Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38332e302f32342d3234203d3e203535363532.roa
File:                     32372e3132312e38332e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier:          55Pgfc5CdrPo/JwquxlSz80gSkyEAvnuVuTU02sK+3E=
Subject key identifier:   BA:9D:60:3F:1D:6F:DE:DD:4B:37:DE:3F:D0:71:67:04:B6:7C:49:7E
Certificate issuer:       /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Certificate serial:       6EE4E0D5840706626629746A6848E723DBC65EBF
Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38332e302f32342d3234203d3e203535363532.roa
Signing time:             Sun 03 May 2026 02:59:46 +0000
ROA not before:           Sun 03 May 2026 02:54:46 +0000
ROA not after:            Sun 02 May 2027 02:59:46 +0000
asID:                     55652
IP address blocks:        27.121.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
                          rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e4:e0:d5:84:07:06:62:66:29:74:6a:68:48:e7:23:db:c6:5e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
        Validity
            Not Before: May  3 02:54:46 2026 GMT
            Not After : May  2 02:59:46 2027 GMT
        Subject: CN=BA9D603F1D6FDEDD4B37DE3FD0716704B67C497E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:98:58:96:56:7c:da:37:c4:50:87:f7:f5:
                    57:8e:05:b2:4f:6f:83:f0:8c:5f:c6:7c:3f:bc:de:
                    c4:50:55:e2:97:10:75:95:65:ce:a1:15:42:88:7a:
                    85:71:65:96:02:bc:88:89:2c:7b:5e:37:b6:15:6c:
                    b6:ef:15:83:7e:be:70:4a:74:77:d8:8f:40:9c:c0:
                    96:58:b6:55:e3:74:4b:cd:b0:19:6a:c4:14:f7:e2:
                    9e:ce:e4:93:16:4e:95:f0:f9:da:66:5e:e1:05:12:
                    0a:15:24:ef:97:ea:35:93:9d:d7:69:b9:3a:bd:7b:
                    d9:9b:74:02:6e:d4:46:42:cc:03:14:98:85:5c:b2:
                    22:98:6e:44:83:5b:33:c8:44:7f:8b:dd:24:77:9e:
                    4d:a9:8a:65:b3:e8:48:fd:b9:f8:6a:ef:4d:c7:61:
                    06:19:3f:30:0e:a2:ac:f6:68:3e:4d:43:ff:38:24:
                    79:25:e6:a9:3f:1b:c9:80:da:26:ea:95:4c:3d:e8:
                    9c:43:c1:4c:e4:ca:c4:fb:06:b3:af:c4:2c:ab:79:
                    77:e0:0d:48:06:7c:f7:23:cc:1c:e4:d0:8b:1b:3e:
                    58:e9:1e:7e:fd:09:18:53:e5:77:df:d9:11:5e:26:
                    1b:b8:64:9a:21:9c:9c:bc:7a:a5:8e:50:e9:ee:d9:
                    66:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9D:60:3F:1D:6F:DE:DD:4B:37:DE:3F:D0:71:67:04:B6:7C:49:7E
            X509v3 Authority Key Identifier:
                keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38332e302f32342d3234203d3e203535363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:fa:34:34:1b:2f:76:87:ec:c4:79:2c:0b:85:be:04:23:
