Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS132662.roa
File:                     AS132662.roa (raw, json)
Hash identifier:          EBKiobmPpI6M96uPHHZ3UZJy4QtPXg1sSeUszzlwERE=
Subject key identifier:   D6:A1:5D:BD:D0:FD:B0:2B:A3:57:5E:43:43:F3:28:8E:86:54:6D:C2
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       12698663A57E84CB18DC1147800C656EB89E092E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132662.roa
Signing time:             Sat 02 May 2026 09:21:55 +0000
ROA not before:           Sat 02 May 2026 09:16:55 +0000
ROA not after:            Sat 01 May 2027 09:21:55 +0000
asID:                     132662
IP address blocks:        103.26.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:69:86:63:a5:7e:84:cb:18:dc:11:47:80:0c:65:6e:b8:9e:09:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:16:55 2026 GMT
            Not After : May  1 09:21:55 2027 GMT
        Subject: CN=D6A15DBDD0FDB02BA3575E4343F3288E86546DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:0b:52:0f:5e:14:17:71:fe:6e:56:3c:3c:
                    72:91:69:0a:9d:3f:1b:32:b0:11:be:9d:fb:88:5d:
                    f8:0d:cd:1c:f4:5c:c3:c0:ef:21:68:94:5d:f3:0c:
                    ac:6c:f7:47:f4:95:db:9e:b8:43:78:93:8a:b9:58:
                    34:dc:d3:26:99:3e:ef:c8:cf:b4:2d:a0:6d:be:81:
                    49:6e:0b:2b:30:ff:d2:b6:ed:4b:96:70:1a:fc:36:
                    da:86:b5:97:cc:35:a3:9e:93:3a:cc:e0:fb:03:8d:
                    40:7c:81:7b:60:9c:f1:78:25:f8:0a:b0:45:0a:d8:
                    70:d9:b2:2a:cc:32:f5:e6:ac:06:a6:1f:b4:30:ab:
                    0f:0e:04:9c:f5:39:15:fa:4e:5a:c7:b2:1f:c9:0a:
                    04:75:8b:6e:72:20:ec:78:89:0d:c7:6d:5d:0e:b6:
                    e3:64:db:e9:4c:4e:84:c3:88:25:1b:bc:42:5a:2b:
                    93:c7:17:80:3a:20:1b:ad:6e:9b:6d:88:b3:49:60:
                    28:57:30:bc:8e:b8:d4:5a:85:e7:6c:34:11:53:1f:
                    28:ac:eb:b4:dc:9a:67:31:68:a6:1b:e9:0d:6d:46:
                    34:4c:40:9a:89:9f:32:85:20:c1:d8:83:57:82:93:
                    a4:ab:d4:42:a2:47:89:bf:11:b1:90:58:5c:0b:ce:
                    e7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A1:5D:BD:D0:FD:B0:2B:A3:57:5E:43:43:F3:28:8E:86:54:6D:C2
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132662.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:86:d9:a6:b8:16:24:ed:cc:06:5f:48:34:21:29:42:a7:40:
         fc:2a:62:77:9c:21:de:e5:98:5b:96:db:75:dc:24:79:45:9b:
         50:60:6d:a3:5d:ae:69:c7:cc:1a:08:b1:8d:af:a8:36:ca:c2:
         33:03:e2:f0:b8:60:1b:c3:84:73:f9:cd:0f:16:d6:be:8d:b3:
         8e:b6:5c:6b:d0:26:e9:ca:93:ec:6d:86:ec:bc:3b:d1:2b:40:
         0a:5a:f7:f3:36:28:ba:77:03:19:52:6b:8b:f9:02:81:34:85:
         7c:56:ec:34:b8:a5:88:a1:9e:30:da:b3:72:46:76:16:8f:dc:
         20:8d:b8:8a:15:e1:61:7a:2a:3f:93:2c:b7:65:5c:d9:5e:4d:
         f1:d7:9b:20:16:1b:cc:04:4a:3f:7e:13:ca:d9:ac:12:f5:fe:
         6d:c8:fe:cd:5a:17:35:fe:f1:16:fb:8d:ba:f5:60:5e:c8:fb:
         6a:2f:80:f2:cb:fc:d5:da:e2:d1:dc:7a:57:1e:21:38:67:12:
         87:e9:e8:7e:de:2d:01:ce:87:f2:2c:c6:7c:33:f8:11:63:83:
         e8:89:94:8e:6e:36:8d:6b:d8:1d:cb:97:1a:a9:19:01:12:82:
         00:c9:df:d1:45:d1:43:66:a5:c6:c8:6b:29:e1:ae:3f:1e:3e:
         a1:43:82:9d
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUEmmGY6V+hMsY3BFHgAxlbrieCS4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY1NVoX
DTI3MDUwMTA5MjE1NVowMzExMC8GA1UEAxMoRDZBMTVEQkREMEZEQjAyQkEzNTc1
RTQzNDNGMzI4OEU4NjU0NkRDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL0TC1IPXhQXcf5uVjw8cpFpCp0/GzKwEb6d+4hd+A3NHPRcw8DvIWiUXfMM
rGz3R/SV2564Q3iTirlYNNzTJpk+78jPtC2gbb6BSW4LKzD/0rbtS5ZwGvw22oa1
l8w1o56TOszg+wONQHyBe2Cc8Xgl+AqwRQrYcNmyKswy9easBqYftDCrDw4EnPU5
FfpOWseyH8kKBHWLbnIg7HiJDcdtXQ6242Tb6UxOhMOIJRu8Qlork8cXgDogG61u
m22Is0lgKFcwvI641FqF52w0EVMfKKzrtNyaZzFophvpDW1GNExAmomfMoUgwdiD
V4KTpKvUQqJHib8RsZBYXAvO57ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTWoV29
0P2wK6NXXkND8yiOhlRtwjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMyNjYyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZxpkMA0GCSqGSIb3DQEBCwUAA4IBAQCDhtmmuBYk7cwGX0g0ISlCp0D8
KmJ3nCHe5Zhbltt13CR5RZtQYG2jXa5px8waCLGNr6g2ysIzA+LwuGAbw4Rz+c0P
Fta+jbOOtlxr0CbpypPsbYbsvDvRK0AKWvfzNii6dwMZUmuL+QKBNIV8Vuw0uKWI
oZ4w2rNyRnYWj9wgjbiKFeFheio/kyy3ZVzZXk3x15sgFhvMBEo/fhPK2awS9f5t
yP7NWhc1/vEW+4269WBeyPtqL4Dyy/zV2uLR3HpXHiE4ZxKH6eh+3i0BzofyLMZ8
M/gRY4PoiZSObjaNa9gdy5caqRkBEoIAyd/RRdFDZqXGyGsp4a4/Hj6hQ4Kd
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:21 2026 by rpki-client