Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55659.roa
File:                     AS55659.roa (raw, json)
Hash identifier:          UxTvgTmVAEHgNpX0HmREyATZG3u8px128zialaYuh8M=
Subject key identifier:   56:36:AD:12:F4:5E:D1:1E:D2:FD:F4:8F:CB:CB:37:24:44:6E:09:0F
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       6B4B03DBC1C098B7208180D133F279CAE05A87C0
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55659.roa
Signing time:             Wed 26 Aug 2026 02:38:55 +0000
ROA not before:           Wed 26 Aug 2026 02:33:55 +0000
ROA not after:            Wed 25 Aug 2027 02:38:55 +0000
asID:                     55659
IP address blocks:        103.28.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4b:03:db:c1:c0:98:b7:20:81:80:d1:33:f2:79:ca:e0:5a:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Aug 26 02:33:55 2026 GMT
            Not After : Aug 25 02:38:55 2027 GMT
        Subject: CN=5636AD12F45ED11ED2FDF48FCBCB3724446E090F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:11:90:11:43:12:1b:54:41:97:50:16:76:
                    6e:38:45:8c:cc:d2:22:4e:26:f2:d3:2e:33:6a:78:
                    5d:17:89:e8:69:d3:fb:42:99:aa:60:89:8d:8d:a4:
                    98:42:0a:85:d2:e5:62:83:d8:9e:2c:92:5a:2b:3e:
                    0f:b2:51:50:61:f5:d7:7c:3b:ab:f6:fe:fc:9f:bb:
                    9c:d2:f7:f8:72:38:ca:ca:20:82:68:f0:b1:b3:8c:
                    78:5c:cc:a1:b2:aa:2e:05:cf:e5:3f:67:85:97:a2:
                    db:cb:2e:99:de:7e:e4:82:0d:c9:41:07:2c:dc:d3:
                    49:8b:dc:d4:c3:5a:df:e7:7b:1c:f9:41:58:24:3d:
                    db:a0:d2:fb:b1:08:8b:9e:69:dd:d7:1d:30:cb:ff:
                    94:6c:f9:19:89:3d:de:31:8b:15:21:40:ba:bb:a1:
                    ab:fa:36:58:48:eb:ce:d3:3b:ce:93:ab:c2:e1:f0:
                    a5:b8:cf:df:4d:1b:45:4c:60:bc:0d:3b:6e:57:f9:
                    9e:dc:b6:7f:87:c7:61:ea:8d:fc:8d:14:8b:4d:5d:
                    d2:6b:50:2d:c4:12:4b:44:7c:89:c2:76:b3:ee:0d:
                    ba:be:b7:4a:31:06:5d:fb:d7:75:54:df:ab:95:f0:
                    f7:c9:61:e0:99:25:45:21:7c:77:fd:15:7c:0a:b6:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:36:AD:12:F4:5E:D1:1E:D2:FD:F4:8F:CB:CB:37:24:44:6E:09:0F
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55659.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:52:e7:b2:2a:34:24:b1:fc:dc:21:2f:3b:10:87:1f:e7:22:
         97:14:4a:46:f7:be:db:00:ec:39:cf:59:de:ed:75:87:bd:94:
         2b:62:8b:9c:1f:f2:ef:4b:1e:50:08:e5:fd:a6:94:d6:c3:a0:
         70:cb:c3:7b:ca:98:ec:4f:95:1b:ce:4c:16:36:c4:bd:4d:9b:
         aa:9d:90:98:48:73:23:08:6e:e2:a3:82:84:9a:d2:49:6c:75:
         b4:2b:27:a9:3d:f9:ae:e0:f3:ae:86:35:67:65:1b:8d:69:88:
         f2:01:87:fb:44:68:9f:9c:b6:a1:c2:4f:bf:4f:1c:b2:63:cd:
         3e:04:fe:88:da:c4:0b:a1:6b:93:34:ef:14:57:39:1f:c6:5a:
         fd:6c:38:24:88:f2:56:c2:52:92:0f:86:e1:91:0c:61:ca:61:
         30:1f:8a:8e:b5:88:10:f4:c5:bf:5e:05:e8:4b:28:f6:65:72:
         a1:c5:76:d6:f5:14:91:6d:08:46:76:af:cd:27:01:f9:24:7e:
         64:82:43:c1:60:ee:b1:d9:49:a0:bf:eb:ff:b1:04:17:b4:12:
         d4:1f:e3:84:b2:0c:b1:64:5a:9c:a6:ff:b5:e4:94:7b:cd:04:
         dc:cf:3a:f9:30:66:51:83:d0:ed:e0:c4:7a:d7:cf:53:75:3e:
         d4:68:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:53:09 2026 by rpki-client