Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa
File:                     32372e3133312e352e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          mCq1LhkCzWrOGhG5MbyRNiclzoQcIesGYCPt0y/Ulhw=
Subject key identifier:   A2:1A:9E:86:32:96:6A:8A:4A:83:45:4A:86:14:E3:0C:F0:42:50:7D
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       024D252CBC5726685CE2A095096E728FB34FD3D5
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa
Signing time:             Tue 03 Jun 2025 02:02:58 +0000
ROA not before:           Tue 03 Jun 2025 01:57:58 +0000
ROA not after:            Tue 02 Jun 2026 02:02:58 +0000
asID:                     38753
IP address blocks:        27.131.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 01:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4d:25:2c:bc:57:26:68:5c:e2:a0:95:09:6e:72:8f:b3:4f:d3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jun  3 01:57:58 2025 GMT
            Not After : Jun  2 02:02:58 2026 GMT
        Subject: CN=A21A9E8632966A8A4A83454A8614E30CF042507D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:b3:a2:49:7d:ae:d6:00:8d:41:46:6c:06:
                    ce:a9:cc:a1:c9:e1:f8:7b:ba:61:a8:d6:ab:bc:9a:
                    63:a4:49:c2:68:39:5b:ba:df:ce:5b:39:6b:12:66:
                    31:8c:c8:b6:78:42:76:ab:7b:60:b2:ab:d3:d5:d7:
                    42:74:52:8a:f4:ad:65:1c:75:5c:34:75:f6:8d:b4:
                    84:ab:55:c8:ce:8c:d0:5f:04:7d:3d:23:10:da:3b:
                    ba:93:76:bf:e7:90:c2:a3:3f:34:a3:2e:fb:09:49:
                    59:c3:72:ab:d5:b9:1c:8a:30:d9:de:c2:f3:86:55:
                    4d:d7:cd:e2:b3:54:63:34:67:31:d1:c6:c0:e7:37:
                    97:5b:aa:93:ec:30:3a:0c:97:34:b0:97:f9:f7:ef:
                    a5:89:de:32:cd:d2:86:52:cd:19:ad:0d:b7:ba:57:
                    e1:bc:f9:05:55:f1:73:27:2d:0b:09:eb:46:f0:fc:
                    d7:19:a2:ad:26:0f:7e:36:87:18:9e:ac:14:cd:93:
                    36:2f:88:2c:a9:17:21:77:d4:3e:6d:88:94:99:33:
                    d6:ae:0f:26:93:3e:03:44:45:fd:ba:5e:06:7c:ac:
                    59:7f:34:2d:c7:07:d7:65:c2:4d:70:c5:55:d2:01:
                    ff:d6:a6:1d:2a:f4:9a:fb:d1:ac:c5:8c:73:a9:f5:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1A:9E:86:32:96:6A:8A:4A:83:45:4A:86:14:E3:0C:F0:42:50:7D
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:95:4d:bf:06:8a:81:5f:4f:d6:cc:fe:b8:52:0f:13:d6:a7:
         32:90:be:de:95:85:59:35:07:3c:06:f9:d9:0e:1c:7c:4e:0e:
         45:85:fa:5a:b1:77:69:26:84:28:a5:e8:a0:de:78:5a:bb:a1:
         b0:58:61:cd:69:8b:af:2f:a4:ff:18:28:e1:16:8f:84:9c:e2:
         f8:9c:65:66:30:20:23:53:73:a1:a1:21:c0:56:cb:27:0b:d2:
         16:1e:74:82:17:79:12:e9:f1:23:24:62:d3:fc:ad:01:84:e1:
         d0:fd:2d:f7:7d:f7:d2:87:3f:a4:be:ed:d3:3a:6d:2b:40:93:
         e9:15:d9:f1:31:9e:7d:81:41:51:08:47:56:5d:f4:d2:f2:17:
         be:f8:7e:db:07:21:64:b7:9a:6a:ed:9c:c0:57:03:42:5f:20:
         3c:bf:e2:57:ff:ad:8f:37:3a:be:6a:28:2f:2d:8c:ac:d8:12:
         68:e4:77:67:41:59:e5:94:87:92:81:f2:49:8f:0b:1b:61:fd:
         57:89:e4:11:76:15:53:62:7a:43:49:d7:45:2b:3a:1d:61:aa:
         bc:64:6d:9e:7a:c3:78:5b:cd:84:7b:d7:25:80:a8:73:1f:02:
         a3:c0:b7:f0:6c:16:b5:cb:04:8e:fc:55:61:97:b7:f7:06:21:
         7f:8c:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:09 2025 by rpki-client