Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38362e302f32342d3234203d3e203535363532.roa
File:                     32372e3132312e38362e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier:          6P6QYPdFuq7LsAFOi2tnnEJSwJf9ZQyZm5LNXr5+r6s=
Subject key identifier:   97:98:19:49:16:2E:1F:A8:73:87:40:B0:85:E3:86:75:BA:0F:F6:D1
Certificate issuer:       /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Certificate serial:       473296C9706985EDF71554E0BF51267AE7860A7A
Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38362e302f32342d3234203d3e203535363532.roa
Signing time:             Sun 03 May 2026 02:59:46 +0000
ROA not before:           Sun 03 May 2026 02:54:46 +0000
ROA not after:            Sun 02 May 2027 02:59:46 +0000
asID:                     55652
IP address blocks:        27.121.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
                          rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:96:c9:70:69:85:ed:f7:15:54:e0:bf:51:26:7a:e7:86:0a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
        Validity
            Not Before: May  3 02:54:46 2026 GMT
            Not After : May  2 02:59:46 2027 GMT
        Subject: CN=97981949162E1FA8738740B085E38675BA0FF6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:0a:03:5d:9c:86:c5:32:e4:93:70:2a:5f:
                    86:18:6c:6a:9f:de:8b:f8:75:9c:22:e7:b3:39:a6:
                    a3:1c:c5:0a:b7:84:a4:55:e6:42:c5:79:4e:a0:77:
                    72:56:7e:87:5a:22:79:a4:ee:b4:1b:81:c0:b0:ea:
                    22:b5:1f:02:f4:ca:0b:cc:95:03:24:f6:64:62:4f:
                    3f:ee:58:43:62:a8:b6:c9:bf:da:7f:d7:88:2e:ad:
                    0e:b0:d1:61:db:ba:63:b3:ff:51:87:54:c7:57:70:
                    16:de:ae:06:c0:a8:ea:00:b3:67:a5:9d:20:64:4c:
                    5d:c4:86:05:27:a6:63:d0:3d:c6:e1:b6:fb:65:f8:
                    24:00:54:30:e4:a6:77:70:b0:ac:4a:eb:7f:5d:2b:
                    92:8e:3f:66:4a:39:39:2b:85:a3:12:2e:68:a4:45:
                    e6:ac:19:ce:aa:fe:02:07:ab:95:02:47:18:3f:f1:
                    30:82:8a:9a:24:db:41:ac:de:43:5d:93:5e:d8:9e:
                    7e:87:3d:02:5a:90:bf:19:71:d9:85:36:a1:63:02:
                    0d:94:26:e6:0f:77:41:8f:2c:e8:11:ba:b2:01:ee:
                    6b:d1:2b:47:a7:9e:55:9e:48:0e:70:d8:d7:24:1d:
                    b3:27:27:e2:48:84:0c:dd:be:a0:67:b6:a2:f4:ca:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:98:19:49:16:2E:1F:A8:73:87:40:B0:85:E3:86:75:BA:0F:F6:D1
            X509v3 Authority Key Identifier:
                keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38362e302f32342d3234203d3e203535363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:92:1b:7d:1a:3d:71:5a:d1:e6:cf:95:08:07:a7:a9:dc:c8:
         7f:d1:2d:7d:8b:98:79:4a:e5:ff:fe:c3:9e:fb:a9:11:f4:c7:
         67:89:d4:2d:8f:03:5c:e1:9c:96:01:1e:6c:02:86:7b:f6:8d:
         71:ee:42:ce:ac:53:7f:07:17:52:35:66:47:52:d6:db:b4:bd:
         71:c9:07:b2:4c:58:7e:70:14:fc:75:b5:81:12:9a:84:d1:fd:
         e2:ab:40:76:2b:84:7f:92:48:c6:28:15:b2:f4:3a:cc:cd:e8:
         7e:f1:86:9a:0a:0b:df:0c:74:f3:bb:5f:27:b8:d6:c7:a4:67:
         94:0d:3b:c1:ab:76:24:19:e7:d9:33:ab:eb:08:40:5c:b3:39:
         ee:4c:02:5b:1d:f4:39:83:ff:b4:7f:14:90:6e:09:f7:c9:64:
         6c:b4:9d:67:b1:53:28:32:5f:05:03:f0:96:dd:48:cf:ee:a6:
         f2:c7:a7:2d:13:37:c3:a2:a3:f4:f8:0b:eb:2f:d0:4b:18:bc:
         4b:64:27:b7:85:2d:7f:01:f1:1a:5c:c3:8d:7a:19:8f:cc:98:
         5d:fa:e4:79:b0:cd:30:4b:67:42:06:59:7e:68:b4:d4:36:39:
         c7:2e:ad:4b:07:18:a1:4e:34:16:6f:c7:01:99:2d:ca:92:eb:
         da:c8:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:21 2026 by rpki-client