Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
File:                     32372e3132342e38352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          aoDR6t06bkLGVC/rQfIwcjKcvkAAaVZMuXphMPh7uTU=
Subject key identifier:   FB:1B:36:12:A8:20:46:D6:36:FE:35:A9:2B:29:01:52:6B:A6:D2:6A
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       710AC015D0787E7A3CD55D62C8E5BB0A5BD453F7
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 13 Aug 2025 13:00:54 +0000
ROA not before:           Wed 13 Aug 2025 12:55:54 +0000
ROA not after:            Wed 12 Aug 2026 13:00:54 +0000
asID:                     9341
IP address blocks:        27.124.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 09:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0a:c0:15:d0:78:7e:7a:3c:d5:5d:62:c8:e5:bb:0a:5b:d4:53:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Aug 13 12:55:54 2025 GMT
            Not After : Aug 12 13:00:54 2026 GMT
        Subject: CN=FB1B3612A82046D636FE35A92B2901526BA6D26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:63:4e:56:74:16:3d:63:94:56:18:91:f8:
                    e9:19:2e:6b:a2:1f:a7:f3:a8:f4:ad:55:34:e8:01:
                    75:f5:28:cd:84:76:aa:70:b0:e0:c0:b1:00:64:68:
                    46:27:41:7f:36:88:fb:86:e9:9d:ce:2a:f1:93:f5:
                    48:2b:5d:eb:97:6e:b4:4d:fc:ef:7f:8f:b9:07:c2:
                    b6:66:c4:02:55:7f:67:9c:a4:f7:f1:f4:02:b6:4f:
                    e5:0a:cd:dc:e9:53:f4:a4:77:28:02:c1:42:2a:e1:
                    83:f2:db:89:f9:a0:3f:e2:7f:21:32:77:5d:4c:50:
                    7c:ea:7f:24:d5:7f:ad:3e:28:c5:20:41:0a:02:17:
                    ce:c3:31:1f:19:e0:21:e5:39:95:c8:b1:3c:f8:8b:
                    5b:43:7c:e9:53:14:2b:d5:9f:e5:17:e6:a9:96:40:
                    b9:31:e9:94:18:10:3e:47:2d:10:a5:ea:27:a9:f9:
                    00:1a:9b:b9:77:64:81:4e:e0:69:a2:3e:7f:db:a8:
                    ca:cb:22:20:3d:c6:87:41:b0:29:bc:d3:87:25:5f:
                    d0:41:9b:8e:dd:f4:bd:8e:02:1e:a2:e4:c2:f9:7a:
                    01:56:6e:95:88:28:78:45:7a:ba:84:62:bc:2e:0d:
                    3c:7e:ff:14:a2:8d:d5:2b:61:66:c3:f1:c0:0d:52:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1B:36:12:A8:20:46:D6:36:FE:35:A9:2B:29:01:52:6B:A6:D2:6A
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38352e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:ad:3c:cb:6c:03:2e:48:0c:af:b0:63:5f:be:6a:d6:1f:
         eb:93:a8:10:86:1a:15:f5:f7:73:b9:e3:7c:86:1b:59:82:5d:
         eb:f6:1c:e0:0d:2d:3b:32:19:af:8f:01:ee:f6:29:75:2e:37:
         f2:89:5e:41:51:11:a4:60:ec:3b:18:0e:21:50:a5:09:d5:c5:
         37:2a:76:16:0f:60:03:70:6b:5b:2e:56:c9:d1:77:96:19:98:
         0c:00:fd:cb:f9:29:09:84:d5:2f:e3:af:c8:e3:c4:dd:0f:6c:
         84:d4:68:66:f3:5f:75:30:1a:3f:e1:b3:72:3d:c7:56:f7:8b:
         0f:3b:d8:76:f4:f6:b9:ea:e2:74:fa:3b:4b:b4:91:0b:89:24:
         8e:e5:df:b2:db:3e:a3:fc:37:a1:db:d9:8c:a0:f5:d5:8a:f8:
         2f:01:4d:78:33:37:41:c4:59:13:56:a1:9b:28:2a:af:ba:cc:
         e0:da:6a:55:59:7a:96:83:5a:d7:30:fe:51:7c:9a:9e:5a:41:
         0b:08:ba:70:13:27:a0:64:3c:70:a6:b4:ad:b5:d8:c1:f7:83:
         82:99:93:a4:dc:6e:66:7b:6e:c7:ed:5e:91:6a:e1:c9:59:b0:
         d0:81:f1:5f:4f:e9:92:23:70:12:fb:fb:a0:1f:ed:e8:4d:84:
         68:0d:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:39 2025 by rpki-client