Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55674.roa
File:                     AS55674.roa (raw, json)
Hash identifier:          kTQU8c0HzADAIuk+rviQYD+IcWWSE2sDCSAOpYNrQl8=
Subject key identifier:   A7:5B:24:FB:A8:AE:FB:B7:CC:6A:5B:BD:62:90:35:C7:AB:5E:21:53
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       117B74839860EA32BACECB8713BEB62D713CCD6E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55674.roa
Signing time:             Sat 02 May 2026 09:21:03 +0000
ROA not before:           Sat 02 May 2026 09:16:03 +0000
ROA not after:            Sat 01 May 2027 09:21:03 +0000
asID:                     55674
IP address blocks:        103.185.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7b:74:83:98:60:ea:32:ba:ce:cb:87:13:be:b6:2d:71:3c:cd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:16:03 2026 GMT
            Not After : May  1 09:21:03 2027 GMT
        Subject: CN=A75B24FBA8AEFBB7CC6A5BBD629035C7AB5E2153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:b1:bc:28:bb:1b:66:ee:6a:44:dc:3f:68:
                    85:3b:e9:d8:82:47:cf:74:ec:c9:f8:f1:1c:57:ad:
                    e1:ea:fb:26:79:81:28:c5:ea:37:05:12:3a:ba:b7:
                    5b:f3:f3:76:98:ab:45:3c:f4:1a:f3:4f:da:0b:57:
                    10:79:42:da:cb:e0:b0:4f:8c:dc:64:c0:70:17:c5:
                    06:cd:ef:4e:36:67:f5:da:f3:8c:a4:bb:cc:c5:83:
                    0f:d5:9b:af:95:84:9f:26:bf:29:e3:ff:91:1f:51:
                    e2:62:9d:18:12:df:1d:2a:10:96:2f:96:f6:14:d5:
                    e9:03:73:8e:1e:34:0b:f7:21:87:41:ee:3d:e4:a1:
                    da:af:02:fb:67:6b:4f:30:c0:21:b0:b3:16:d2:63:
                    b4:4e:dd:1f:46:80:17:71:d7:3f:c4:cf:95:e8:42:
                    c7:29:91:8a:5f:02:96:26:d8:0b:8f:bc:2a:09:ee:
                    1a:bd:55:f6:65:a7:d9:3b:76:8b:5a:42:bb:c4:41:
                    84:f9:ec:77:bc:a2:89:5e:15:ce:1d:4f:89:f7:53:
                    52:0a:f8:16:6f:de:f5:68:e0:bd:3d:61:2f:ab:f9:
                    4e:64:39:77:48:53:15:0f:bb:9b:b3:8c:5e:cd:51:
                    58:76:6c:a0:47:a4:ea:6b:69:e6:85:e2:71:b5:6e:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5B:24:FB:A8:AE:FB:B7:CC:6A:5B:BD:62:90:35:C7:AB:5E:21:53
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55674.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:7e:70:00:c6:b5:bf:62:d3:84:78:10:9c:df:40:85:7e:
         5a:91:2d:4c:c7:1b:3c:5b:a0:34:6c:d8:3b:62:4b:13:f2:dc:
         3c:84:0b:db:ad:33:fa:ad:09:fe:b7:1e:9a:77:11:c2:6a:70:
         1e:ed:f0:2c:8d:9d:eb:10:db:e9:21:9d:fd:23:8c:f4:10:79:
         0f:8c:8e:d9:f5:48:68:a6:5d:e5:9d:5f:f1:1b:7a:4f:50:a6:
         41:33:14:13:37:ee:44:fe:97:1a:09:30:2f:5b:8d:a4:07:6d:
         9d:68:5d:56:50:9c:07:25:f9:f7:8f:ac:8c:6f:7e:7a:8c:9a:
         2c:4a:9d:e3:db:3f:4f:ff:28:a6:e4:a7:4e:30:3b:03:f2:df:
         75:ee:b7:a9:99:4b:27:69:81:11:b9:98:56:0b:d9:98:0c:1f:
         eb:07:b9:a0:60:a4:4a:a1:37:f4:4d:14:12:12:07:62:3e:4f:
         bc:a7:23:5c:cf:45:3c:f0:1b:ab:a3:11:29:3e:19:ac:32:08:
         86:72:31:da:13:34:e0:cf:03:47:c3:4c:13:7e:a7:af:33:e3:
         5f:23:c6:d3:2d:7f:e0:00:8f:ad:88:f6:fd:f2:bf:85:64:d6:
         b1:b7:71:36:72:42:ef:a0:76:1c:9a:03:d1:e3:54:62:17:87:
         67:3c:ff:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:31 2026 by rpki-client