Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/32372e35302e31362e302f32302d3234203d3e20313331313131.roa
File:                     32372e35302e31362e302f32302d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=
Subject key identifier:   68:74:F4:B0:B9:DF:87:01:55:C5:F5:AA:6B:63:31:DE:C7:9D:B8:40
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       4A5C40B67A45327FD0AA0CEDC13F305DCA40C8BC
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/32372e35302e31362e302f32302d3234203d3e20313331313131.roa
Signing time:             Tue 10 Jun 2025 12:00:01 +0000
ROA not before:           Tue 10 Jun 2025 11:55:01 +0000
ROA not after:            Tue 09 Jun 2026 12:00:01 +0000
asID:                     131111
IP address blocks:        27.50.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 21:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5c:40:b6:7a:45:32:7f:d0:aa:0c:ed:c1:3f:30:5d:ca:40:c8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Jun 10 11:55:01 2025 GMT
            Not After : Jun  9 12:00:01 2026 GMT
        Subject: CN=6874F4B0B9DF870155C5F5AA6B6331DEC79DB840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:0a:52:c2:ae:8f:2c:bc:8b:7b:3d:7e:1b:
                    8c:f4:1a:ac:82:16:c9:7a:b7:dd:b1:cb:0d:0e:6f:
                    90:b9:25:70:e8:f5:7d:69:89:ba:a0:f7:a3:fd:e6:
                    d6:75:58:4b:88:29:db:80:9a:fc:8c:5c:cf:10:2e:
                    6e:93:9d:ad:b8:f6:90:66:19:93:8a:bd:1a:a8:4d:
                    dd:b2:eb:34:23:d7:5b:ee:26:2c:cc:63:a6:17:94:
                    46:34:5d:d6:fa:b6:59:82:5c:71:d9:8d:b4:b0:df:
                    28:a4:33:7f:83:83:6c:aa:9a:50:10:cd:73:7b:f2:
                    23:5f:37:8d:4a:73:43:83:66:72:7b:6c:98:7b:2b:
                    36:07:05:80:6c:b6:4a:41:ba:d0:c2:ab:c5:53:f2:
                    a1:a6:eb:50:c3:a0:49:cd:f0:b5:80:86:c3:4c:1f:
                    7e:d7:90:26:5d:d8:ae:9c:c0:3b:64:23:d6:73:1c:
                    94:0b:54:b9:0f:f4:36:7f:dc:c6:28:be:7e:95:e6:
                    18:e4:ce:c0:22:45:4b:69:0d:4e:6c:65:84:62:a3:
                    29:38:1a:02:16:82:3d:90:d2:8a:f0:3b:d1:38:89:
                    cb:84:cc:d8:91:52:3c:fa:98:cf:65:08:14:96:a8:
                    23:85:58:7d:35:b1:f2:83:d7:8c:4d:59:2f:19:ee:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:F4:B0:B9:DF:87:01:55:C5:F5:AA:6B:63:31:DE:C7:9D:B8:40
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/32372e35302e31362e302f32302d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:45:6a:50:c5:6e:82:f4:a9:a5:71:13:8a:e4:0a:1e:09:78:
         67:3b:ee:f0:69:60:b4:c5:ba:6b:98:9f:00:8e:34:4e:6b:5c:
         a7:cc:84:f0:33:08:25:f7:73:f6:c7:ab:c6:ee:63:b0:a0:35:
         a9:18:e1:a8:0b:8a:0c:54:04:02:78:d5:06:10:78:5b:43:fb:
         fa:fb:b3:f1:85:05:74:6d:93:73:16:07:18:67:89:23:e1:7f:
         23:41:93:79:a6:f6:d3:ea:e0:93:90:18:32:2b:bb:2e:78:7a:
         63:f8:b0:bb:93:a6:6c:2f:52:c7:04:3b:da:a7:3e:40:6f:c2:
         b5:81:34:de:f1:5e:9f:77:f7:a4:2d:4a:d5:2a:99:04:65:bb:
         fb:d8:41:7e:8b:08:04:f0:f0:de:e4:0e:fe:95:cb:9d:0e:f4:
         25:e3:74:1a:08:04:b3:07:1b:53:61:5d:b9:4a:f1:70:43:02:
         2c:4a:de:b9:a4:f1:2d:48:75:4d:d4:1f:5d:40:06:ac:39:6f:
         ec:81:32:ab:49:05:78:ea:f7:f6:18:af:2a:3c:ff:e0:42:af:
         59:cc:16:95:31:43:60:fc:54:1a:be:2b:08:00:52:1e:03:07:
         08:8c:b7:71:b4:50:6a:57:81:dc:58:06:61:8a:93:74:72:c1:
         1f:66:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:37:42 2025 by rpki-client