Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
File:                     32372e3132332e302e302f32312d3234203d3e20313339393338.roa (raw, json)
Hash identifier:          CrDosYMbaMymGSuAwPQv1AxOjr/T7uHU3jsk81GEu9s=
Subject key identifier:   86:9B:9C:3B:3D:B5:9A:B6:A6:F4:5A:93:ED:27:F6:C0:92:33:91:A8
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       196B8B2E71B14E9F591CB12246993258F7B9ADD1
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
Signing time:             Sun 03 May 2026 02:44:06 +0000
ROA not before:           Sun 03 May 2026 02:39:06 +0000
ROA not after:            Sun 02 May 2027 02:44:06 +0000
asID:                     139938
IP address blocks:        27.123.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 06:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6b:8b:2e:71:b1:4e:9f:59:1c:b1:22:46:99:32:58:f7:b9:ad:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: May  3 02:39:06 2026 GMT
            Not After : May  2 02:44:06 2027 GMT
        Subject: CN=869B9C3B3DB59AB6A6F45A93ED27F6C0923391A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:8d:41:e5:9f:d0:12:c9:73:69:bf:03:b5:
                    17:8a:ef:6a:28:2b:fd:a8:2d:e3:46:04:05:7e:74:
                    4c:3e:83:19:2b:bc:31:48:06:28:8a:de:75:5e:46:
                    ce:f9:6a:c6:8a:92:49:f4:57:5a:61:73:fc:e7:e0:
                    b9:a8:f7:3d:79:28:5e:43:d4:f4:5e:6c:b7:0b:a0:
                    12:22:54:94:a1:36:eb:99:6a:21:f3:9f:ee:0e:2d:
                    02:a8:8f:c8:72:ac:7c:bf:ed:67:5f:a4:fa:89:8e:
                    c7:1a:18:88:78:54:d0:56:38:19:a5:be:c1:9d:c9:
                    48:2c:50:b3:da:a1:1f:c4:98:c4:fb:56:e0:cc:81:
                    a6:7c:2c:d9:88:55:96:25:b3:bf:71:29:17:5b:91:
                    02:1f:48:54:41:45:51:79:bc:af:1b:cc:da:f8:89:
                    64:0f:19:08:06:cd:13:91:73:84:25:2f:15:9b:58:
                    d6:69:9a:ba:7b:f0:1e:b2:d9:3b:a8:bb:85:5e:3d:
                    20:5d:75:9f:41:26:2c:ad:e0:97:b4:4b:ef:90:ff:
                    db:12:46:4d:1f:74:04:21:25:af:4f:af:a4:b7:83:
                    d0:ce:39:d1:19:f6:be:34:8b:46:2b:d5:97:a7:60:
                    34:11:68:b5:cd:15:87:9e:8d:b9:1c:04:49:b1:7d:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9B:9C:3B:3D:B5:9A:B6:A6:F4:5A:93:ED:27:F6:C0:92:33:91:A8
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:8b:5b:74:46:87:c4:2a:11:56:b7:9e:6a:ab:10:aa:98:
         0d:3c:be:42:34:f4:34:41:8d:29:6c:18:fe:22:17:51:80:ae:
         f2:06:dc:86:d0:21:82:4e:ea:6f:b9:52:e5:cb:21:78:64:12:
         50:47:49:5b:1e:bc:80:c6:09:ee:89:66:51:a0:18:8e:f9:1e:
         78:28:a0:e2:e8:f8:ef:eb:de:55:3f:7b:00:f1:c2:9f:4c:73:
         e3:1a:38:2f:3a:65:f7:d7:e9:34:87:fc:c4:67:22:54:bc:5e:
         f6:81:19:9e:77:b9:99:eb:0d:54:69:90:75:69:8d:54:73:47:
         53:e5:17:6b:17:26:50:6c:66:ad:d1:ce:04:2d:2f:70:b8:15:
         0e:c0:e4:ea:06:8b:63:47:5e:25:81:a0:b0:ea:08:1e:32:5e:
         47:ab:4f:3a:b7:6a:72:9c:f3:54:be:94:61:db:d0:31:3e:12:
         6d:1d:91:db:ad:f1:e3:89:58:7d:ac:85:7e:21:d8:97:f3:54:
         f2:d0:0b:5e:34:74:84:3a:d2:69:a8:8d:80:13:20:ea:72:d6:
         4f:a1:db:68:01:65:79:15:4c:81:c3:9d:09:04:d1:ef:a7:eb:
         a0:7d:32:f4:bd:a1:b0:40:1e:7e:3e:ad:a7:94:87:bb:ff:1e:
         c4:3a:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:57 2026 by rpki-client