Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203539313536.roa
File:                     32372e35342e3131392e302f32342d3234203d3e203539313536.roa (raw, json)
Hash identifier:          B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=
Subject key identifier:   2F:F5:82:D1:5F:71:37:F4:82:19:46:98:80:FA:5C:A6:02:7A:A8:F0
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       5CC4C48C0B0CAA36D6633F6477B9FD9AFFD07570
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203539313536.roa
Signing time:             Sun 03 May 2026 03:02:36 +0000
ROA not before:           Sun 03 May 2026 02:57:36 +0000
ROA not after:            Sun 02 May 2027 03:02:36 +0000
asID:                     59156
IP address blocks:        27.54.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c4:c4:8c:0b:0c:aa:36:d6:63:3f:64:77:b9:fd:9a:ff:d0:75:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: May  3 02:57:36 2026 GMT
            Not After : May  2 03:02:36 2027 GMT
        Subject: CN=2FF582D15F7137F48219469880FA5CA6027AA8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:58:2a:47:10:b0:b7:52:1c:8d:31:61:08:
                    a8:6f:3f:12:83:27:60:27:09:2b:5d:ce:9c:2b:82:
                    71:98:49:2b:ba:98:7c:30:12:a1:0f:88:c4:53:01:
                    a3:08:e6:a5:64:4f:1d:36:cc:27:13:0e:26:e2:e7:
                    91:a2:37:13:b5:0e:85:7f:c7:41:10:f1:a9:f4:21:
                    87:5f:de:57:7c:be:df:5b:e4:4a:c6:db:ed:2e:64:
                    7e:f3:e7:99:75:d4:31:fa:a8:c5:76:92:cd:15:cb:
                    6a:3d:45:ec:57:ea:31:63:8e:07:a2:0e:4a:d5:b9:
                    37:59:cb:b2:08:f2:ff:75:c0:56:ab:fb:8a:fd:3c:
                    b1:2a:38:52:5d:71:4a:63:ec:4f:2c:d7:97:26:da:
                    fb:dc:d9:f5:c9:5c:06:08:84:23:a7:c2:8d:d0:a0:
                    dc:ad:f0:fc:db:39:78:73:f1:28:3f:be:5b:96:6f:
                    7d:d5:b3:b3:c7:8b:ce:96:61:4e:0c:28:fc:e9:bf:
                    f3:f2:79:9f:6f:2e:a5:7e:4d:c5:59:de:c4:16:3f:
                    c7:e7:72:ab:63:a6:6b:89:de:86:8a:be:55:39:36:
                    62:e6:6a:5d:35:15:3e:e2:8c:e6:82:d4:47:b2:66:
                    f9:b8:c9:43:4e:41:b0:de:f1:2e:a5:06:ed:9b:ac:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F5:82:D1:5F:71:37:F4:82:19:46:98:80:FA:5C:A6:02:7A:A8:F0
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203539313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:85:13:5f:79:f8:9b:23:5c:77:40:54:3b:dc:f6:7a:a4:fc:
         c0:ce:04:db:36:d8:ed:0d:3b:14:6e:ca:83:41:e3:06:dc:95:
         1d:c5:51:ff:05:a9:f1:28:27:4e:4e:33:6b:5b:31:da:13:c8:
         29:19:c7:cd:53:8c:04:e8:14:49:a7:cf:2d:37:ad:e4:a2:e9:
         4a:76:64:91:f6:a5:ba:ab:a3:30:ca:e1:05:61:6b:cf:21:a4:
         21:f9:95:bb:2e:99:7b:1f:c9:79:8f:a8:c9:9b:49:a2:67:5c:
         8c:91:6d:d6:d8:a5:31:9a:8f:ee:7d:d0:d6:a1:0b:fe:09:42:
         a0:56:7b:19:a0:3b:a6:28:fb:26:9b:f8:a4:4f:87:49:36:6d:
         b7:b5:9d:ce:74:f6:53:bf:6e:c6:94:4e:62:4e:d1:5f:6f:8c:
         f0:40:92:bd:f7:41:01:95:49:a6:a3:75:40:4b:14:b2:63:fc:
         c0:ba:93:03:33:f2:23:84:73:ff:5c:c3:5e:b9:ce:c4:9e:26:
         cb:78:c4:63:24:b5:29:93:f7:6d:d9:36:fa:43:d5:c4:42:52:
         ec:41:e2:5f:ee:33:11:83:2a:a5:96:94:3b:45:3f:d5:64:9a:
         91:9a:82:5c:14:3d:f7:44:be:fa:95:b9:c6:20:e6:ea:11:b6:
         e2:cf:3b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:21 2026 by rpki-client