Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39322e302f32332d3234203d3e2039333431.roa
File:                     32372e3132342e39322e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          f0b2CZtrdYVceFD012ZxCAzhHGfUeiRBDd98WmgfuWI=
Subject key identifier:   42:76:FF:BB:34:67:31:9F:58:DD:3A:35:46:BC:00:EC:6B:28:19:0E
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       31DF5A439D3E192D0CD3B12CCD6CC0A4829E211E
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39322e302f32332d3234203d3e2039333431.roa
Signing time:             Wed 13 Aug 2025 12:00:01 +0000
ROA not before:           Wed 13 Aug 2025 11:55:01 +0000
ROA not after:            Wed 12 Aug 2026 12:00:01 +0000
asID:                     9341
IP address blocks:        27.124.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 09:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:df:5a:43:9d:3e:19:2d:0c:d3:b1:2c:cd:6c:c0:a4:82:9e:21:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Aug 13 11:55:01 2025 GMT
            Not After : Aug 12 12:00:01 2026 GMT
        Subject: CN=4276FFBB3467319F58DD3A3546BC00EC6B28190E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:f3:0e:fc:8c:e9:91:d6:64:eb:0f:ea:b7:
                    57:75:cc:db:44:41:e7:ba:1f:a2:af:0f:6d:fb:70:
                    37:e9:31:e0:c0:00:89:9f:ce:9a:33:4a:ad:79:80:
                    c7:ab:2d:e0:11:a9:23:cb:c9:f8:74:8d:57:57:75:
                    52:0f:42:3d:3f:2c:2b:02:4c:dd:49:73:e5:d2:07:
                    a9:67:fb:1d:d2:be:b2:00:d6:0a:ea:cf:af:68:62:
                    b1:a1:ef:6a:5c:42:d3:ef:70:db:14:c0:68:7f:bf:
                    da:f5:6d:44:80:7b:a6:d5:d4:94:11:11:a5:9a:39:
                    b6:17:d3:6c:8c:a7:1b:c7:12:ab:ec:b5:65:8f:07:
                    3a:c5:d3:13:58:56:59:a6:be:81:87:df:a0:06:a6:
                    ac:d0:c5:43:20:d4:98:d9:c4:05:ba:0a:d5:f8:b5:
                    e0:2a:63:f1:2e:46:96:c7:a2:ed:ac:00:d7:fa:12:
                    a2:f5:d8:8d:64:b2:68:e8:c3:5f:e4:e4:1e:10:82:
                    82:cf:62:78:a0:a2:31:82:b5:8f:44:54:a9:28:e1:
                    b0:20:3f:47:d0:e1:c4:04:4d:e3:38:23:b2:da:78:
                    c2:76:48:d0:72:96:f0:b4:cd:4f:ad:fc:c5:be:a4:
                    90:d8:2f:c9:83:be:1b:12:25:69:e5:2d:df:0e:7a:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:76:FF:BB:34:67:31:9F:58:DD:3A:35:46:BC:00:EC:6B:28:19:0E
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e39322e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:f4:5c:ee:91:df:fd:47:65:60:2c:14:ef:b1:8a:4a:bd:
         ae:00:4d:37:54:cf:b9:b7:f0:94:0f:43:62:53:a7:fd:6d:f9:
         0f:4b:38:c9:58:4e:14:74:f1:22:cd:7c:3b:3f:c7:ad:36:ca:
         93:91:d3:53:86:26:2e:fc:e9:85:ae:8a:e1:6e:de:6c:77:7b:
         9f:cf:67:b9:c9:d8:19:57:f7:ba:2a:44:b6:ef:ba:96:e2:72:
         6b:1e:c9:0b:71:1e:17:65:41:34:ab:99:c0:4f:55:0f:67:6d:
         f3:89:08:2f:23:94:c7:eb:83:5c:aa:69:41:99:b9:89:ec:14:
         70:2a:19:5c:6c:d2:6b:24:24:f9:32:bb:19:af:2e:50:60:45:
         f1:3d:e5:d1:31:87:a6:d0:95:5a:f7:54:e5:5e:24:1c:73:29:
         f3:31:29:28:55:00:37:4a:63:ee:88:72:65:b8:b5:c1:06:55:
         a4:43:a3:a4:86:22:0a:52:46:60:0d:e5:2f:ae:82:b9:69:0d:
         47:96:12:f6:36:55:8f:0a:79:66:d3:db:d4:31:c4:a8:69:b2:
         44:9c:7a:e5:7a:e2:15:84:ea:c8:fa:5d:f2:e9:8e:0b:8c:b6:
         b4:91:d8:c7:72:66:a3:c1:fb:05:a1:45:d8:e1:11:09:62:0d:
         1b:51:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:19:46 2025 by rpki-client