Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32332d3234203d3e20313532303532.roa
File:                     32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (raw, json)
Hash identifier:          AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=
Subject key identifier:   EA:D5:CA:94:F0:37:42:8B:C9:39:6F:B8:A8:60:DC:54:20:F7:B2:E3
Certificate issuer:       /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA
Certificate serial:       5FD5BCD255C07EF44D2FDAF312384FC3B8AA5167
Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32332d3234203d3e20313532303532.roa
Signing time:             Sun 03 May 2026 02:32:07 +0000
ROA not before:           Sun 03 May 2026 02:27:07 +0000
ROA not after:            Sun 02 May 2027 02:32:07 +0000
asID:                     152052
IP address blocks:        27.124.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl
                          rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d5:bc:d2:55:c0:7e:f4:4d:2f:da:f3:12:38:4f:c3:b8:aa:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA
        Validity
            Not Before: May  3 02:27:07 2026 GMT
            Not After : May  2 02:32:07 2027 GMT
        Subject: CN=EAD5CA94F037428BC9396FB8A860DC5420F7B2E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:f9:0e:da:43:6c:bc:14:95:21:64:ab:57:
                    56:c1:45:ed:e1:6a:42:ab:29:89:49:6b:39:ba:b4:
                    f8:27:09:83:ea:44:98:c2:7a:9d:c7:9d:0d:cf:90:
                    55:5b:db:47:ba:94:59:a4:68:3a:84:31:87:76:46:
                    64:df:82:57:7a:5d:58:1c:c8:b9:22:3c:13:89:3f:
                    33:ec:c8:a2:8f:37:0d:63:72:26:9c:d8:8f:b3:c9:
                    57:66:dc:3e:c7:52:07:c5:0e:1d:c8:9e:14:45:58:
                    18:d4:b8:22:88:86:3c:d7:69:d0:c1:39:ef:c9:de:
                    88:3e:5b:00:81:47:71:dd:ba:a9:d5:88:f0:76:da:
                    18:2e:9f:eb:f2:76:9e:56:4b:41:b8:47:bb:0b:7a:
                    09:a8:48:72:9d:f0:e4:91:5b:41:e5:c1:4b:90:6e:
                    59:51:24:a4:ba:0e:67:79:6c:b1:b4:12:de:25:06:
                    d8:dc:fa:22:7c:a9:53:b9:f0:19:75:9b:5e:7a:3c:
                    a9:27:dd:d7:96:6c:39:e3:03:8d:b3:b8:b3:3f:2b:
                    50:f4:9e:67:d3:e5:f5:6c:24:cb:61:d5:32:44:28:
                    9e:91:7a:bc:3a:e2:36:35:f5:51:c3:66:92:2b:d0:
                    a9:ad:e3:8c:83:37:03:2a:2b:0c:b1:9b:da:ea:3d:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D5:CA:94:F0:37:42:8B:C9:39:6F:B8:A8:60:DC:54:20:F7:B2:E3
            X509v3 Authority Key Identifier:
                keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32332d3234203d3e20313532303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:a9:11:d6:83:cb:cb:76:df:6e:49:78:cf:67:c6:d8:f3:
         a8:a3:fd:b6:a3:8f:11:71:d7:26:ab:04:22:f0:af:b8:f4:48:
         e3:f3:a2:07:c0:7b:0a:fa:2c:64:6b:a5:d9:99:a2:4d:54:6e:
         eb:5e:4a:5f:8a:21:06:1f:14:88:ee:95:84:00:d5:0f:8b:54:
         0b:4f:4f:47:30:36:b0:15:3c:89:2a:39:78:1a:ba:a2:dc:34:
         fa:01:a4:94:20:06:3a:68:33:be:de:23:ec:eb:de:61:07:d9:
         60:ca:dd:72:e7:83:c6:59:f0:4c:32:8f:79:a9:ef:9a:67:13:
         ac:f3:e9:7c:ce:be:56:c4:d5:b6:83:a0:c2:76:b2:ac:2a:27:
         00:a4:94:3b:9c:44:39:3e:ca:20:7c:78:d9:3c:d6:0f:67:bf:
         2d:1c:7a:a4:13:63:57:17:fc:57:8b:45:8c:c3:40:6c:eb:2e:
         f0:3a:bd:f6:fb:09:01:7c:b3:50:ca:32:b8:72:f0:32:54:44:
         0e:a7:f9:20:88:73:d5:b6:6a:69:16:62:0f:86:fd:4e:31:97:
         70:1a:a8:38:48:f4:c3:5f:28:f3:8c:60:e9:69:50:10:02:6b:
         59:e6:9b:44:ba:7d:ef:ad:ad:05:dd:de:c6:29:19:2a:a7:b1:
         9b:0d:e0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:04 2026 by rpki-client