Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232332e302f32342d3234203d3e203538333639.roa
File:                     32372e3132332e3232332e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          7aO57ZJXY8AsIysLsbrJyhQquUOc6AepxIth4HKkVJA=
Subject key identifier:   72:6E:A5:A7:2B:D0:D2:2F:9E:5B:C5:7B:C9:83:44:03:57:83:8E:A7
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       069E1B97B69AE14FB6CFE1E39AADF21762AE5452
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232332e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:23 +0000
ROA not before:           Sun 03 May 2026 02:10:23 +0000
ROA not after:            Sun 02 May 2027 02:15:23 +0000
asID:                     58369
IP address blocks:        27.123.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9e:1b:97:b6:9a:e1:4f:b6:cf:e1:e3:9a:ad:f2:17:62:ae:54:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:23 2026 GMT
            Not After : May  2 02:15:23 2027 GMT
        Subject: CN=726EA5A72BD0D22F9E5BC57BC983440357838EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:f1:85:af:89:55:0d:90:b5:8d:09:78:1d:
                    9f:2e:91:70:2c:e5:b3:1b:e7:08:1c:4f:03:1e:ad:
                    2e:51:85:32:c6:cf:b5:d8:62:b4:f9:5a:65:89:55:
                    ca:d2:38:35:21:a2:87:67:12:b1:94:da:8f:1d:77:
                    0a:7e:54:1e:be:a8:d7:b0:a9:30:de:17:62:2f:06:
                    7c:05:e2:85:0f:74:16:e9:3d:1a:bd:ce:1a:c4:99:
                    f8:fd:aa:5d:09:72:f4:91:eb:22:c5:8d:5b:a7:0b:
                    fb:79:01:c8:7b:63:c3:af:02:54:47:7d:af:8d:d3:
                    a2:44:42:e5:23:77:f1:89:40:52:ce:70:32:2f:dc:
                    ce:ae:e0:dc:6e:a9:a7:d2:8b:5f:04:26:07:6b:c5:
                    8f:a8:00:80:1c:34:85:d9:ed:67:61:e9:76:68:76:
                    a7:bc:2d:9e:c0:f7:82:04:86:ac:6a:52:75:12:df:
                    90:76:3e:00:4a:9b:95:07:96:bd:9a:30:0b:8a:b7:
                    ff:14:a1:02:c6:81:3a:de:d2:35:7a:57:90:57:fb:
                    89:d1:65:fb:db:b4:1e:5d:3c:eb:d9:bb:50:31:1f:
                    cd:33:66:4c:8b:4f:40:a3:89:f5:17:7c:ae:e5:d8:
                    ed:52:91:c7:43:ef:13:8b:2a:c6:09:c5:ed:bb:65:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:A5:A7:2B:D0:D2:2F:9E:5B:C5:7B:C9:83:44:03:57:83:8E:A7
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232332e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:86:46:7e:23:04:db:31:11:4c:66:c4:16:f1:59:03:22:
         d6:4a:c9:76:b9:38:56:15:35:b0:f0:4b:82:75:b3:a8:70:59:
         1e:07:b9:a2:12:5a:35:e2:4e:70:8a:da:ef:be:84:88:18:ca:
         ac:0c:6a:29:75:93:9c:7e:d5:0a:3d:05:cf:eb:9e:99:11:38:
         1c:39:03:9f:77:bf:76:e0:11:f4:f8:36:75:f6:bc:7b:8e:3f:
         73:6e:fb:87:01:dd:e8:33:5e:75:68:99:21:0a:b0:c8:fc:3d:
         83:4e:8c:e7:99:a7:43:27:e6:b0:13:ed:a4:c7:d8:ed:e0:fe:
         63:0e:dc:ca:89:de:0b:a5:ed:59:9d:24:59:95:53:e6:e1:e1:
         e9:0a:09:1b:1f:dc:d1:22:64:41:af:7f:b5:23:6a:94:1f:05:
         2b:56:1b:6f:6a:54:5c:04:f3:83:0e:e3:ab:be:ce:db:9f:0d:
         f0:99:d0:d5:07:02:20:28:e9:05:c3:0b:1a:f1:f9:6f:3e:d8:
         2d:ff:10:54:bc:28:aa:d3:cd:48:59:28:ef:20:7f:2d:f9:2c:
         b1:93:6d:22:50:1e:e8:e2:77:a1:5d:58:a7:8b:83:c4:70:bb:
         b7:c7:82:e2:1d:d9:15:0f:da:71:3a:f1:13:95:76:62:3f:ea:
         f2:21:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:25 2026 by rpki-client