Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa
File:                     32372e302e3139382e302f32342d3234203d3e20313338313138.roa (raw, json)
Hash identifier:          XHdap6W3d5u0ibfgBAdiyStR1QC+6Ivne/gllUu/Rqw=
Subject key identifier:   92:05:F9:37:E0:BF:94:9D:AE:AC:5D:11:32:0C:93:5B:BD:4B:05:D1
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       21B0E0189754D135B9898DE479A9A8A9CB8CB180
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa
Signing time:             Tue 07 Apr 2026 16:00:00 +0000
ROA not before:           Tue 07 Apr 2026 15:55:00 +0000
ROA not after:            Tue 06 Apr 2027 16:00:00 +0000
asID:                     138118
IP address blocks:        27.0.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
                          rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 14:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b0:e0:18:97:54:d1:35:b9:89:8d:e4:79:a9:a8:a9:cb:8c:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: Apr  7 15:55:00 2026 GMT
            Not After : Apr  6 16:00:00 2027 GMT
        Subject: CN=9205F937E0BF949DAEAC5D11320C935BBD4B05D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:45:25:a7:17:80:06:fb:dd:e6:f5:4d:c4:
                    0a:2a:14:1d:db:7b:e7:8e:8d:20:bc:f1:08:35:b5:
                    af:0e:4a:ab:0d:15:ab:75:d2:1a:40:04:64:a7:1c:
                    2d:3d:a6:de:bd:25:3a:13:eb:95:e1:72:d6:fb:7b:
                    9f:43:6a:22:2b:73:dd:c0:50:66:35:07:0f:ff:a5:
                    8a:de:44:d9:86:e6:b7:81:ea:5a:75:e1:9e:69:ce:
                    08:cc:4e:ac:a7:cd:78:d5:18:84:5a:3b:45:b5:26:
                    be:91:25:d2:db:46:1e:13:2c:f0:e5:ee:12:cb:5d:
                    c9:1d:5b:56:03:04:b9:8f:c0:ef:32:ff:b9:c4:0c:
                    1f:a2:fd:71:87:38:e9:7f:fb:88:8d:73:e5:e6:60:
                    32:79:03:bd:f3:b6:e4:59:d8:77:6e:56:fa:fb:49:
                    47:c6:68:94:d6:7c:18:ad:37:5d:f7:b0:fd:4c:67:
                    0b:de:bb:3c:a2:1e:4b:f5:68:a9:b6:18:bf:c6:b2:
                    94:c7:7a:3a:51:16:8c:bc:51:8e:bf:52:d8:76:0b:
                    dd:0e:ce:96:94:dd:7e:3d:44:97:c7:7b:bd:9f:17:
                    f9:f4:96:2f:84:28:98:15:fa:64:55:68:95:70:7b:
                    8d:5b:46:6e:f0:ff:c1:35:ec:31:8e:ea:af:e0:78:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:05:F9:37:E0:BF:94:9D:AE:AC:5D:11:32:0C:93:5B:BD:4B:05:D1
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:90:80:55:a9:dc:01:cc:dc:8c:59:3b:15:52:18:16:ac:40:
         17:03:59:83:76:00:04:c2:d9:ec:54:e9:2b:76:96:d3:4b:af:
         1c:e8:6c:bc:07:7b:95:c1:8b:68:b0:45:2d:f9:7d:4a:a3:db:
         e1:3e:05:ee:50:bd:06:ab:fe:8c:99:8a:d5:5e:f5:d2:e3:03:
         42:aa:af:f9:b2:d9:c8:4d:e4:72:f5:94:bd:96:0e:09:ab:4f:
         4f:f1:c9:30:44:b0:62:b1:8e:a1:69:e8:9d:47:52:5a:51:57:
         18:b0:a7:24:3e:76:7b:e4:ad:f9:56:c4:dd:6d:2b:89:86:a8:
         bc:4c:bb:35:7b:69:96:be:77:56:8a:04:d5:68:e6:c6:43:00:
         df:8e:a1:a8:82:4c:1a:fe:23:cf:48:3e:c3:01:26:ba:17:d7:
         63:42:f3:08:ef:d6:6c:92:e3:85:fb:18:f3:97:44:d1:b6:f7:
         db:cd:36:76:ca:a9:bc:41:ed:cb:90:e8:10:d8:ef:ff:3e:b0:
         eb:3a:16:7a:81:6a:1c:3c:8d:4a:64:85:25:eb:28:79:de:45:
         87:63:95:48:bc:dd:40:47:bd:cc:b8:fd:26:a5:b5:d2:a6:10:
         91:70:74:1a:fa:9a:a4:fa:54:f5:39:49:91:6a:21:a1:0d:56:
         40:4f:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:33:09 2026 by rpki-client