Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
File:                     32372e3131322e36362e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier:          3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=
Subject key identifier:   5F:5C:6F:1F:4E:0D:3E:DD:15:3A:C2:43:9D:AB:DD:4D:F1:5D:97:3A
Certificate issuer:       /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Certificate serial:       050DF2B1F2B8D8521DC4F145B26008D893A5D330
Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
Signing time:             Sun 03 May 2026 03:15:20 +0000
ROA not before:           Sun 03 May 2026 03:10:20 +0000
ROA not after:            Sun 02 May 2027 03:15:20 +0000
asID:                     46063
IP address blocks:        27.112.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
                          rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0d:f2:b1:f2:b8:d8:52:1d:c4:f1:45:b2:60:08:d8:93:a5:d3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
        Validity
            Not Before: May  3 03:10:20 2026 GMT
            Not After : May  2 03:15:20 2027 GMT
        Subject: CN=5F5C6F1F4E0D3EDD153AC2439DABDD4DF15D973A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:bb:58:cf:6d:a5:c5:f7:55:82:18:09:b2:
                    36:ed:7a:c0:9a:1c:f2:f6:c1:04:77:52:95:72:4e:
                    1f:9e:85:92:4a:27:2c:dd:af:ec:17:a8:c2:24:69:
                    7e:49:e4:1f:53:00:a6:12:b3:5c:fb:b0:52:40:07:
                    84:3e:3d:e0:20:d3:b9:1a:ae:b9:3f:d1:f5:8c:bb:
                    20:8b:2e:24:56:51:7b:47:fa:f5:7d:fa:3e:ae:16:
                    66:c8:23:51:4a:24:98:6a:61:dc:9f:ce:4c:34:57:
                    6f:14:09:af:42:ae:f3:a9:d6:87:ad:1b:53:e7:aa:
                    be:36:d5:75:14:b0:dd:ec:69:54:c9:e6:e0:8c:fa:
                    4f:d7:5c:0b:2e:01:50:f6:0b:3d:6d:83:e4:1b:0a:
                    a1:95:89:06:26:3c:c5:ea:60:43:81:68:19:92:61:
                    5a:aa:5e:59:bc:05:2c:d3:2c:23:bc:b2:73:4b:83:
                    76:74:a7:8a:aa:49:95:80:6d:6b:19:43:e0:fe:0f:
                    7f:9b:17:3c:14:af:8d:b5:94:eb:5b:cb:cc:52:b6:
                    de:2d:54:de:c9:54:41:64:e4:1c:d9:d5:ba:be:37:
                    1f:bf:fd:a1:28:37:15:35:f4:f0:5b:38:0f:30:c9:
                    92:19:48:d7:2f:3c:50:1c:bd:98:84:e4:a3:9a:69:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5C:6F:1F:4E:0D:3E:DD:15:3A:C2:43:9D:AB:DD:4D:F1:5D:97:3A
            X509v3 Authority Key Identifier:
                keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:87:d7:2b:d3:6d:d5:7c:4a:90:bb:cf:f5:93:8b:df:6a:4d:
         e6:8a:4c:50:ce:41:b2:d3:b8:73:f0:43:9e:be:a4:b6:25:8b:
         a6:79:48:5d:90:ff:d0:56:4a:f9:0a:8f:65:0a:27:d1:53:87:
         c4:4f:a4:95:fb:34:76:ee:fa:39:4c:2f:53:4f:c5:94:e0:3f:
         cc:b9:b6:a4:26:0a:b4:4a:6a:b2:f5:01:c3:60:b4:ab:8b:fe:
         45:e3:b1:14:ab:6c:cf:1f:d3:12:d8:43:0d:4a:10:96:83:f1:
         57:4c:b7:40:01:a8:23:70:96:c5:c6:a9:39:9b:b5:c1:7c:6d:
         05:97:18:70:66:0f:05:f0:14:08:94:c5:fe:18:45:bf:67:b2:
         be:4e:dd:35:f7:ba:3a:f5:de:ae:94:ea:79:27:da:57:50:76:
         00:08:d8:d2:7b:d0:57:6e:38:75:97:b2:16:f4:60:13:ee:cd:
         0d:1a:8d:9f:71:69:c6:27:60:e9:45:11:32:b8:b1:e1:a1:a2:
         74:dd:15:da:a7:dc:f2:09:cd:eb:d4:d3:c1:5e:79:eb:ba:1a:
         2d:69:80:7d:ed:32:c4:6a:3e:63:0b:d3:64:e3:91:ef:e2:84:
         d3:56:6f:dc:be:ef:c2:52:f9:10:76:91:e1:cf:6f:34:25:b0:
         e7:fb:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:14 2026 by rpki-client