Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS9794.roa
File:                     AS9794.roa (raw, json)
Hash identifier:          E/UHvxBCjm8sjVoElaorcW43TywuJmJGA0IVQSDrnlU=
Subject key identifier:   FC:CB:4F:CA:64:A4:2C:33:54:94:21:75:1E:BA:EC:E1:C2:53:EC:BE
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       42F66B64409C52362CE08F1D9429CA35863E48CF
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9794.roa
Signing time:             Sat 02 May 2026 21:18:54 +0000
ROA not before:           Sat 02 May 2026 21:13:54 +0000
ROA not after:            Sat 01 May 2027 21:18:54 +0000
asID:                     9794
IP address blocks:        103.252.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f6:6b:64:40:9c:52:36:2c:e0:8f:1d:94:29:ca:35:86:3e:48:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 21:13:54 2026 GMT
            Not After : May  1 21:18:54 2027 GMT
        Subject: CN=FCCB4FCA64A42C33549421751EBAECE1C253ECBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:9b:7d:4d:c0:d3:6c:dd:6f:fe:e6:35:23:
                    a6:aa:15:bd:75:4c:f3:8c:5a:cf:47:b0:df:82:64:
                    33:45:8c:b8:45:43:96:c6:7f:7a:55:7c:b0:3a:be:
                    3b:a3:c7:2f:5f:54:39:ec:96:29:57:87:65:bb:9b:
                    43:1f:33:56:61:ab:ab:e0:de:7e:be:42:a6:7a:58:
                    08:79:bb:96:fd:6f:de:bc:da:d2:ce:d6:88:04:15:
                    b3:08:02:4e:74:ab:a2:4e:a3:0c:e7:e6:f1:16:34:
                    28:f2:63:bb:78:7e:f4:ca:9b:2c:df:8d:98:e4:f9:
                    a9:fa:9d:40:fb:c0:e9:fa:0e:34:59:20:ba:ce:9e:
                    38:e2:00:47:05:5a:8e:f0:36:1a:fb:27:e8:b1:42:
                    e5:33:93:27:ec:7f:4d:9b:7f:fb:f6:7a:dc:37:31:
                    6f:b5:9d:91:38:7c:91:94:6a:de:26:44:c6:82:d9:
                    2a:38:e7:bc:19:db:a5:c5:a0:4d:b8:70:27:00:14:
                    65:97:9e:5a:8f:1f:9b:1c:0d:bb:23:2f:4b:4f:08:
                    50:eb:6b:26:70:ca:f6:5f:cf:b4:9b:2c:a4:d5:e5:
                    94:63:ed:5f:d1:53:8c:f4:b3:d1:48:02:96:0b:dc:
                    3c:6b:e9:d8:37:7f:5f:0e:0a:1a:9f:63:54:eb:77:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CB:4F:CA:64:A4:2C:33:54:94:21:75:1E:BA:EC:E1:C2:53:EC:BE
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9794.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c9:17:d6:f0:c6:df:a7:bb:fc:a9:a3:7c:58:b3:de:dd:65:
         cf:2e:0e:57:0a:dc:e4:79:5e:21:30:fd:af:ac:ab:71:a4:88:
         e3:ee:64:a0:42:ed:5a:52:c6:e9:93:e8:bf:3d:78:f8:6d:78:
         bb:07:64:b6:93:09:34:69:0e:28:66:55:d8:25:98:ed:10:c8:
         c2:08:6b:e7:8a:fc:1b:26:72:45:c2:ef:87:7e:6e:c3:25:3e:
         cf:c7:a6:fe:65:bd:79:9e:4b:c1:94:12:41:a4:34:bd:45:34:
         40:22:bf:5f:5b:27:14:bc:3d:11:7a:e9:59:d6:c6:34:5b:8d:
         56:87:f6:86:10:eb:d1:ea:02:90:1c:28:f1:95:3c:9d:a3:31:
         91:9d:6f:4e:08:ae:e2:c1:53:2e:73:2d:2e:3d:02:9f:b2:25:
         3f:71:72:95:2d:1f:87:87:ed:1b:ec:37:4b:c2:51:83:38:a8:
         d0:bb:95:9a:b5:1f:96:49:80:37:80:dc:db:bb:b4:73:c9:f4:
         d9:a8:ce:6b:b7:75:9b:71:e7:98:d4:9c:b1:f9:b8:ba:43:b8:
         58:98:52:80:1f:65:46:fb:d8:5f:6e:65:19:03:b6:a8:5c:e3:
         44:f9:d4:48:c4:82:8f:cc:22:0c:d8:dc:b2:a7:07:25:df:db:
         4b:4f:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:29 2026 by rpki-client