Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203539313536.roa
File:                     32372e35342e3131392e302f32342d3234203d3e203539313536.roa (raw, json)
Hash identifier:          FFdVUfyBOgcCu6xdP2lWaBNlyM1ulBT3IMOjFrJjnnM=
Subject key identifier:   71:3F:0E:27:CF:73:11:83:53:D1:4B:19:96:54:17:2A:88:27:74:F7
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       3D00C255C347C521947EE380C29AE5F378903AA7
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203539313536.roa
Signing time:             Fri 09 May 2025 00:53:50 +0000
ROA not before:           Fri 09 May 2025 00:48:50 +0000
ROA not after:            Fri 08 May 2026 00:53:50 +0000
asID:                     59156
IP address blocks:        27.54.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:00:c2:55:c3:47:c5:21:94:7e:e3:80:c2:9a:e5:f3:78:90:3a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: May  9 00:48:50 2025 GMT
            Not After : May  8 00:53:50 2026 GMT
        Subject: CN=713F0E27CF73118353D14B199654172A882774F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:d1:64:1d:0e:c1:0c:b1:cb:b9:2e:91:01:
                    81:d5:47:5a:d3:04:76:15:0b:b5:d9:83:d0:bd:bf:
                    fe:d7:13:20:f3:fa:67:a9:18:6e:cb:ac:d8:85:eb:
                    0e:28:9b:6c:6c:42:6c:d0:2d:0b:1b:f7:8b:96:83:
                    58:b6:d5:7d:0a:b8:d5:cf:9a:51:e3:b9:f5:f0:87:
                    b9:a8:e3:c4:d9:6e:57:df:3e:13:bf:ee:82:ff:81:
                    c4:0d:86:31:9e:0f:90:7f:70:e5:a7:27:4a:32:f8:
                    e7:ea:a6:9c:3c:90:b7:e4:59:3e:40:56:08:b1:d0:
                    b9:4a:7c:6c:4a:6a:97:2c:ca:0a:33:a6:bb:fa:ee:
                    f5:91:eb:1b:09:25:06:00:c7:f7:06:8a:a9:15:17:
                    82:29:d3:55:30:ec:99:41:b1:a0:a5:a4:f5:c0:5b:
                    25:25:bb:19:6c:0f:5c:8f:5a:a5:c0:2e:49:bb:0e:
                    49:b0:aa:d1:f4:05:e7:e9:3f:4d:22:7e:f3:4e:54:
                    d3:c5:75:d3:01:3f:7d:e8:26:f3:62:eb:16:e4:1d:
                    32:52:91:f2:7b:4b:68:b7:b5:eb:fc:0d:9f:58:2d:
                    9e:36:eb:7f:85:c5:89:93:ca:7a:e3:30:76:57:5b:
                    40:3c:c7:dd:79:84:5f:b1:99:47:1d:28:10:1c:82:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3F:0E:27:CF:73:11:83:53:D1:4B:19:96:54:17:2A:88:27:74:F7
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131392e302f32342d3234203d3e203539313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d8:43:8b:8f:00:d5:b9:23:e9:2f:fa:90:eb:e1:e4:d7:a7:
         54:f8:b3:6d:ae:80:5b:ec:54:96:0d:20:5d:df:27:f0:45:39:
         d1:80:6a:91:dc:fb:d3:0b:08:80:60:0a:e1:96:61:fe:60:03:
         4a:b7:1d:9c:93:3c:cb:da:86:8e:32:28:c6:5c:93:85:f6:2e:
         44:ef:f2:c6:0a:10:b2:c8:ca:50:93:1f:ac:cf:29:e7:68:e8:
         fa:c9:15:9d:cc:2e:08:3d:a6:35:c0:d4:ec:b4:64:1a:ff:7d:
         f7:41:85:bf:47:57:ac:e7:0f:a8:bc:8e:7e:89:30:bb:53:d7:
         0e:e1:3e:1f:f4:19:6f:61:0d:24:e6:2d:05:9b:79:66:c5:83:
         3c:69:52:2c:99:e7:43:90:e0:2a:35:f6:25:8e:d8:57:9b:e0:
         a2:e7:f0:d0:61:2f:10:83:3e:94:59:10:3c:ed:bf:68:cf:85:
         dc:ec:0e:6d:c4:42:af:84:55:25:e0:6e:0e:03:ae:d3:d1:f7:
         7a:88:89:78:0c:d5:7d:58:54:59:f9:be:30:ba:ba:be:44:aa:
         b8:f7:31:fa:2a:d8:04:e3:96:66:c8:50:9f:81:ea:ce:81:18:
         a3:a6:d2:10:ff:47:4e:20:21:32:66:58:82:fa:10:10:b2:c4:
         42:24:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:17 2025 by rpki-client