Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa
File:                     32372e3132312e38312e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier:          KPO8Dur+z9GVaz2KZy/0xQJy9l93ayQwCwTcViUocP0=
Subject key identifier:   C8:E9:84:3F:B8:ED:A1:31:25:40:EF:D8:81:68:4C:44:4C:EB:AE:17
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       62BC526FDD8BE6D94A878C97CEF7D69EEFC77DE3
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa
Signing time:             Sat 02 Aug 2025 04:00:00 +0000
ROA not before:           Sat 02 Aug 2025 03:55:00 +0000
ROA not after:            Sat 01 Aug 2026 04:00:00 +0000
asID:                     55652
IP address blocks:        27.121.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 21:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bc:52:6f:dd:8b:e6:d9:4a:87:8c:97:ce:f7:d6:9e:ef:c7:7d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Aug  2 03:55:00 2025 GMT
            Not After : Aug  1 04:00:00 2026 GMT
        Subject: CN=C8E9843FB8EDA1312540EFD881684C444CEBAE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:b1:cd:35:fd:0e:9f:c2:09:7b:d9:9d:0e:
                    df:bd:cc:6e:43:64:0b:62:dd:94:42:19:78:04:3a:
                    1f:46:5c:27:d5:33:29:34:ac:d0:48:2e:5d:92:cd:
                    cf:ec:36:85:ec:8b:2c:8a:36:c7:ad:97:ca:40:11:
                    8b:ce:b3:0f:05:11:46:64:2f:c9:ba:2f:8a:1d:7b:
                    d0:20:3e:7a:e3:cf:93:8b:06:ac:98:df:15:2d:c6:
                    b4:b8:00:1d:45:3d:38:7b:97:38:96:c3:39:0e:a4:
                    ee:9d:b6:d7:bf:9b:b3:70:47:dd:79:99:82:11:11:
                    d9:e6:44:8b:6b:d8:0f:6b:da:ec:69:48:8b:e3:fb:
                    2a:c2:da:76:af:72:07:3a:e4:88:b1:af:c0:c0:2c:
                    58:37:e5:4f:73:c6:5e:c8:61:d6:fe:be:40:54:ff:
                    d8:6a:df:3b:a2:2b:48:f0:a5:df:15:36:cc:93:0d:
                    00:db:c4:36:ef:5f:4d:08:52:f8:9c:3b:43:64:da:
                    1d:dc:38:6e:b2:b4:b2:7b:83:e9:ba:73:cf:55:a3:
                    18:fc:6f:d8:19:b6:34:57:8a:2c:69:99:fd:7f:21:
                    e0:b6:5e:42:53:ac:b6:9e:f4:b5:5f:c9:6c:70:ac:
                    88:e7:46:44:ff:44:84:e9:d9:74:b6:8e:be:55:37:
                    18:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:84:3F:B8:ED:A1:31:25:40:EF:D8:81:68:4C:44:4C:EB:AE:17
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:4e:c4:6b:80:bc:5f:6d:7b:ea:df:5e:80:1f:dc:60:74:
         ad:05:e7:04:46:34:55:93:d3:61:7f:a4:3a:09:dd:b1:72:99:
         f0:28:b9:21:e9:ec:68:d6:48:ef:96:87:07:a2:71:58:07:19:
         e4:30:1c:ec:3b:60:26:c4:e1:17:88:a5:1f:a0:fd:c1:8e:8c:
         51:62:d0:4d:70:bf:0d:11:91:df:a8:48:28:b9:b6:b1:2b:a7:
         d9:35:88:9a:9f:d3:ba:3e:42:68:83:db:89:ea:ee:b4:3f:42:
         21:5b:fb:fd:71:88:56:99:6e:bb:15:17:5e:cf:be:8b:45:44:
         59:e3:21:ca:c5:b5:d6:36:43:23:dd:da:de:b6:85:30:90:55:
         d7:c8:0c:38:a7:18:f4:b9:c8:7f:84:7c:75:9d:6c:8f:3f:3a:
         b2:04:ba:e6:22:14:92:7e:a6:77:38:e3:77:1b:c7:ff:e9:bc:
         2e:76:09:c4:8d:a4:9d:eb:aa:e6:c4:73:cb:30:29:23:12:58:
         a3:c9:b1:13:50:01:bd:49:2a:ee:98:30:c2:ea:d0:49:c2:63:
         c9:18:e8:fd:62:75:cc:eb:83:4a:09:00:eb:9e:92:a8:1b:67:
         75:8d:4c:73:03:42:a6:6f:fb:45:e9:04:bd:33:56:6f:7c:a2:
         a2:87:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:55:38 2025 by rpki-client