Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131362e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=
Subject key identifier:   24:62:91:F8:83:23:10:8C:13:2D:18:21:37:4C:9C:33:65:5E:19:93
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       0264709CF75B7556771E966D99DB66612931CF72
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
Signing time:             Sun 03 May 2026 03:02:33 +0000
ROA not before:           Sun 03 May 2026 02:57:33 +0000
ROA not after:            Sun 02 May 2027 03:02:33 +0000
asID:                     58396
IP address blocks:        27.54.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:64:70:9c:f7:5b:75:56:77:1e:96:6d:99:db:66:61:29:31:cf:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: May  3 02:57:33 2026 GMT
            Not After : May  2 03:02:33 2027 GMT
        Subject: CN=246291F88323108C132D1821374C9C33655E1993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:cb:a0:48:fa:e0:0c:bd:34:64:c1:da:72:
                    aa:01:75:50:9b:ee:48:01:6d:99:0d:82:80:12:01:
                    28:0c:f5:4c:49:3f:c0:47:44:81:89:11:93:a2:54:
                    22:14:15:5c:93:85:da:e3:f4:76:53:10:03:1a:1b:
                    70:ee:25:7f:2f:0f:56:de:a9:8b:24:48:6b:c2:11:
                    6a:2a:62:fe:d6:94:85:40:dd:02:54:e5:ad:be:b6:
                    fa:97:07:d5:65:8f:dd:8f:7b:12:4e:72:52:00:00:
                    02:63:dd:fb:18:6f:d7:4c:65:3b:6a:88:20:5c:f7:
                    ca:9e:e0:8f:a8:ec:44:4b:2f:f1:87:03:a9:41:8d:
                    bb:28:22:1a:62:1e:71:95:2a:e0:1d:03:05:e8:26:
                    01:05:dc:25:f3:3f:fd:bf:32:86:a1:e6:16:ba:1f:
                    63:bf:d0:b7:58:7c:ff:91:f1:78:bf:d4:f5:0e:4e:
                    5e:7d:2c:fc:bb:23:80:73:ee:28:fe:4e:ef:0c:70:
                    15:74:3d:18:d2:d4:ea:7c:24:f9:6a:fc:e4:b8:df:
                    77:21:f8:b3:9a:29:d4:42:20:93:f5:bb:0f:61:4d:
                    9e:4e:ef:41:83:13:d1:ec:a5:e2:f3:0a:ba:e1:34:
                    3b:57:20:43:37:92:0e:f1:2f:65:2b:48:74:32:b1:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:91:F8:83:23:10:8C:13:2D:18:21:37:4C:9C:33:65:5E:19:93
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b1:d0:b7:a0:0c:44:8e:ad:f2:66:29:02:bf:9d:d7:17:59:
         fa:02:4f:e8:83:c4:fd:7a:88:ef:aa:2e:25:b0:9c:23:8c:31:
         40:0b:b3:29:68:a2:fd:96:69:15:7c:eb:3a:27:2c:82:a9:51:
         d0:bd:0b:e2:04:59:a3:53:f3:2f:7e:b2:11:50:78:16:20:a3:
         d1:e3:05:01:05:7a:05:e4:65:ea:e2:de:ca:04:82:28:d3:be:
         f7:99:11:2a:90:5b:ac:c4:c5:6a:93:d6:bf:61:cf:19:29:f6:
         95:cf:bd:1d:a9:29:54:b4:f8:d1:c0:35:48:b9:1c:b6:cd:0c:
         3b:e4:49:09:89:8f:46:bc:9d:1b:e9:72:7a:30:78:e6:9d:e4:
         fe:86:a2:97:eb:68:d1:35:4d:49:f9:41:7c:8c:e0:8c:57:5f:
         9a:1c:41:7b:99:c6:2d:2f:f5:8e:9e:42:57:21:4a:a9:86:6b:
         01:de:d0:3f:bb:e0:24:6d:23:64:6e:ae:7a:e8:bc:89:b9:50:
         f9:44:c6:18:01:b7:7d:17:b3:25:e4:2f:88:a7:cf:5f:69:b8:
         75:53:dd:b7:19:af:1c:0a:00:a6:31:79:6f:eb:90:ba:f9:65:
         12:72:53:18:73:fb:92:bf:43:76:37:c3:21:d7:ec:a6:b9:b5:
         07:b7:9f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:22 2026 by rpki-client