Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55679.roa
File:                     AS55679.roa (raw, json)
Hash identifier:          XMMa4TZIDb/b0dT0AUucsFE16NA0fQVRYGe/181FD9k=
Subject key identifier:   B6:62:C7:CB:A6:A6:05:8D:51:35:7C:56:54:7E:10:23:82:60:10:FC
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       5F618E71BC943925711A35AC97A091DFEBBCB313
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55679.roa
Signing time:             Mon 31 Aug 2026 03:19:37 +0000
ROA not before:           Mon 31 Aug 2026 03:14:37 +0000
ROA not after:            Mon 30 Aug 2027 03:19:37 +0000
asID:                     55679
IP address blocks:        2403:8cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 05:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:61:8e:71:bc:94:39:25:71:1a:35:ac:97:a0:91:df:eb:bc:b3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Aug 31 03:14:37 2026 GMT
            Not After : Aug 30 03:19:37 2027 GMT
        Subject: CN=B662C7CBA6A6058D51357C56547E1023826010FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:9d:92:f9:a4:7e:ec:56:a4:6e:59:1f:c5:
                    b0:28:e1:cc:d5:69:82:52:4c:4d:ce:a8:b9:76:c2:
                    48:61:3a:10:8c:77:0b:3c:7a:7a:31:7b:5e:6e:47:
                    df:08:0d:ed:d1:bf:4f:f6:ca:eb:ef:c0:ec:00:89:
                    56:82:21:8b:54:46:84:15:f9:07:d5:fc:96:36:98:
                    b8:e2:df:15:48:6f:8b:18:b4:39:c0:d6:23:30:9c:
                    be:0e:54:07:df:47:c5:83:8a:fa:15:e7:97:61:5e:
                    fc:97:41:bf:f7:54:d1:30:33:65:d1:4e:f2:3c:7b:
                    3b:71:79:0f:1d:35:b7:82:28:fb:56:c1:ed:f7:73:
                    a2:38:1a:3b:19:95:bc:3c:a6:ae:e6:a8:05:9e:2f:
                    dd:74:49:c1:29:6e:b1:50:39:b1:0b:39:5f:50:ff:
                    a7:24:f1:cd:6e:32:68:b3:9b:2d:70:e2:e6:9f:36:
                    19:61:24:c1:f7:21:75:c1:c4:d7:b2:fa:85:8f:f1:
                    db:93:96:1e:91:78:74:15:f2:d2:0c:f4:42:b7:23:
                    0c:48:7b:09:9d:44:15:03:96:6e:6e:9c:70:c9:33:
                    e8:53:7f:91:8c:32:79:2a:ec:a7:0f:3a:88:10:ae:
                    0e:15:02:7f:ea:8a:e3:13:ff:1a:2e:4e:f5:ad:c5:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:C7:CB:A6:A6:05:8D:51:35:7C:56:54:7E:10:23:82:60:10:FC
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55679.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:0c:af:cf:04:40:c4:95:3b:ef:55:0b:44:af:d2:be:c4:75:
         17:84:7f:c2:ec:23:0f:8c:56:ba:b3:9a:61:4a:3b:2e:cc:d0:
         c4:ea:d0:0d:5b:a7:c2:63:4e:3d:7b:b4:10:aa:c1:ff:44:fd:
         f0:a0:d6:ff:16:0c:e9:59:14:47:c7:a8:54:01:c2:9c:3a:57:
         56:58:73:35:dd:4a:b5:4a:60:f6:b6:2d:ac:bc:6c:31:63:e2:
         4b:2a:6d:4d:ed:7f:95:de:bd:92:88:45:71:c0:f4:8e:3f:f1:
         5c:0b:75:26:2f:51:85:f6:d6:67:05:ac:0b:2a:e2:2a:22:6c:
         71:07:24:af:d0:b1:2b:96:cf:d0:eb:e4:b7:7d:b5:26:5e:95:
         66:8b:1d:71:33:df:65:22:29:51:38:6c:77:20:e9:6b:b8:58:
         a2:7e:35:00:72:4c:9f:b7:bd:49:04:e4:a8:72:05:0e:79:ae:
         c4:26:39:da:12:f1:45:4a:9b:1f:65:7a:fe:68:4f:21:da:73:
         28:72:80:55:32:68:dc:d9:fa:5e:47:46:68:e3:3a:e5:8f:57:
         6d:a0:e6:7b:f7:d1:3f:bd:1f:38:12:d8:98:13:2e:32:21:4d:
         af:5e:08:db:16:4c:f0:20:6c:12:02:6e:72:ab:e8:93:c0:14:
         16:f7:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:27:23 2026 by rpki-client