Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36342e302f32342d3234203d3e203436303633.roa
File:                     32372e3131322e36342e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier:          UoG4R/fnzXCLLPhjnt97eVjW6Ux+f3m1mN0pOE9yqnE=
Subject key identifier:   67:F8:C5:25:BD:EB:6B:93:72:C4:7B:CF:2F:FA:99:BC:13:9B:9D:3D
Certificate issuer:       /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Certificate serial:       01A8E5862B08690A32CEF545DDE61B6F05A70DFC
Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36342e302f32342d3234203d3e203436303633.roa
Signing time:             Sun 03 May 2026 03:15:19 +0000
ROA not before:           Sun 03 May 2026 03:10:19 +0000
ROA not after:            Sun 02 May 2027 03:15:19 +0000
asID:                     46063
IP address blocks:        27.112.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
                          rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a8:e5:86:2b:08:69:0a:32:ce:f5:45:dd:e6:1b:6f:05:a7:0d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
        Validity
            Not Before: May  3 03:10:19 2026 GMT
            Not After : May  2 03:15:19 2027 GMT
        Subject: CN=67F8C525BDEB6B9372C47BCF2FFA99BC139B9D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:d8:d4:23:22:2b:d8:59:b7:42:b1:d5:20:
                    3f:9c:54:ec:2b:d4:32:c5:2e:2c:ef:02:d3:81:a1:
                    f6:96:8f:51:e2:86:15:e4:18:94:73:58:3c:eb:16:
                    5f:a6:eb:dc:55:9b:06:ee:ab:51:db:fa:75:98:56:
                    c1:5a:50:53:c8:0a:ec:99:ac:c6:17:14:61:22:b0:
                    9b:a8:23:2f:77:4f:b9:fa:cd:fb:90:ad:a4:0e:ff:
                    25:0e:4e:37:99:08:36:c1:4f:29:7a:bb:21:64:32:
                    70:3c:94:52:dd:09:d3:ac:5f:77:51:fb:2e:78:22:
                    10:17:c2:03:9a:20:e9:aa:8d:1e:fb:5f:8b:94:6e:
                    c8:32:fc:8b:ff:0b:1f:53:9e:c8:ea:d9:a4:74:3a:
                    fc:58:fc:4f:3a:12:75:ec:4f:c8:9a:17:bb:a8:d6:
                    17:ce:7b:49:b5:ce:ae:7a:92:85:d2:16:fb:70:ee:
                    a7:00:ef:36:dc:11:20:5a:48:1c:73:a9:dd:ed:2f:
                    f1:da:b1:26:32:04:51:0f:38:5b:0c:47:70:e4:ef:
                    7f:bd:10:ea:37:d3:72:5c:40:c3:b6:bf:b9:c6:9e:
                    f1:5a:73:d4:d8:09:9a:70:f2:6c:93:a8:fe:46:d6:
                    1b:b2:ba:43:b3:0a:3a:3d:c1:e0:3b:9b:a5:0f:2d:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:C5:25:BD:EB:6B:93:72:C4:7B:CF:2F:FA:99:BC:13:9B:9D:3D
            X509v3 Authority Key Identifier:
                keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36342e302f32342d3234203d3e203436303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:9f:80:57:62:0e:3d:4d:cd:13:d6:37:14:6b:1d:e1:61:73:
         10:fa:42:55:68:4a:be:c8:ec:62:32:6a:d5:46:42:4b:a5:45:
         0d:35:a5:4c:5e:a2:d0:59:65:34:73:f9:b4:a9:16:0d:ca:f7:
         97:d5:c6:d9:53:01:61:c9:76:3e:d6:76:a4:66:dc:90:d5:cd:
         c3:2c:4e:57:db:d7:2f:14:39:3b:06:d6:c4:c5:9e:ab:8c:f7:
         82:7a:6d:1c:2d:63:91:82:60:97:28:f5:e1:73:dc:1e:d2:24:
         89:9b:e4:e8:42:38:a3:74:ee:3f:56:6a:8f:3f:83:e8:77:54:
         c0:40:2f:9c:76:ad:1c:55:37:c5:06:82:78:e8:22:7a:03:0e:
         90:a7:ad:1e:c7:e7:4b:cb:7a:c2:23:67:af:81:59:b8:94:a5:
         ab:90:3e:1c:6b:f0:3d:12:63:b0:b2:a5:b9:64:52:82:3c:ca:
         b9:72:11:f8:c5:5b:96:72:82:db:91:01:45:13:34:63:14:b7:
         eb:90:4c:69:ca:97:b5:52:90:04:05:44:17:0f:ac:a3:c9:2f:
         15:3a:60:d1:32:d7:e5:3e:e9:8a:34:f3:2b:a1:32:e4:57:af:
         38:05:65:5e:ba:be:31:78:09:dc:3e:31:fd:ca:5b:29:07:55:
         09:f9:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:53 2026 by rpki-client