  6 15:08:54 2025 GMT
            Not After : May  5 15:13:54 2026 GMT
        Subject: CN=00415F19295F4988B59B99ABEF616CEE985B0422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:46:5c:a3:74:be:02:78:33:73:32:b2:94:
                    ef:ae:04:16:2f:3f:e9:34:57:8f:b4:57:af:c3:2d:
                    4b:25:cc:34:18:1d:f7:74:af:a7:70:0b:c3:b0:1f:
                    05:61:98:61:59:02:a0:7e:8c:32:c6:23:4e:b5:a5:
                    db:15:c8:9a:43:64:68:e9:56:a8:71:38:42:82:45:
                    1f:9e:58:e4:53:49:ba:77:47:0c:e5:37:72:a2:e6:
                    53:63:e6:e6:26:35:d3:40:36:f4:f0:9a:0f:ba:71:
                    b6:60:80:8b:48:1b:35:68:ea:94:86:63:be:88:03:
                    cb:a7:f7:81:30:5b:1d:38:ae:15:13:17:11:9b:16:
                    66:28:2a:60:21:da:9b:52:89:e0:a6:39:26:ba:55:
                    8b:e2:7e:53:0d:cc:0e:9e:56:65:98:74:67:6c:a5:
                    5b:13:01:85:95:3d:3a:ae:f8:3a:98:eb:d6:26:dd:
                    b6:c8:d2:84:3c:81:95:36:0d:b9:ff:f0:53:8e:82:
                    7d:cb:4a:75:47:cd:aa:da:2d:32:2c:9d:f3:27:85:
                    8f:2c:b2:3b:a6:ba:04:f4:11:23:a3:2d:80:c2:5a:
                    58:6c:77:59:35:ac:b1:6a:30:84:a0:6b:96:2b:99:
                    4f:60:09:2f:9c:17:a6:c3:af:8e:b6:5e:fc:49:e2:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:41:5F:19:29:5F:49:88:B5:9B:99:AB:EF:61:6C:EE:98:5B:04:22
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:ce:a2:bd:a8:e3:74:5f:89:a1:7d:91:a3:0d:e0:ae:3c:27:
         22:41:5b:c2:eb:0c:bd:0e:a2:70:a4:34:b5:05:b9:4d:cf:ff:
         eb:4f:fa:af:d4:5c:5b:9b:b4:db:10:dc:46:0e:87:b7:f1:b0:
         6a:bd:a8:7c:ca:8f:38:46:72:74:f3:aa:1f:a0:7d:b6:19:36:
         af:62:91:7e:c7:10:6f:80:eb:e9:c6:26:bf:0f:6d:9c:82:4b:
         ab:76:af:a4:26:f9:77:30:4b:32:c9:79:5f:e4:49:64:45:7d:
         4b:7a:42:09:79:e1:c1:b8:bb:5c:86:ba:bf:50:36:df:33:a9:
         21:c5:70:4a:ec:00:7b:a1:d3:da:03:c2:e5:b8:39:38:2d:a9:
         e5:f1:91:bf:bc:55:53:1e:70:c9:f3:8f:60:ab:89:64:54:c4:
         a1:9f:15:45:13:fe:34:fc:9f:fb:46:c4:e1:87:18:31:52:a5:
         cb:c8:72:7e:7c:bf:5a:e7:2a:ab:b4:51:25:b1:f5:85:10:cb:
         ef:82:de:a7:d1:85:a6:6c:2f:5b:80:0a:06:58:f9:c9:a8:3d:
         11:12:5c:13:97:3c:67:74:ce:49:8f:50:a2:f4:fd:48:3f:fc:
         f6:0c:1d:ca:e1:88:eb:66:ba:88:4c:a7:1f:f8:6c:5c:be:42:
         0b:32:05:cf
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTkxut/OuclfqpDMQjuUQk1Z9mdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5
N0U0OTgyRDAeFw0yNTA1MDYxNTA4NTRaFw0yNjA1MDUxNTEzNTRaMDMxMTAvBgNV
BAMTKDAwNDE1RjE5Mjk1RjQ5ODhCNTlCOTlBQkVGNjE2Q0VFOTg1QjA0MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpUZco3S+AngzczKylO+uBBYv
P+k0V4+0V6/DLUslzDQYHfd0r6dwC8OwHwVhmGFZAqB+jDLGI061pdsVyJpDZGjp
VqhxOEKCRR+eWORTSbp3RwzlN3Ki5lNj5uYmNdNANvTwmg+6cbZggItIGzVo6pSG
Y76IA8un94EwWx04rhUTFxGbFmYoKmAh2ptSieCmOSa6VYviflMNzA6eVmWYdGds
pVsTAYWVPTqu+DqY69Ym3bbI0oQ8gZU2Dbn/8FOOgn3LSnVHzaraLTIsnfMnhY8s
sjumugT0ESOjLYDCWlhsd1k1rLFqMISga5YrmU9gCS+cF6bDr462XvxJ4mY5AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUAEFfGSlfSYi1m5mr72Fs7phbBCIwHwYDVR0j
BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD
MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0
OTgyRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5M2ViOGY2LWJiNmMtNGVhNy04
NmRmLWIyNDNjNTE2NGQyMi8wLzMyMzcyZTMwMmUzMTM5MzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzgzMTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbAMYwDQYJKoZIhvcN
AQELBQADggEBANDOor2o43RfiaF9kaMN4K48JyJBW8LrDL0OonCkNLUFuU3P/+tP
+q/UXFubtNsQ3EYOh7fxsGq9qHzKjzhGcnTzqh+gfbYZNq9ikX7HEG+A6+nGJr8P
bZyCS6t2r6Qm+XcwSzLJeV/kSWRFfUt6Qgl54cG4u1yGur9QNt8zqSHFcErsAHuh
09oDwuW4OTgtqeXxkb+8VVMecMnzj2CriWRUxKGfFUUT/jT8n/tGxOGHGDFSpcvI
cn58v1rnKqu0USWx9YUQy++C3qfRhaZsL1uACgZY+cmoPRESXBOXPGd0zkmPUKL0
/Ug//PYMHcrhiOtmuohMpx/4bFy+QgsyBc8=
-----END CERTIFICATE-----
Generated at Thu May 8 09:14:05 2025 by rpki-client