Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131362e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          ivj9M8eoXHgp1f+DI8uSkIeV/AXCKlezKYGlcRHdRug=
Subject key identifier:   3B:BB:D6:E3:DA:9B:BE:49:87:60:FA:56:84:16:27:47:D0:73:00:BD
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       13ADA1BE1C78372CBB2D0FBFF5B99CC26CBF3692
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
Signing time:             Fri 10 Apr 2026 01:00:03 +0000
ROA not before:           Fri 10 Apr 2026 00:55:03 +0000
ROA not after:            Fri 09 Apr 2027 01:00:03 +0000
asID:                     58396
IP address blocks:        27.54.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 08:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ad:a1:be:1c:78:37:2c:bb:2d:0f:bf:f5:b9:9c:c2:6c:bf:36:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Apr 10 00:55:03 2026 GMT
            Not After : Apr  9 01:00:03 2027 GMT
        Subject: CN=3BBBD6E3DA9BBE498760FA5684162747D07300BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:44:0a:c9:fe:d1:c2:b4:b1:1e:af:4c:e0:
                    49:82:a7:d6:94:58:aa:c0:4a:ab:d1:15:da:3b:a5:
                    8a:4b:2e:54:60:bd:35:93:08:47:7e:35:6f:cb:3c:
                    2f:f1:47:8b:2a:70:08:04:22:ff:a5:8a:f4:4c:11:
                    cf:f7:65:bb:dd:c9:84:9a:1e:c8:f5:fe:3b:8b:8d:
                    45:f6:52:40:4f:74:9b:88:2b:f6:cd:df:32:26:6a:
                    c0:c2:a8:40:60:1c:6c:de:52:30:ab:f3:d6:2c:57:
                    5e:61:98:72:df:87:79:09:5d:ed:77:1e:6d:32:02:
                    bc:84:31:fb:87:d9:e3:7b:8b:f0:e2:dc:fb:91:11:
                    8f:60:ac:69:46:4a:56:93:72:54:ae:16:98:cc:cd:
                    83:75:ef:5f:03:31:ce:8b:66:1a:c2:dc:24:11:7f:
                    76:9c:2c:49:61:53:63:52:8a:08:29:51:86:60:67:
                    9d:e8:af:d3:4f:df:b5:de:a1:ad:6e:d1:99:b1:03:
                    48:13:48:90:4a:65:6e:34:ad:96:cb:10:95:96:72:
                    8c:24:d3:73:10:4f:b2:7a:db:81:94:c5:c3:68:0e:
                    29:b8:74:73:a5:d3:ec:5d:bf:e6:e2:ac:2f:7d:ca:
                    54:4b:9a:fd:5f:79:a0:c2:46:e9:de:7f:87:af:1d:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BB:D6:E3:DA:9B:BE:49:87:60:FA:56:84:16:27:47:D0:73:00:BD
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:11:e4:3f:23:98:ef:b4:73:73:aa:fa:7f:66:52:f2:08:
         aa:7d:d8:8d:41:03:77:2e:22:fb:5a:25:3d:5f:84:63:d9:9f:
         40:8d:5d:a7:84:01:f8:ac:56:f2:3b:36:2d:12:84:19:5a:55:
         c3:46:de:88:5c:a9:3a:b5:8e:0d:e8:85:79:e6:17:a8:ba:ba:
         53:64:63:bb:fe:b2:bd:ed:40:63:05:45:ca:86:32:41:25:35:
         89:4a:96:94:44:78:3e:08:62:27:83:b2:27:7d:4b:c8:8e:70:
         66:44:30:93:95:4f:9c:9b:f4:6e:a6:30:a2:2f:28:73:3a:e4:
         61:03:8b:cd:a2:c1:d4:cc:52:ed:e3:d1:a2:fd:d8:6c:75:c2:
         cd:99:a4:29:3d:f4:0b:90:ea:9e:81:41:6f:89:5b:c5:a4:88:
         d9:cc:59:34:41:24:f2:9a:da:c9:93:45:bb:cd:3d:a5:5e:16:
         7b:a9:60:2c:3a:42:e5:90:d0:dc:ec:f1:f0:1b:29:e0:28:ac:
         84:91:7f:01:87:9d:85:b9:44:90:94:8f:02:8a:b1:d9:a3:d4:
         63:ec:88:aa:bf:9b:49:e3:3b:58:d6:91:f9:fa:a0:ca:72:80:
         ba:16:21:ab:5a:60:3d:02:59:12:51:dd:d1:6a:b7:77:5e:bf:
         b7:ea:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:55 2026 by rpki-client