Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33322e302f31392d3234203d3e203234353332.roa
File:                     32372e3131312e33322e302f31392d3234203d3e203234353332.roa (raw, json)
Hash identifier:          Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=
Subject key identifier:   B7:11:6F:95:8D:70:D5:CE:2E:ED:B4:38:7D:3D:EB:7F:DF:EE:B4:5A
Certificate issuer:       /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA
Certificate serial:       54D712E0B11D027E0FDE68B3F37834007615A6C1
Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33322e302f31392d3234203d3e203234353332.roa
Signing time:             Sun 03 May 2026 02:52:41 +0000
ROA not before:           Sun 03 May 2026 02:47:41 +0000
ROA not after:            Sun 02 May 2027 02:52:41 +0000
asID:                     24532
IP address blocks:        27.111.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl
                          rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d7:12:e0:b1:1d:02:7e:0f:de:68:b3:f3:78:34:00:76:15:a6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA
        Validity
            Not Before: May  3 02:47:41 2026 GMT
            Not After : May  2 02:52:41 2027 GMT
        Subject: CN=B7116F958D70D5CE2EEDB4387D3DEB7FDFEEB45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2f:1a:2c:c4:c8:cb:2b:c0:89:89:56:28:c1:
                    65:fd:f7:55:50:f9:ac:c1:24:c9:48:95:45:a7:f0:
                    2b:71:f2:21:e5:24:54:d5:76:ad:5a:98:e6:ca:38:
                    02:5d:ba:6c:84:13:84:fa:4e:ba:71:df:fb:a4:ea:
                    61:8e:e2:ae:db:5e:e6:ff:45:73:36:e5:d4:f3:29:
                    be:e4:20:af:ae:5a:08:7f:99:06:ed:bd:dc:0d:fe:
                    2b:24:31:de:f4:2a:51:41:57:25:28:98:9a:2f:2e:
                    38:98:34:13:35:06:7a:4a:57:4a:ff:e9:8d:96:e2:
                    d7:b9:8f:f5:d1:30:2d:d3:14:a6:67:a3:6e:b3:80:
                    ed:1a:ac:06:07:f5:4d:75:c5:f4:67:54:a5:f0:7f:
                    19:ee:aa:a2:b5:da:9b:a2:ca:4b:39:a6:e9:9f:d6:
                    00:c5:d4:b3:0c:80:da:fb:0f:39:03:fc:a3:63:12:
                    fb:2d:cf:e0:a3:47:91:b8:cd:36:fe:f3:66:32:83:
                    93:a4:d6:1f:58:91:91:88:b9:3c:91:a2:cd:5a:dd:
                    c0:d9:25:ed:f1:29:28:f1:86:b6:6f:3b:eb:51:09:
                    32:84:9a:b0:29:81:35:29:42:c8:2f:05:95:63:e2:
                    6d:3b:3d:44:f0:82:cd:d0:fe:3b:b5:21:3f:dc:74:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:11:6F:95:8D:70:D5:CE:2E:ED:B4:38:7D:3D:EB:7F:DF:EE:B4:5A
            X509v3 Authority Key Identifier:
                keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33322e302f31392d3234203d3e203234353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:06:47:55:7e:ff:dd:af:f7:eb:b2:af:76:64:0e:c3:93:6a:
         e8:a3:0c:aa:5b:50:6f:8a:3e:75:8d:0c:99:6c:81:e8:39:20:
         98:9a:b8:6d:d3:2a:68:47:ea:cc:1f:31:3c:fa:39:1a:92:38:
         a7:3e:32:10:16:e2:4d:de:8d:28:88:77:6a:78:41:b9:d8:1d:
         2c:a9:aa:73:8b:f4:04:30:30:9b:0a:d4:58:c5:72:a2:e4:b4:
         31:80:4c:8d:39:13:e2:68:8e:fe:bf:5e:d1:b9:43:65:6e:e9:
         2d:48:4b:73:76:34:78:b7:b7:ee:d0:e1:57:eb:3d:5f:db:bf:
         8b:95:8f:14:20:06:99:8d:32:5f:6d:f6:bf:09:c1:9e:7f:3d:
         e3:20:71:81:95:3a:d0:cb:c5:ab:31:f6:fe:a3:f2:41:61:71:
         c4:36:ad:79:51:50:70:09:ca:ef:78:b9:8f:fb:8b:c7:a6:01:
         b9:38:c0:83:df:f3:96:ee:c1:d1:65:9f:5a:05:82:d2:1e:51:
         03:33:67:25:66:51:48:5e:e1:f5:72:b2:cd:0b:cc:65:fd:6f:
         8e:c7:15:53:3e:61:0b:35:ca:4a:64:03:fa:b4:1d:77:31:82:
         88:66:d3:de:56:f8:76:dc:39:60:80:cd:e8:26:03:1c:b5:fe:
         ab:0a:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:07 2026 by rpki-client