Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38302e302f32332d3234203d3e2039333431.roa
File:                     32372e3132342e38302e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          3unowghYgB18VPKOQunElr8pDRhEnqwg28N1hgPdYDM=
Subject key identifier:   2E:19:A3:A5:64:FF:6B:1A:10:FC:53:BA:1B:07:58:A9:58:91:FA:D3
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       191DC2ACBA1079FBBEC3162857D5FEEFD8CB12
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38302e302f32332d3234203d3e2039333431.roa
Signing time:             Wed 13 Aug 2025 13:00:54 +0000
ROA not before:           Wed 13 Aug 2025 12:55:54 +0000
ROA not after:            Wed 12 Aug 2026 13:00:54 +0000
asID:                     9341
IP address blocks:        27.124.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 09:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1d:c2:ac:ba:10:79:fb:be:c3:16:28:57:d5:fe:ef:d8:cb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Aug 13 12:55:54 2025 GMT
            Not After : Aug 12 13:00:54 2026 GMT
        Subject: CN=2E19A3A564FF6B1A10FC53BA1B0758A95891FAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:ae:19:3b:64:dc:ea:73:ad:60:65:8f:9f:
                    28:db:73:f9:16:93:16:68:03:3e:5d:c5:49:2a:69:
                    52:4d:a3:9b:61:01:07:4b:3c:aa:56:3a:79:19:6b:
                    9b:ce:4a:3c:5b:8c:5c:f8:0e:82:ea:88:6e:ea:f1:
                    b1:8c:ff:07:1c:df:b5:56:a3:76:3b:5a:33:61:c6:
                    9f:cc:0b:61:6d:2d:13:64:e6:7e:4a:11:85:83:4f:
                    19:34:40:d0:be:0b:74:fa:c5:2a:90:04:ca:0d:55:
                    ca:a6:e5:f1:37:5b:19:57:7c:da:01:df:05:66:ff:
                    1c:2d:6b:44:e1:9c:44:bb:86:03:35:a2:9d:6e:10:
                    59:c1:d3:d6:56:4b:46:85:be:f3:c8:a3:3a:f8:68:
                    59:d0:7f:8b:e7:7d:3c:64:1d:2b:80:b7:bb:36:d0:
                    4d:fb:72:1b:4c:dd:14:29:38:48:2c:1f:96:b9:b9:
                    00:86:8a:bb:9f:9c:05:44:e7:5a:99:39:d7:e5:04:
                    06:f2:d7:2a:35:14:2e:c8:25:54:aa:47:c3:56:a7:
                    6a:dd:e4:0f:11:38:83:19:a7:70:81:ae:e8:c8:a2:
                    e4:40:f1:ac:18:77:8e:1a:23:e7:e3:f0:59:46:17:
                    51:01:c3:af:7d:d7:68:eb:e5:3a:0a:6a:ac:88:b9:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:19:A3:A5:64:FF:6B:1A:10:FC:53:BA:1B:07:58:A9:58:91:FA:D3
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38302e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:27:0b:7f:f6:31:63:a6:ed:b7:46:12:3a:59:a9:84:b2:14:
         f0:db:00:0e:6e:60:eb:a4:3e:19:2e:9d:85:46:a0:7b:e1:c6:
         c3:7e:55:5e:6a:cf:f9:6f:16:77:48:f6:fb:77:a0:c4:f3:de:
         be:cb:2e:e0:21:ef:14:2d:76:75:f5:bf:e9:25:1e:02:49:78:
         6a:86:c0:82:60:78:bb:c5:92:cf:f4:fe:1a:82:66:0c:a2:59:
         3e:5e:ae:43:06:ad:7b:33:9a:d9:67:c0:0b:c6:66:c1:6a:4d:
         8e:04:f2:e1:2d:33:87:20:24:89:ea:9e:2b:72:30:69:9a:22:
         2f:fe:a0:11:2e:26:e0:22:5e:6e:c7:0d:35:56:08:b3:20:f5:
         fd:29:36:77:70:13:63:8f:8f:f8:8c:e4:84:b8:64:54:90:db:
         90:fd:36:ac:ce:9b:30:ba:4d:d3:04:5f:46:9e:bb:94:f7:d0:
         6b:20:4e:2c:72:a7:a6:5e:49:6b:75:66:bd:a1:06:5b:fd:19:
         28:e0:40:d8:f0:d9:69:6f:ff:05:a1:54:6d:7e:70:fe:00:d8:
         50:06:3f:e7:e2:5f:4d:43:f7:81:17:23:fa:b6:06:6e:9d:7e:
         4f:58:4a:8a:2f:64:d7:fb:89:37:65:94:e9:11:94:49:b8:a2:
         8b:f4:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:05 2025 by rpki-client