Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38302e302f32342d3234203d3e203535363532.roa
File:                     32372e3132312e38302e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier:          0LRxbu/86kZstCrhrFM+xHSikcX960D6ea8IptSkGsE=
Subject key identifier:   96:08:95:4E:24:F9:AD:16:EF:39:42:50:3F:62:28:68:4F:AE:30:C1
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       7997D5ADA38EFA7670223EAA68A75BC9215BB258
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38302e302f32342d3234203d3e203535363532.roa
Signing time:             Sat 02 Aug 2025 05:00:00 +0000
ROA not before:           Sat 02 Aug 2025 04:55:00 +0000
ROA not after:            Sat 01 Aug 2026 05:00:00 +0000
asID:                     55652
IP address blocks:        27.121.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 21:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:97:d5:ad:a3:8e:fa:76:70:22:3e:aa:68:a7:5b:c9:21:5b:b2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Aug  2 04:55:00 2025 GMT
            Not After : Aug  1 05:00:00 2026 GMT
        Subject: CN=9608954E24F9AD16EF3942503F6228684FAE30C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:55:8a:b3:8f:f4:a2:8d:bc:2c:a9:d0:00:
                    83:ee:bd:32:f6:53:f3:ab:42:c3:c9:77:70:4b:6d:
                    c2:40:77:9c:24:25:c1:de:a8:fa:28:11:5e:01:78:
                    c5:6f:c9:31:55:00:96:15:15:45:ef:a7:9f:25:dc:
                    64:88:c4:93:e5:00:f0:e2:12:06:13:fa:f2:b7:ab:
                    ec:3b:9c:55:e5:03:af:a7:68:27:40:45:2d:d9:1f:
                    59:0e:75:63:22:d5:8c:3d:ef:a7:22:2a:0d:82:44:
                    97:99:53:ea:a9:ef:fe:26:8b:12:e6:e1:df:9f:79:
                    67:65:23:51:d9:05:65:94:a0:27:9c:46:2b:2c:c5:
                    70:43:2b:70:36:27:09:ae:68:18:b1:b1:ed:5f:ac:
                    45:ce:db:c9:f0:79:dc:8e:c6:de:d6:91:96:80:3d:
                    cb:da:9e:3e:5b:89:c4:31:c1:54:b3:7c:b1:02:bd:
                    1d:8b:03:55:09:c0:c4:d4:8a:3f:79:df:9d:ae:39:
                    ea:7b:09:f5:50:ac:2b:0c:3a:2e:5b:4a:f0:7d:ad:
                    e8:99:bd:dd:2a:03:be:e5:b7:74:dd:43:19:ac:71:
                    b3:d0:71:7a:34:61:db:4c:2b:38:86:c1:60:1a:15:
                    a4:6e:20:a0:6c:4c:e9:10:d0:ce:b2:0d:88:c2:96:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:08:95:4E:24:F9:AD:16:EF:39:42:50:3F:62:28:68:4F:AE:30:C1
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38302e302f32342d3234203d3e203535363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:29:eb:49:3b:93:73:7b:f1:01:3f:d0:46:76:13:f8:a2:47:
         9b:55:af:71:79:e6:d0:be:4b:bb:3b:7c:e7:a2:dc:71:38:a1:
         c7:8f:b0:c6:c2:f9:fa:62:53:e0:f0:8d:68:da:30:55:58:4b:
         c6:de:b7:96:02:94:5b:9c:12:06:31:67:27:a1:80:86:ac:6f:
         c9:af:38:96:bd:09:e1:26:8d:26:01:f7:7c:f6:8b:46:18:28:
         20:5b:86:1f:19:a1:e4:9a:95:dd:6f:bd:4d:b5:f1:fa:dd:1b:
         07:e8:c8:af:05:81:f3:86:7d:e8:4b:0b:a4:11:98:8e:f4:27:
         a9:6c:1c:b9:fc:3c:3b:7f:32:33:59:83:2e:b1:56:ed:f6:28:
         37:9f:ab:e5:06:a3:cd:62:9c:0e:a1:c1:ef:f9:c6:73:ef:47:
         00:4c:76:bc:88:6e:cd:8a:54:d5:0d:61:05:ee:4f:3c:4e:d8:
         28:f9:55:93:53:ff:52:35:58:3c:17:af:f4:34:5c:4b:f0:d2:
         65:da:ed:c3:9b:41:81:a6:c2:4d:aa:b2:c6:b4:4c:0e:a7:f6:
         9e:b6:c0:e2:74:3e:1b:26:30:f5:78:5b:0b:2b:c8:5d:e7:b7:
         65:b0:18:08:51:1a:9a:00:e8:0f:ee:a4:46:68:a9:3d:10:8a:
         27:cc:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:07 2025 by rpki-client