Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38342e302f32342d3234203d3e2039333431.roa
File:                     32372e3132342e38342e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          o2LY8pGoM7WL6qfnBa3TLoZbhRFSBHeoT10K1MRGzG0=
Subject key identifier:   F1:A4:0A:B0:A2:14:D1:65:D7:27:B5:D8:F4:1F:55:87:0D:5B:B1:32
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       4F622568587796E68D82DCD76C6636F29BF5C8FB
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38342e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 27 Jun 2025 14:00:01 +0000
ROA not before:           Fri 27 Jun 2025 13:55:01 +0000
ROA not after:            Fri 26 Jun 2026 14:00:01 +0000
asID:                     9341
IP address blocks:        27.124.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 00:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:62:25:68:58:77:96:e6:8d:82:dc:d7:6c:66:36:f2:9b:f5:c8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jun 27 13:55:01 2025 GMT
            Not After : Jun 26 14:00:01 2026 GMT
        Subject: CN=F1A40AB0A214D165D727B5D8F41F55870D5BB132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:cd:b3:97:fa:2d:3e:63:46:94:4c:65:60:
                    20:8d:52:cb:79:37:c8:58:8e:be:52:ef:fd:46:50:
                    e3:22:b1:d4:75:12:69:2d:f0:9f:0c:a2:05:58:c2:
                    9a:25:23:c0:56:9c:73:c6:fb:10:e4:78:2e:31:32:
                    bd:5d:80:53:30:9e:db:98:80:1b:38:dc:f3:aa:7c:
                    6f:c0:fa:30:2f:62:69:62:3c:59:68:04:ee:13:a5:
                    a2:86:db:c7:6c:a5:67:6e:fc:ac:2b:41:83:52:32:
                    b6:39:88:bd:ad:58:2d:a3:6a:94:36:ac:13:3c:8f:
                    af:1d:43:df:4a:05:75:f2:bb:02:04:08:10:03:27:
                    07:ec:e2:36:0d:25:d0:4e:41:a1:1c:3c:00:9c:6a:
                    70:1f:b7:ff:26:8a:bf:d8:af:de:1e:0d:05:a2:2b:
                    ed:05:be:a5:9c:3a:82:b2:0a:f3:80:27:52:e6:9c:
                    a0:78:2b:0a:a3:10:dc:4a:d8:b2:a2:4b:8e:f9:32:
                    41:77:51:0a:77:18:68:a5:43:4d:32:02:28:df:fa:
                    5f:2c:63:ea:8f:e8:e8:dc:f0:af:74:38:b8:74:30:
                    20:8b:f7:2b:fc:a2:12:21:3b:eb:f4:ff:b8:a0:90:
                    64:10:38:97:15:57:f7:4a:ed:51:ab:fd:73:f0:61:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A4:0A:B0:A2:14:D1:65:D7:27:B5:D8:F4:1F:55:87:0D:5B:B1:32
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38342e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:40:8d:29:6a:5d:11:e9:f6:b8:41:59:a1:b3:62:9e:8e:61:
         59:a2:eb:c1:f3:43:76:cb:d1:0b:35:01:64:e6:72:a5:30:c1:
         4e:9c:02:27:84:f8:5f:c4:1a:e9:a7:5d:d9:33:d8:93:02:05:
         61:e4:7d:86:56:5a:c1:92:27:0a:e9:fe:dd:22:a7:17:12:1a:
         05:ea:1d:9d:5e:ec:d3:5b:00:95:25:a7:ee:34:e7:41:e3:61:
         a3:2f:e4:f5:12:ad:45:b5:e1:58:05:82:94:55:8a:63:a3:6b:
         df:30:c6:d3:09:07:28:a1:75:5f:75:f4:4a:b5:d9:76:24:46:
         d0:50:f7:3d:db:a7:ec:dd:2b:eb:74:d9:a9:b1:78:ce:64:49:
         96:c0:da:67:4d:95:24:1a:de:33:16:02:90:4a:7d:6e:fa:19:
         c2:be:0f:cd:58:c2:b9:49:bf:ee:be:7a:df:15:a7:e1:fe:32:
         9b:08:c4:c7:cd:6e:90:7b:6e:19:d7:ab:e3:b2:f4:95:97:09:
         b6:ac:98:1b:df:19:13:fe:b8:f1:51:b2:94:a5:1c:8b:22:d8:
         54:c7:a0:07:60:78:75:11:ba:f6:00:a6:73:f8:a9:fd:b5:ac:
         93:0b:de:dc:d6:07:98:70:37:f6:f6:59:84:c9:f2:42:9b:cb:
         5e:5a:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:39:10 2025 by rpki-client