Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55701.roa
File:                     AS55701.roa (raw, json)
Hash identifier:          vISpfxGIE5LAUbRb/fz+I9GUzFrY4m4s8aO+qnNq/fI=
Subject key identifier:   D0:23:95:79:E0:6A:0F:85:E4:08:6B:79:8D:F4:B6:F6:83:2F:83:35
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       345DF7CB131D44C3836728C081AAD320226FEC54
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55701.roa
Signing time:             Mon 27 Jul 2026 03:19:33 +0000
ROA not before:           Mon 27 Jul 2026 03:14:33 +0000
ROA not after:            Mon 26 Jul 2027 03:19:33 +0000
asID:                     55701
IP address blocks:        103.163.160.0/24 maxlen: 24
                          103.213.131.0/24 maxlen: 24
                          110.50.82.0/24 maxlen: 24
                          2405:b900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 00:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5d:f7:cb:13:1d:44:c3:83:67:28:c0:81:aa:d3:20:22:6f:ec:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Jul 27 03:14:33 2026 GMT
            Not After : Jul 26 03:19:33 2027 GMT
        Subject: CN=D0239579E06A0F85E4086B798DF4B6F6832F8335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:46:66:36:77:a9:07:1c:3a:02:b4:e9:b6:
                    f2:d5:91:6f:d3:05:d2:7b:b3:7a:dd:c4:1a:be:fa:
                    cb:36:7e:e8:bd:f4:81:bc:66:94:26:d5:68:0a:5e:
                    78:1a:63:b4:24:c0:79:df:35:dc:ef:31:77:7c:f8:
                    cd:92:f2:74:55:34:25:92:aa:9c:0d:4c:54:b1:68:
                    2f:69:31:8b:f1:8b:a4:35:1e:27:3a:57:c7:bd:79:
                    3f:8a:d5:3c:33:3d:be:b1:a8:92:6d:c1:d7:08:12:
                    35:f3:7b:e1:0c:4d:f2:b8:d6:1a:ca:7b:c0:14:a1:
                    e2:08:9b:00:1b:70:dd:6f:32:43:cf:5d:4d:a1:b1:
                    f3:cd:92:a8:57:69:c4:ef:51:63:93:2b:45:10:25:
                    92:a9:0e:44:24:8b:aa:74:bd:84:a3:b0:cc:c6:4e:
                    7c:6f:ab:f1:bd:0d:5e:3e:7e:aa:97:b3:a0:f0:d2:
                    2f:f3:ee:6c:90:e7:4a:91:e9:dd:75:57:7b:98:a9:
                    29:57:83:8b:9c:16:92:6a:09:07:f2:ac:32:74:54:
                    fc:77:65:7d:fa:29:f8:c9:95:4a:b5:6b:86:15:b4:
                    fd:dd:a0:4b:b1:19:77:cb:07:f2:9d:d1:27:7c:bf:
                    47:3a:6e:6e:5b:e3:8b:b1:33:9f:7f:b5:e9:5b:b9:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:23:95:79:E0:6A:0F:85:E4:08:6B:79:8D:F4:B6:F6:83:2F:83:35
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55701.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.160.0/24
                  103.213.131.0/24
                  110.50.82.0/24
                IPv6:
                  2405:b900::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:b5:63:20:fe:b8:bf:05:84:a9:45:58:50:e6:78:da:ec:
         74:be:66:fc:7f:bc:10:a1:16:23:a3:32:00:11:15:ed:69:e0:
         71:91:dc:a3:d9:81:58:70:82:bc:83:7b:61:89:c3:69:e1:e0:
         7e:86:4e:28:39:a3:cd:fe:48:9d:65:44:a6:56:27:30:23:39:
         bb:8a:fa:b0:75:88:9c:42:23:0e:a0:29:77:96:b0:c1:97:61:
         ad:7e:2e:91:b8:46:53:62:2d:75:86:1f:12:12:48:be:4a:96:
         cb:da:c1:79:fc:11:85:d1:69:21:07:7c:e2:9c:a6:f6:32:a3:
         a5:64:90:59:e2:62:31:10:b6:42:78:44:db:4a:d4:f5:2f:67:
         79:12:4a:bf:47:fa:14:31:8b:8d:ff:af:ef:ea:6a:fd:f3:43:
         89:93:e7:c7:d1:48:dd:61:d0:2e:1f:ad:42:b3:e1:0b:c6:36:
         11:b3:7d:95:3e:b0:95:63:65:c4:8e:6f:b2:4f:cb:c3:28:2f:
         db:f3:4f:0e:b7:07:12:8a:b2:87:14:1b:61:68:09:80:d5:d7:
         d9:c9:26:6b:60:59:fd:81:90:6b:1f:d9:70:a1:c1:79:39:6f:
         06:e5:86:05:14:43:2f:6d:3e:6f:aa:42:2a:9e:49:d1:be:4b:
         65:a6:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 03:59:29 2026 by rpki-client