Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36392e302f32342d3234203d3e203436303633.roa
File:                     32372e3131322e36392e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier:          mAMKTw9FxHeyHppx5JdFbSfkyfyGBYD9cH190RAyriA=
Subject key identifier:   1E:83:67:C5:31:82:96:D0:68:31:05:A2:ED:19:AD:68:FC:21:A2:C0
Certificate issuer:       /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Certificate serial:       796D9811DF2D746E00C4EA6C1841C6693A0EC6FC
Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36392e302f32342d3234203d3e203436303633.roa
Signing time:             Sun 03 May 2026 03:15:20 +0000
ROA not before:           Sun 03 May 2026 03:10:20 +0000
ROA not after:            Sun 02 May 2027 03:15:20 +0000
asID:                     46063
IP address blocks:        27.112.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
                          rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6d:98:11:df:2d:74:6e:00:c4:ea:6c:18:41:c6:69:3a:0e:c6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
        Validity
            Not Before: May  3 03:10:20 2026 GMT
            Not After : May  2 03:15:20 2027 GMT
        Subject: CN=1E8367C5318296D0683105A2ED19AD68FC21A2C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:7d:a2:55:3c:47:4e:72:76:e6:59:c6:60:
                    1b:c6:bb:70:6b:d7:15:26:e6:03:9c:0e:98:11:a6:
                    a4:c8:f5:88:f1:ef:db:a0:7c:15:61:eb:c9:a2:14:
                    77:f0:05:55:d6:6f:59:4e:f2:c3:cb:60:22:e2:01:
                    56:11:76:36:8c:60:fa:8a:d7:d4:7d:61:b5:19:e5:
                    4a:9e:c9:a6:ef:bd:65:cd:52:a6:1e:07:bb:73:39:
                    0f:9b:e5:ac:34:e9:03:fb:eb:ba:5a:54:39:76:54:
                    e1:58:87:51:55:46:0d:b7:db:31:76:a9:26:b4:8d:
                    25:c4:d0:56:dd:c6:84:6c:c3:be:5d:3a:e5:6a:66:
                    2e:c6:36:78:43:c1:b4:40:75:19:88:8a:b3:95:04:
                    8e:07:97:b2:35:d6:6b:35:a3:b2:c4:8d:ca:35:62:
                    9d:83:fa:4a:80:92:c4:49:f8:9f:81:25:20:61:78:
                    7d:f3:ff:50:86:1c:06:4f:3e:98:e0:75:62:ff:9b:
                    79:ef:c5:6f:df:b5:7a:d8:59:5a:71:58:eb:9b:e0:
                    84:f3:c9:7e:9e:2b:47:f8:18:ea:6e:d5:9e:eb:22:
                    7b:8b:2e:dc:68:ce:dd:66:04:6f:0a:05:76:ba:92:
                    38:a6:96:a9:1b:c6:4b:cc:87:f7:8b:1b:d4:46:8d:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:67:C5:31:82:96:D0:68:31:05:A2:ED:19:AD:68:FC:21:A2:C0
            X509v3 Authority Key Identifier:
                keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36392e302f32342d3234203d3e203436303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:83:0d:b0:a9:55:87:5e:86:02:b2:6a:20:70:96:b1:1c:
         4f:03:73:5e:bd:26:d5:6b:38:82:68:a1:3a:4e:ea:60:e2:27:
         74:3f:2f:89:c3:53:19:97:ff:b4:6c:6b:6f:01:2a:f4:72:b3:
         9c:a6:a2:87:66:f8:a6:a5:33:36:3e:0d:0d:60:2e:c2:54:8a:
         0b:f9:7e:3e:b2:2a:08:02:e1:66:69:e0:a7:15:c7:5e:e5:aa:
         e4:7f:1d:eb:15:5e:cf:4e:1f:7b:e5:39:e2:3c:26:09:d0:76:
         5c:bf:a3:76:db:fb:76:d3:4e:1c:01:3e:e5:4f:d1:25:99:bf:
         bd:97:82:80:f2:18:66:58:39:5d:80:cf:52:37:14:b1:09:d2:
         d0:be:40:0a:c3:de:69:76:5d:5d:06:4a:13:53:28:10:fc:80:
         1d:03:f4:7a:af:73:c0:39:47:ce:e1:9d:13:96:3a:da:d6:dc:
         fa:de:47:78:a5:25:f1:ca:16:4d:52:64:a8:7a:96:61:68:75:
         bb:7b:fe:67:fe:26:8d:8f:a9:95:26:07:52:4c:1c:68:31:89:
         52:db:b4:b5:7f:1d:e2:62:d3:58:f1:b5:ee:df:27:4b:56:52:
         5f:bb:5d:84:57:c2:3f:e1:f6:06:d0:0d:a2:c2:c2:64:88:1b:
         dc:f0:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:23 2026 by rpki-client