Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
File:                     32372e3131322e36372e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier:          0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=
Subject key identifier:   BC:C7:D6:81:32:DA:8D:55:FC:F8:36:78:C5:0D:5D:1F:17:52:6F:6D
Certificate issuer:       /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Certificate serial:       44E60CED487CD1B51E18ED33A5733808546BDD69
Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
Signing time:             Sun 03 May 2026 03:15:19 +0000
ROA not before:           Sun 03 May 2026 03:10:19 +0000
ROA not after:            Sun 02 May 2027 03:15:19 +0000
asID:                     46063
IP address blocks:        27.112.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
                          rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e6:0c:ed:48:7c:d1:b5:1e:18:ed:33:a5:73:38:08:54:6b:dd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
        Validity
            Not Before: May  3 03:10:19 2026 GMT
            Not After : May  2 03:15:19 2027 GMT
        Subject: CN=BCC7D68132DA8D55FCF83678C50D5D1F17526F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:92:ca:de:75:07:a9:18:8f:41:cc:97:87:
                    92:e4:cd:3e:fd:4a:1c:09:b8:67:83:15:7b:21:a8:
                    fd:96:4b:34:f9:c5:08:97:92:8f:c8:db:83:9e:53:
                    f0:50:f9:04:eb:31:23:9a:66:31:bf:64:39:72:07:
                    27:a8:7c:1b:49:af:b1:ae:9f:2d:7b:d1:65:8a:42:
                    43:3e:e0:99:91:ae:df:91:40:a1:2e:b1:89:de:8c:
                    c9:32:fa:40:91:e8:cd:52:fd:e9:39:b8:2c:6c:e2:
                    42:87:51:ba:24:16:3c:26:b1:85:ae:c4:76:09:5b:
                    82:ca:91:6a:8f:36:bb:ce:d0:26:30:57:79:82:18:
                    26:87:d2:3a:a5:d8:40:77:5d:04:c9:22:d3:6d:43:
                    f6:db:08:f9:b4:39:e8:1c:d0:da:9b:30:c1:01:65:
                    65:00:9b:39:0f:2c:2c:bc:fd:86:50:31:c0:8a:21:
                    4d:90:4c:a2:b7:cb:ad:da:48:fa:93:1d:05:38:d3:
                    89:2c:9b:70:a3:60:7e:de:5d:12:da:e5:4c:2e:e6:
                    f2:ca:e9:45:a2:40:b8:db:3b:e4:c9:40:35:64:7a:
                    35:1c:a5:e9:13:0e:fc:18:70:a8:07:b1:c2:a7:dc:
                    cb:8f:1d:cb:f9:6a:4e:ab:85:51:e0:c6:ce:89:8b:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C7:D6:81:32:DA:8D:55:FC:F8:36:78:C5:0D:5D:1F:17:52:6F:6D
            X509v3 Authority Key Identifier:
                keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:58:2d:85:3a:71:71:c8:cc:82:32:70:96:6c:76:00:99:
         c9:d0:60:98:73:1e:b9:04:24:2e:b6:3c:e2:81:67:cb:34:69:
         fd:01:6f:78:28:4b:8c:ac:f7:5e:6c:fd:5a:a2:95:86:cb:ef:
         3f:36:65:08:0f:1e:6e:c9:a9:a6:0e:4e:de:78:1c:e0:ef:ec:
         ef:6a:d9:da:d6:0c:db:65:7e:ea:6f:a5:70:8d:5c:99:40:cd:
         6d:33:30:f2:4f:a6:cb:36:a1:db:40:48:55:29:b9:4f:af:a8:
         fe:f2:f4:1f:2a:9f:1e:dc:75:24:95:41:66:3f:b9:c8:f0:e1:
         77:78:60:1b:1f:47:c6:1d:5f:72:bc:8c:e6:60:a4:8d:0b:6a:
         33:fb:4d:88:2d:12:a5:f4:c7:2d:ad:dc:bb:df:2c:83:07:f8:
         69:99:a4:26:03:c0:ee:8b:5a:39:62:37:8f:db:c5:f5:91:b7:
         a4:e2:4f:27:fc:3d:6c:2c:3f:3e:21:95:c0:20:8b:27:19:1c:
         1b:9e:31:eb:e3:1c:1b:45:5d:ba:88:6f:48:21:2f:d8:12:1b:
         9b:59:23:fd:83:2f:22:59:9f:15:98:df:64:ef:8d:f1:82:58:
         68:5c:a2:48:3c:e4:51:de:f7:ef:49:0f:a3:46:63:50:02:e0:
         b9:bf:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:25 2026 by rpki-client