Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131382e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131382e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          LkPZiBIq7sZ1n7F+kqNTC/EhqsuXCtyoaFCBd4DVaZk=
Subject key identifier:   22:A7:72:DB:D3:8A:47:78:5C:48:D0:F4:AF:91:60:76:2A:34:C6:66
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       51E2CC31D2CB0F2BA9553FFCFA7D0537856FA6F4
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131382e302f32342d3234203d3e203538333936.roa
Signing time:             Mon 02 Jun 2025 02:04:45 +0000
ROA not before:           Mon 02 Jun 2025 01:59:45 +0000
ROA not after:            Mon 01 Jun 2026 02:04:45 +0000
asID:                     58396
IP address blocks:        27.54.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 12:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e2:cc:31:d2:cb:0f:2b:a9:55:3f:fc:fa:7d:05:37:85:6f:a6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Jun  2 01:59:45 2025 GMT
            Not After : Jun  1 02:04:45 2026 GMT
        Subject: CN=22A772DBD38A47785C48D0F4AF9160762A34C666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:3d:62:8f:8e:0c:ec:fc:d7:a5:7a:90:3a:
                    eb:45:21:a6:24:76:1f:9d:7f:a4:5b:93:e1:0d:d5:
                    58:63:a5:bc:90:57:e8:ff:99:e1:7f:2e:7d:e2:3e:
                    75:dd:58:df:82:0d:ab:1c:d6:51:33:0e:aa:ed:f8:
                    ae:83:2d:56:99:84:a1:3b:8f:0b:3f:3a:5c:a2:ed:
                    93:e4:4c:93:ef:49:68:af:70:04:a3:36:d9:66:43:
                    60:5f:49:6f:71:d3:94:d2:66:06:7a:45:92:d9:92:
                    7e:59:07:1e:57:fc:1b:b0:ba:90:83:5f:b6:2d:73:
                    7f:59:65:be:c3:82:9b:83:73:c1:28:4c:bd:df:61:
                    d1:a9:a1:10:46:18:be:bf:74:68:8f:7b:25:63:c3:
                    94:8c:ec:53:c1:87:27:6f:f7:31:4e:0e:68:ce:cf:
                    4f:ea:3b:6d:bb:a4:22:75:ab:a4:26:f5:7f:ee:7f:
                    05:17:9e:97:aa:2d:38:ea:21:fb:0a:98:0e:82:73:
                    41:7f:ce:52:85:0b:6e:99:94:32:9a:58:3b:a5:91:
                    6e:46:7e:2e:05:72:da:fc:50:9a:eb:87:66:22:15:
                    81:b4:90:91:3c:22:03:e7:5c:9b:89:22:36:8d:8e:
                    5c:b6:82:23:ab:1d:9c:13:ad:b5:be:81:8b:67:83:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A7:72:DB:D3:8A:47:78:5C:48:D0:F4:AF:91:60:76:2A:34:C6:66
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131382e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:fc:97:60:0a:db:cc:c6:0d:e5:3e:c8:ac:81:ec:38:44:
         a1:e3:1b:d9:83:e7:cc:ee:20:bb:d2:3f:3f:59:44:cc:14:e0:
         8d:15:67:3c:fe:e3:22:37:4c:14:71:38:0b:70:81:0e:83:fd:
         be:ca:e5:93:06:d8:dd:fc:7b:9e:3a:41:31:2b:96:eb:1f:57:
         70:f4:f4:d2:b7:6f:77:7e:10:b0:b3:d9:dc:5f:5e:f3:f1:03:
         2a:82:67:92:47:a6:10:db:f8:28:c3:a1:e0:78:0b:52:da:99:
         9f:7d:37:cd:a0:40:30:89:05:a1:43:ad:f7:2b:af:a8:b3:de:
         db:13:5f:dd:b8:da:2a:56:6b:45:9c:73:67:5c:0d:42:58:14:
         14:25:4e:30:5d:06:b9:71:de:45:5f:c7:db:90:51:a1:6c:b2:
         12:e4:aa:9c:e0:43:3a:7f:d7:90:50:ac:ff:d6:f7:31:07:e9:
         29:94:a9:8a:e7:36:85:40:8a:c5:af:bb:e0:eb:4e:7f:f9:03:
         a4:2a:1f:1f:1a:e4:62:e5:0b:0f:d5:2d:7b:95:2a:cc:c8:f2:
         f2:59:8e:c8:59:60:ba:ed:43:dc:48:af:3f:b7:b6:87:ca:fb:
         95:14:4d:b5:a2:9b:7b:bf:a2:fb:4d:b2:6c:a7:4a:c2:31:52:
         50:34:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:39 2025 by rpki-client