Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa
File:                     32372e3133312e332e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          bvIhfLTgotvNL+zfXHv7PfJdHYoUAw6+uQUpeSW7PKI=
Subject key identifier:   E2:7E:95:6D:F1:B4:A0:F8:AE:C0:A0:C0:01:9A:9B:3B:90:C1:C4:98
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       15551F741429E7E5696CBEBF46725DDB7AB5706A
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa
Signing time:             Sun 03 May 2026 02:55:18 +0000
ROA not before:           Sun 03 May 2026 02:50:18 +0000
ROA not after:            Sun 02 May 2027 02:55:18 +0000
asID:                     38753
IP address blocks:        27.131.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:55:1f:74:14:29:e7:e5:69:6c:be:bf:46:72:5d:db:7a:b5:70:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: May  3 02:50:18 2026 GMT
            Not After : May  2 02:55:18 2027 GMT
        Subject: CN=E27E956DF1B4A0F8AEC0A0C0019A9B3B90C1C498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:89:c8:78:a9:d3:4a:cd:22:3c:4b:7d:c0:
                    33:ef:ff:b1:07:2b:18:b2:de:a0:ef:58:9a:73:06:
                    99:4c:28:f3:50:e3:21:54:eb:2b:09:d2:d0:de:5f:
                    8c:94:7b:e8:e3:2c:6b:8a:88:29:de:6f:36:45:37:
                    f1:bb:c8:24:2e:8a:bd:4c:e4:eb:aa:23:ac:73:0b:
                    41:b8:fb:fe:d2:9f:b5:57:91:0a:6f:2d:97:4f:ff:
                    d2:80:a7:7b:65:8b:ee:cf:18:ab:b9:99:46:8a:b2:
                    0a:e4:5a:19:da:e6:eb:89:bd:85:98:5e:73:b3:f1:
                    f9:90:a0:7a:ff:bc:25:9c:6a:01:43:21:40:ad:9f:
                    4c:3a:8e:94:0f:50:0f:4a:cf:71:eb:58:ac:c5:ae:
                    91:97:01:64:89:b8:94:fe:c5:9c:1d:c3:11:c1:31:
                    43:e6:b9:9d:24:c7:f9:9a:8f:c4:2d:a6:42:1b:7e:
                    7a:26:58:31:e8:5a:c8:ac:e8:c7:37:aa:8b:ea:73:
                    40:f3:c7:94:13:e2:3e:d7:f1:5c:9d:83:da:d5:33:
                    b3:52:b3:e5:cd:a7:87:bc:8f:f8:2f:39:bc:f4:43:
                    6f:38:f1:37:28:5a:b2:f9:ef:dd:87:11:b6:c6:67:
                    e0:45:07:da:89:ef:1d:d3:06:f1:88:09:ca:1a:41:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7E:95:6D:F1:B4:A0:F8:AE:C0:A0:C0:01:9A:9B:3B:90:C1:C4:98
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e332e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:e7:ad:b2:19:f0:70:b2:93:64:0d:1e:f0:67:b0:f9:ba:32:
         78:ba:b4:cd:6d:fa:59:1d:5a:1d:6c:d5:50:c4:0e:7b:29:61:
         81:a1:99:0d:df:62:a0:17:e7:3f:67:e2:3d:c7:52:65:70:1a:
         74:61:86:60:f8:3b:a7:42:ec:2b:e7:3c:58:c8:e2:b2:1d:e6:
         41:45:ce:1a:83:60:1f:ef:ce:b9:c1:81:52:c0:c6:a0:a5:e6:
         cd:be:fb:c8:64:ed:4c:37:56:5d:e7:eb:2b:17:80:8c:f9:24:
         21:37:ea:45:de:e6:d2:7f:71:74:2f:06:be:21:eb:81:18:ff:
         de:42:30:f1:f2:9d:d7:e3:07:ef:b2:63:9f:b6:24:b3:63:a9:
         80:82:31:aa:48:e6:3d:58:85:6b:e5:90:ac:5a:a2:39:78:d3:
         2c:ea:8b:a7:8f:73:37:ba:a1:f4:0b:22:16:03:39:1b:fe:af:
         92:82:81:69:13:69:0b:6a:d6:f6:4d:c2:20:74:8d:7d:10:36:
         f1:eb:cb:b2:8a:12:ca:e3:0d:66:63:80:2d:28:8c:00:b5:40:
         84:c8:54:f9:f1:3a:22:76:66:35:11:a8:00:2b:24:8c:a3:fe:
         51:54:63:af:a6:d6:39:b2:7a:ca:0a:44:18:57:35:21:cf:64:
         f3:5d:04:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:54 2026 by rpki-client