Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
File:                     32372e3131322e36362e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier:          aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=
Subject key identifier:   54:B0:57:35:1D:74:24:12:2A:BB:5A:60:B3:DD:8B:07:7C:C8:CD:77
Certificate issuer:       /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial:       387AA93156A4D899C51778BD749DAE33CEED3B18
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
Signing time:             Fri 05 Sep 2025 11:00:01 +0000
ROA not before:           Fri 05 Sep 2025 10:55:01 +0000
ROA not after:            Fri 04 Sep 2026 11:00:01 +0000
asID:                     46063
IP address blocks:        27.112.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
                          rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7a:a9:31:56:a4:d8:99:c5:17:78:bd:74:9d:ae:33:ce:ed:3b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
        Validity
            Not Before: Sep  5 10:55:01 2025 GMT
            Not After : Sep  4 11:00:01 2026 GMT
        Subject: CN=54B057351D7424122ABB5A60B3DD8B077CC8CD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:2b:d5:bb:9b:9f:f4:d9:a2:82:b6:88:7b:
                    38:4b:9d:13:44:79:bf:95:a4:25:aa:95:d1:05:6f:
                    76:fc:a8:0a:0d:8c:a8:91:e8:e9:80:16:f1:c9:d8:
                    ec:88:47:7c:26:41:9b:02:41:7a:99:2d:48:f9:b0:
                    b3:b7:4d:11:f9:21:e2:2a:6e:f7:30:d0:62:b9:d6:
                    26:31:3c:24:56:75:4c:f1:59:01:30:5f:f7:0e:e9:
                    b4:b1:e9:49:dd:bb:87:c7:bb:b9:0c:a8:ee:a7:a6:
                    a0:3b:6e:a5:f2:77:8f:2e:e2:4b:44:16:09:a8:3a:
                    cb:57:32:63:5e:b4:77:90:73:14:c8:45:eb:77:d0:
                    79:28:1e:61:66:a8:0d:b8:ce:f7:cf:3f:ef:43:4c:
                    1e:5f:4c:36:b2:aa:e9:18:80:3a:02:ef:60:56:30:
                    96:06:35:6c:37:15:4c:8e:2c:67:c3:be:d6:d7:6d:
                    f6:73:ce:ea:a6:26:26:84:6b:35:ff:2d:b4:ed:23:
                    b2:de:63:6a:cb:2e:37:b0:e2:5e:8f:0d:af:cb:d4:
                    bb:4f:db:37:6a:f3:19:36:d0:11:37:06:a4:52:8f:
                    de:9d:5d:3b:05:91:0d:7d:5d:c6:32:e7:07:89:f2:
                    b3:d8:5d:0f:61:64:43:b1:39:3a:c5:ab:ed:98:93:
                    2b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:57:35:1D:74:24:12:2A:BB:5A:60:B3:DD:8B:07:7C:C8:CD:77
            X509v3 Authority Key Identifier:
                keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:de:b6:0e:30:b9:d5:21:fd:61:71:57:db:6b:cd:2b:41:3c:
         9a:ea:f2:83:c8:75:d4:a8:92:95:8f:fa:f9:6c:68:6f:aa:5d:
         7c:8a:7d:d1:6e:a6:65:9e:73:f7:45:3b:b4:66:e9:76:af:57:
         ee:a4:3e:19:fd:2e:44:7d:20:a2:59:f2:51:14:da:ba:39:d6:
         9f:a8:54:79:ab:d5:75:51:fa:ab:a2:b2:af:36:46:af:f2:93:
         52:82:d6:6d:6b:06:96:e7:9e:b8:8b:fb:9b:6c:cc:0b:58:a0:
         3b:02:1d:a1:52:51:8a:80:fc:1f:76:80:85:9f:a6:4d:43:21:
         9a:c4:41:1e:7b:69:a9:6b:4e:4a:1d:2e:a8:36:b7:6b:bb:a7:
         49:00:09:7b:73:08:44:56:4d:9d:a2:9a:52:2a:c6:33:1c:3a:
         9b:2e:40:b5:92:89:0d:a1:59:08:87:b5:e7:f0:28:50:b6:54:
         c2:9b:cb:ff:86:92:8e:c1:f6:0d:ea:b9:d9:ae:0f:54:08:cc:
         ec:af:65:87:07:8a:04:61:cd:cc:5e:83:d2:5d:7e:c4:c7:b0:
         53:82:de:ad:6e:38:d2:83:15:b5:22:e7:4a:23:cd:7a:3c:bf:
         65:ce:67:ce:2f:7f:b4:8e:d0:02:20:69:f4:f9:52:84:30:b9:
         6e:01:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:48:10 2025 by rpki-client