Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa
File:                     3230322e39312e32372e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier:          sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=
Subject key identifier:   55:6A:62:AF:C2:A9:D8:26:F4:17:95:A2:90:37:6B:13:68:6E:F8:05
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       01244838C7B4A8E2980FA8027A5EDED32D5980E2
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa
Signing time:             Sun 18 May 2025 04:00:00 +0000
ROA not before:           Sun 18 May 2025 03:55:00 +0000
ROA not after:            Sun 17 May 2026 04:00:00 +0000
asID:                     24528
IP address blocks:        202.91.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 00:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:24:48:38:c7:b4:a8:e2:98:0f:a8:02:7a:5e:de:d3:2d:59:80:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: May 18 03:55:00 2025 GMT
            Not After : May 17 04:00:00 2026 GMT
        Subject: CN=556A62AFC2A9D826F41795A290376B13686EF805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:44:ec:a8:2e:d5:20:51:66:28:b4:59:0d:
                    f4:eb:d3:81:55:b9:bd:8a:06:d4:37:46:7a:f1:28:
                    c7:29:6e:a0:1f:72:3f:7c:c2:d6:c7:bf:b1:0b:7e:
                    a3:89:df:ec:c8:48:5e:7f:6b:f2:6e:ca:79:30:3d:
                    84:d5:a4:28:43:85:8a:3d:42:08:7f:86:4c:4b:da:
                    6a:d0:2a:3f:d8:63:8d:c7:5e:e4:cf:fe:1e:89:ce:
                    fd:e0:04:56:76:10:8b:1c:dc:c9:2e:5c:22:7f:a1:
                    dd:bc:0a:f8:49:78:a8:11:bb:e1:56:92:f3:a4:8f:
                    3c:3d:90:07:82:d2:42:c7:d7:53:cd:0c:71:06:4e:
                    68:86:ff:1b:2a:23:f4:e2:8e:73:4e:d0:23:bd:c3:
                    e4:d5:20:b9:cf:e9:4c:00:4f:f5:68:f0:4c:bc:68:
                    77:53:3f:47:09:be:68:0b:2d:2f:d1:65:f0:57:95:
                    46:05:6b:36:f4:b5:65:ff:75:e9:81:df:80:bc:fb:
                    a2:8c:85:ba:8b:00:56:30:69:6a:78:90:24:2f:a6:
                    04:12:19:5d:26:97:5b:f5:02:c7:1f:21:17:63:a4:
                    40:e3:a2:2b:5e:7e:5c:2e:7b:a3:ca:a1:7d:e0:63:
                    48:4c:2b:c4:0d:ba:77:24:2e:21:07:40:08:48:2b:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6A:62:AF:C2:A9:D8:26:F4:17:95:A2:90:37:6B:13:68:6E:F8:05
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:b2:0f:b3:74:16:f8:01:c7:05:a1:b9:40:38:ff:aa:f3:
         ba:52:ea:7a:e0:43:e1:99:8a:7d:50:11:3b:d4:f8:9b:ed:e4:
         47:c7:51:85:a3:4b:4d:c6:6a:6e:d5:e0:25:a0:2d:6a:4e:03:
         6a:9a:59:c1:7e:3a:c3:d7:22:b3:b2:c1:57:9b:3b:fe:8d:17:
         72:4b:7b:9b:06:09:25:86:3b:4d:4c:48:e9:76:ac:38:eb:2b:
         66:f7:03:28:fb:de:16:93:a6:73:6e:b4:a3:48:1a:63:99:50:
         af:63:9b:39:1a:ba:a6:37:e6:57:88:b0:6a:35:fd:db:0e:e4:
         ef:57:02:47:26:60:63:4e:88:e8:91:d8:9e:16:2f:c8:55:2b:
         d7:08:ee:1f:c3:7c:d7:17:38:93:7c:fe:d4:80:47:00:88:1b:
         0c:73:5e:41:be:6b:06:41:c6:6a:7b:a9:3a:7c:9d:81:94:2c:
         c9:10:3b:8a:d0:5e:2e:6c:0b:2f:52:5a:c6:e9:62:aa:be:cf:
         17:45:0d:e3:7a:52:bc:8b:22:1a:55:c4:89:d0:f4:a3:80:46:
         b5:3f:5b:ac:1a:b7:0b:c0:c8:74:84:64:f1:16:0f:21:48:c7:
         c4:16:c7:7e:be:3a:8a:7d:0a:68:a0:4c:4c:7d:04:b2:8d:e3:
         17:42:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:44:54 2025 by rpki-client