         67:3f:64:6d:54:19:a6:a3:1a:4d:de:94:76:59:2f:57:34:83:
         0c:c1:0a:3b:ba:80:64:85:7d:df:f6:b4:ad:98:ed:39:8b:79:
         63:9b:ef:b1:e8:5b:fe:c3:31:13:6c:ec:1d:ca:30:30:49:1a:
         b1:b5:99:fb:ed:fa:08:d8:31:5e:94:3d:05:d2:6c:97:d9:a1:
         c6:b4:23:3c:90:2c:dc:bd:a5:e0:54:5b:1d:fc:c1:ed:d4:cf:
         68:97:93:81:14:89:21:76:9f:0c:c4:13:f0:2e:cd:f5:73:e9:
         50:af:89:3f:64:87:ce:50:58:02:04:7f:ef:ad:3c:f7:0f:cd:
         ab:22:50:63:2c:81:bb:d7:89:71:7d:7f:76:00:cc:0b:08:32:
         5a:9e:62:e7:de:01:5a:1c:2b:a1:bd:53:75:87:7d:c6:90:37:
         83:6b:32:e8:16:39:0c:74:8a:7a:cb:71:ad:56:c6:e3:3e:dd:
         84:34:33:aa:e8:5e:e0:63:68:8d:b4:42:7f:a2:0f:8b:17:d7:
         97:31:1d:a3:3c:d9:9b:72:a0:0d:56:db:b5:2b:a9:13:8d:04:
         6f:ce:53:25:7b:ad:58:80:e5:08:21:fb:1d:e1:8d:4f:50:f0:
         68:93:ec:95
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbuTg1YQHBmJmKXRqaEjnI9vGXr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFGNTExRTQ1NkI0Q0E5OUNBN0JEMUM5MUI2NTFGRERD
NUMwMjY4RjAeFw0yNjA1MDMwMjU0NDZaFw0yNzA1MDIwMjU5NDZaMDMxMTAvBgNV
BAMTKEJBOUQ2MDNGMUQ2RkRFREQ0QjM3REUzRkQwNzE2NzA0QjY3QzQ5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdJhYllZ82jfEUIf39VeOBbJP
b4PwjF/GfD+83sRQVeKXEHWVZc6hFUKIeoVxZZYCvIiJLHteN7YVbLbvFYN+vnBK
dHfYj0CcwJZYtlXjdEvNsBlqxBT34p7O5JMWTpXw+dpmXuEFEgoVJO+X6jWTnddp
uTq9e9mbdAJu1EZCzAMUmIVcsiKYbkSDWzPIRH+L3SR3nk2pimWz6Ej9ufhq703H
YQYZPzAOoqz2aD5NQ/84JHkl5qk/G8mA2ibqlUw96JxDwUzkysT7BrOvxCyreXfg
DUgGfPcjzBzk0IsbPljpHn79CRhT5Xff2RFeJhu4ZJohnJy8eqWOUOnu2Wb1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUup1gPx1v3t1LN94/0HFnBLZ8SX4wHwYDVR0j
BBgwFoAUUfUR5Fa0ypnKe9HJG2Uf3cXAJo8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWY2MjgwOWMtYmZiNi00ZmU3LThkZDYtY2E2MDIyY2RkNTQwLzAvNTFGNTExRTQ1
NkI0Q0E5OUNBN0JEMUM5MUI2NTFGRERDNUMwMjY4Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MUY1MTFFNDU2QjRDQTk5Q0E3QkQxQzkxQjY1MUZEREM1QzAy
NjhGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FmNjI4MDljLWJmYjYtNGZlNy04
ZGQ2LWNhNjAyMmNkZDU0MC8wLzMyMzcyZTMxMzIzMTJlMzgzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbeVMwDQYJKoZIhvcN
AQELBQADggEBADnP+jQ0Gy92h+zEeSwLhb4EI2c/ZG1UGaajGk3elHZZL1c0gwzB
Cju6gGSFfd/2tK2Y7TmLeWOb77HoW/7DMRNs7B3KMDBJGrG1mfvt+gjYMV6UPQXS
bJfZoca0IzyQLNy9peBUWx38we3Uz2iXk4EUiSF2nwzEE/AuzfVz6VCviT9kh85Q
WAIEf++tPPcPzasiUGMsgbvXiXF9f3YAzAsIMlqeYufeAVocK6G9U3WHfcaQN4Nr
MugWOQx0inrLca1WxuM+3YQ0M6roXuBjaI20Qn+iD4sX15cxHaM82ZtyoA1W27Ur
qRONBG/OUyV7rViA5Qgh+x3hjU9Q8GiT7JU=
-----END CERTIFICATE-----
Generated at Wed May 13 01:35:24 2026 by rpki-client