Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38392e302f32342d3234203d3e2039333431.roa
File:                     32372e3132342e38392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          TA9RsApe0MfOrWxe76y5D5VP6G6IzJ/wUflZCREIlHQ=
Subject key identifier:   1B:E1:1E:18:47:EB:0E:E8:C9:09:E0:48:F2:F4:55:21:B1:1F:A5:80
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       4ECD7DC4E6BD4A761B50B8CE02AF7399E5230EF8
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38392e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 13 Aug 2025 12:00:01 +0000
ROA not before:           Wed 13 Aug 2025 11:55:01 +0000
ROA not after:            Wed 12 Aug 2026 12:00:01 +0000
asID:                     9341
IP address blocks:        27.124.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 09:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cd:7d:c4:e6:bd:4a:76:1b:50:b8:ce:02:af:73:99:e5:23:0e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Aug 13 11:55:01 2025 GMT
            Not After : Aug 12 12:00:01 2026 GMT
        Subject: CN=1BE11E1847EB0EE8C909E048F2F45521B11FA580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:c3:2b:48:92:ca:3b:64:a0:85:50:03:9f:
                    94:2e:1f:29:12:e0:93:a1:70:65:90:49:82:f4:18:
                    da:b2:69:4a:d8:34:6c:62:bc:62:99:96:98:30:85:
                    e4:08:8d:ff:52:cf:02:c7:be:8c:a7:e0:76:f2:df:
                    46:ba:d8:33:da:0e:2e:7b:2f:27:65:4d:6e:fd:ff:
                    c9:5f:ef:47:78:9c:db:8c:5e:0a:31:02:15:c5:71:
                    0c:96:54:88:15:a9:49:53:9d:7e:f9:14:bb:9e:38:
                    35:46:a6:eb:fd:b4:27:c5:4a:6e:41:e7:4e:f3:9b:
                    69:5f:9f:7a:6b:4d:9d:ef:74:56:78:f9:1a:c3:ee:
                    db:9f:11:8d:75:40:ff:65:37:18:96:db:0b:81:dd:
                    12:a2:ee:3c:44:0d:a5:7a:b5:0b:e6:e6:0a:82:d6:
                    e0:eb:e0:ba:57:3e:01:14:4f:e7:2f:43:9f:9a:76:
                    c9:e1:fc:52:e6:44:ee:b8:58:9e:97:42:88:ed:d4:
                    16:6c:8f:ee:bb:9b:1c:90:29:9a:83:d5:32:b8:70:
                    07:de:88:8f:27:27:78:2c:d2:69:52:04:37:61:11:
                    68:bd:61:b1:6f:84:77:d7:13:b5:ec:06:f3:02:36:
                    09:00:d3:35:cc:e7:9f:3a:01:82:17:4a:96:17:f7:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E1:1E:18:47:EB:0E:E8:C9:09:E0:48:F2:F4:55:21:B1:1F:A5:80
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:16:78:af:4a:26:7b:6c:03:c3:24:44:8b:ff:31:f3:5a:e7:
         0a:bc:33:93:f2:16:82:ae:b4:09:13:92:81:32:f3:df:82:9f:
         68:32:76:b1:15:e8:d0:3d:e8:2f:ab:27:ed:9d:11:21:ee:df:
         07:52:20:64:eb:c1:f7:68:fe:86:80:b1:54:54:b0:c9:59:4d:
         df:7d:8d:15:f9:40:fc:1e:11:f3:e6:8a:47:58:9e:f3:46:ba:
         8a:90:2b:03:c6:0a:5d:6d:ff:06:73:c6:a3:a7:a1:e6:18:c9:
         64:0e:bc:da:82:c8:14:77:e8:b1:dd:86:54:ea:8c:fe:19:0f:
         79:52:10:db:48:0b:77:ef:5c:24:db:7e:02:29:cc:f3:ec:31:
         1e:f6:a4:5b:24:15:30:34:2e:72:85:1c:e1:ea:ca:69:72:4b:
         5d:14:c1:89:fe:ca:14:1c:46:02:e2:34:5c:82:c8:38:16:af:
         80:de:3b:4a:dd:60:d5:93:7e:17:e0:b1:a2:25:46:dc:af:83:
         8a:63:ef:58:14:5a:53:da:b1:f1:5b:b3:a7:9f:42:50:fb:61:
         39:3f:10:ce:8f:75:d8:89:31:d1:a6:1f:0a:56:fd:b7:e6:9b:
         1f:3f:57:18:db:2c:fd:24:a9:44:37:0b:6c:eb:a1:d0:92:0c:
         6c:a6:d5:6e
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUTs19xOa9SnYbULjOAq9zmeUjDvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNTA4MTMxMTU1MDFaFw0yNjA4MTIxMjAwMDFaMDMxMTAvBgNV
BAMTKDFCRTExRTE4NDdFQjBFRThDOTA5RTA0OEYyRjQ1NTIxQjExRkE1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVW8MrSJLKO2SghVADn5QuHykS
4JOhcGWQSYL0GNqyaUrYNGxivGKZlpgwheQIjf9SzwLHvoyn4Hby30a62DPaDi57
LydlTW79/8lf70d4nNuMXgoxAhXFcQyWVIgVqUlTnX75FLueODVGpuv9tCfFSm5B
507zm2lfn3prTZ3vdFZ4+RrD7tufEY11QP9lNxiW2wuB3RKi7jxEDaV6tQvm5gqC
1uDr4LpXPgEUT+cvQ5+adsnh/FLmRO64WJ6XQojt1BZsj+67mxyQKZqD1TK4cAfe
iI8nJ3gs0mlSBDdhEWi9YbFvhHfXE7XsBvMCNgkA0zXM5586AYIXSpYX986fAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUG+EeGEfrDujJCeBI8vRVIbEfpYAwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzIzNzJlMzEzMjM0MmUzODM5MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbfFkwDQYJKoZIhvcNAQEL
BQADggEBABkWeK9KJntsA8MkRIv/MfNa5wq8M5PyFoKutAkTkoEy89+Cn2gydrEV
6NA96C+rJ+2dESHu3wdSIGTrwfdo/oaAsVRUsMlZTd99jRX5QPweEfPmikdYnvNG
uoqQKwPGCl1t/wZzxqOnoeYYyWQOvNqCyBR36LHdhlTqjP4ZD3lSENtIC3fvXCTb
fgIpzPPsMR72pFskFTA0LnKFHOHqymlyS10UwYn+yhQcRgLiNFyCyDgWr4DeO0rd
YNWTfhfgsaIlRtyvg4pj71gUWlPasfFbs6efQlD7YTk/EM6PddiJMdGmHwpW/bfm
mx8/VxjbLP0kqUQ3C2zrodCSDGym1W4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:03 2025 by rpki-client