Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63885.roa
File:                     AS63885.roa (raw, json)
Hash identifier:          GmdUvAqcXu2KCo0hyY1OQzADk/5vLb4pAeT4XaTDV/c=
Subject key identifier:   D6:28:1C:E6:78:E2:4A:C9:0E:D4:C7:D8:F0:7F:24:EB:60:FD:B8:5B
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       54849605FF8AC46D068728E003107DB379663939
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63885.roa
Signing time:             Fri 22 May 2026 08:38:19 +0000
ROA not before:           Fri 22 May 2026 08:33:19 +0000
ROA not after:            Fri 21 May 2027 08:38:19 +0000
asID:                     63885
IP address blocks:        103.235.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:84:96:05:ff:8a:c4:6d:06:87:28:e0:03:10:7d:b3:79:66:39:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May 22 08:33:19 2026 GMT
            Not After : May 21 08:38:19 2027 GMT
        Subject: CN=D6281CE678E24AC90ED4C7D8F07F24EB60FDB85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:c8:b4:6e:35:8c:b8:2c:26:ef:b5:7d:e8:
                    d4:47:88:b4:74:0b:c6:b9:cc:18:ad:27:e3:24:34:
                    70:7d:81:3c:f8:65:6a:95:29:be:e9:94:ee:9b:b1:
                    3e:2f:7e:e8:67:3f:aa:3d:4b:bc:88:77:fa:7e:49:
                    2c:8a:0e:1c:91:a9:c2:12:ac:b3:d4:ea:39:1a:8d:
                    ac:47:59:a2:7a:34:04:cf:27:e7:a0:11:c9:98:40:
                    d7:aa:bf:3d:1f:2a:c2:c3:e5:18:28:50:66:7f:d7:
                    5b:86:b4:e1:1c:2a:03:74:10:2b:73:5a:1e:7c:0a:
                    92:4a:a7:27:ab:e0:cc:f7:2c:6e:97:71:b2:d1:80:
                    5e:07:73:df:60:d7:b5:15:9d:1e:a8:50:7f:2a:ea:
                    77:58:e6:f5:fb:02:2f:00:72:eb:3d:4a:2b:c0:37:
                    80:85:10:71:dd:3e:7e:09:90:c2:75:4d:b3:e8:e6:
                    99:c6:ea:fb:b7:72:05:95:dd:21:33:a0:41:27:5c:
                    0c:75:e9:00:7f:34:b4:58:45:cb:48:0d:64:1f:cf:
                    e3:b9:83:13:63:c3:8d:53:4f:b0:70:33:7b:e7:32:
                    8f:c5:3b:57:1a:5c:35:18:aa:83:e7:36:86:cc:7a:
                    5c:3c:de:ea:7f:79:97:2c:ec:41:83:50:9c:08:76:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:1C:E6:78:E2:4A:C9:0E:D4:C7:D8:F0:7F:24:EB:60:FD:B8:5B
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63885.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f9:e5:8e:65:e1:38:dd:91:c6:a5:60:d5:51:37:d7:b7:31:
         f1:61:6d:36:cc:bb:93:36:83:4d:98:58:a2:df:1e:2f:82:6a:
         8e:49:23:3f:44:ce:80:5c:81:07:28:14:c8:23:9c:0d:a8:89:
         55:68:3d:24:a5:15:2d:ee:bb:12:c1:89:42:c1:ea:c8:e5:99:
         80:e7:4f:58:f3:51:ed:a7:df:b6:1d:34:be:ff:3c:65:84:ed:
         13:5f:4b:4f:de:d4:6b:79:7b:a0:d7:1b:f7:ce:57:75:ab:16:
         16:bf:85:4e:ea:6f:89:be:aa:ac:b8:12:dd:51:59:69:82:a1:
         df:fc:ad:f2:2d:7a:32:7a:d1:8e:31:1c:5c:8d:f9:cf:a2:71:
         aa:7c:32:8f:9a:d0:d4:7c:94:6d:b9:91:ca:29:93:0d:bc:6f:
         dd:f6:a6:51:d2:8a:f5:11:f7:a1:88:06:af:91:2e:c8:fd:0c:
         33:3a:bd:f7:49:21:9d:ef:66:1b:59:e3:64:7c:fe:de:e1:8f:
         c7:d7:4a:84:5e:7b:59:46:1b:31:27:e3:32:ae:11:53:c8:18:
         c7:9e:f2:af:b9:f7:11:82:da:2d:fb:b7:9c:d8:1b:75:25:5f:
         62:d9:c6:2c:02:07:fe:51:3e:d8:52:73:c2:41:dd:b6:61:20:
         b3:35:14:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:31:50 2026 by rpki-client