Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS395793.roa
File:                     AS395793.roa (raw, json)
Hash identifier:          09W8ruI+58g1tSw7bLgGcPSBM9W25+MtAM08kZvWALs=
Subject key identifier:   03:47:C6:BF:98:ED:1A:D6:93:05:7F:F1:72:35:87:B6:E7:EF:98:0C
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       0C14D4402C0B47314271ED25F797300A7CA84A82
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS395793.roa
Signing time:             Sat 02 May 2026 08:35:13 +0000
ROA not before:           Sat 02 May 2026 08:30:13 +0000
ROA not after:            Sat 01 May 2027 08:35:13 +0000
asID:                     395793
IP address blocks:        110.44.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:14:d4:40:2c:0b:47:31:42:71:ed:25:f7:97:30:0a:7c:a8:4a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 08:30:13 2026 GMT
            Not After : May  1 08:35:13 2027 GMT
        Subject: CN=0347C6BF98ED1AD693057FF1723587B6E7EF980C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:e7:1a:81:96:be:89:58:da:c8:b0:0c:44:
                    de:b0:22:26:28:58:81:d7:4e:9a:31:9a:91:48:fc:
                    e4:a3:7e:b9:b8:33:1c:96:3a:1c:0a:dd:90:62:aa:
                    89:90:2c:99:6a:0e:87:49:49:26:c7:14:fe:d1:6c:
                    02:c6:d3:3f:01:6a:5e:3f:6e:c9:ed:56:c1:66:64:
                    db:59:da:8e:e4:ed:f7:19:bb:24:aa:c1:d8:14:c7:
                    f7:80:65:e3:67:ea:72:9e:28:64:e9:7b:f2:0e:0b:
                    f9:a4:77:12:68:38:6e:aa:75:1e:8c:ef:17:78:d9:
                    a1:bf:2f:85:fc:0a:bb:c8:35:55:44:ed:a1:4e:39:
                    4c:bc:1b:95:db:8a:c1:50:b4:c0:ec:01:33:e3:1d:
                    02:00:79:7d:ed:30:22:53:2f:e8:09:70:de:22:63:
                    c7:9f:bf:45:29:7e:8a:5f:bf:16:f1:5a:16:18:55:
                    b2:ba:05:c8:59:f5:66:8b:4d:09:57:83:3d:65:30:
                    29:9b:29:84:24:b0:e6:8c:92:38:43:b3:64:af:6a:
                    ee:0f:73:1c:4e:f2:83:53:0c:c9:2c:7e:af:cb:90:
                    79:b4:64:17:56:99:34:65:c5:1a:a3:9c:ee:ee:93:
                    f9:e1:b0:d6:29:9f:e7:ed:b3:6d:ce:4b:58:a9:dd:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:47:C6:BF:98:ED:1A:D6:93:05:7F:F1:72:35:87:B6:E7:EF:98:0C
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS395793.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:bc:28:b8:7f:88:0e:17:0f:c6:bd:58:3a:ea:f6:8d:bc:
         b5:39:9d:a5:33:7c:79:eb:15:f1:44:b2:1f:9b:7c:32:ad:c9:
         50:0d:3d:bf:56:12:b6:bf:b4:5e:d0:79:e8:16:69:85:67:af:
         33:26:b6:35:0c:dd:d3:c7:72:ff:ce:2c:14:a8:1e:72:50:99:
         f4:43:d1:ea:04:0d:a6:b4:41:1e:0e:07:1f:32:a3:6b:67:ac:
         9b:80:14:25:a2:c9:86:66:3d:8a:98:24:c0:f2:96:7e:31:95:
         0f:b4:20:49:ff:fa:2e:8c:83:29:12:8f:02:24:cb:ae:da:4f:
         ad:f9:ed:1f:e8:43:25:a7:81:2c:c8:69:a4:98:fa:0a:08:41:
         e8:92:54:ed:40:87:b3:6a:80:9b:93:82:a4:47:8e:cf:ad:b4:
         02:7a:72:c5:f4:62:9a:9f:40:26:a4:98:19:59:00:7a:b3:ac:
         67:91:d9:17:e8:ee:dd:a9:73:08:3c:7a:8f:d2:be:21:e7:57:
         df:80:34:84:4d:28:78:27:57:36:08:a9:b4:b0:4d:47:92:3b:
         8a:b3:5b:7b:29:6a:e3:9b:9a:44:4b:6e:44:db:ad:c0:20:dc:
         af:ec:f5:c0:22:5c:39:cd:e0:cc:7f:e6:21:80:12:5a:4e:9d:
         7b:f8:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:11 2026 by rpki-client