Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
File:                     AS56242.roa (raw, json)
Hash identifier:          PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=
Subject key identifier:   B9:01:FD:42:9D:3D:BF:38:EF:0F:A7:C9:03:BC:45:BF:79:40:36:23
Certificate issuer:       /CN=897D06B789644C150E8DD42A6444FA986BC2AC88
Certificate serial:       2F582471E71A23BFD93703599B6BC7E8F437DF72
Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
Signing time:             Sun 03 May 2026 02:48:58 +0000
ROA not before:           Sun 03 May 2026 02:43:58 +0000
ROA not after:            Sun 02 May 2027 02:48:58 +0000
asID:                     56242
IP address blocks:        101.255.170.0/23 maxlen: 23
                          115.124.70.0/23 maxlen: 23
                          115.124.70.0/24 maxlen: 24
                          115.124.71.0/24 maxlen: 24
                          202.182.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl
                          rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:24:71:e7:1a:23:bf:d9:37:03:59:9b:6b:c7:e8:f4:37:df:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88
        Validity
            Not Before: May  3 02:43:58 2026 GMT
            Not After : May  2 02:48:58 2027 GMT
        Subject: CN=B901FD429D3DBF38EF0FA7C903BC45BF79403623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:e0:2a:d6:08:85:ef:4b:62:59:b4:cd:22:
                    1f:d9:c5:3f:58:b8:1b:06:c6:b8:52:40:4e:f3:c4:
                    4a:d0:34:3d:bc:52:5c:e1:bd:a2:f6:db:d7:dd:42:
                    a5:e3:ee:33:c3:4a:69:89:1a:91:59:47:fa:47:30:
                    2a:c4:44:df:fe:75:02:7c:e1:27:7e:8d:1e:d6:f8:
                    6b:ef:a8:83:3e:4b:1b:1d:34:c9:02:95:ef:20:31:
                    d1:a4:30:52:39:fc:76:a5:dc:3e:44:1d:ec:5e:e8:
                    14:28:a6:ba:a0:0d:dc:cc:41:3f:35:7a:9d:08:27:
                    36:0d:17:f7:bc:6a:0a:f2:7f:77:0b:32:9c:75:6e:
                    43:11:60:1e:bb:af:43:fd:15:af:ed:fe:61:29:69:
                    af:b1:ba:96:a9:11:1c:b4:00:67:df:df:64:c3:5e:
                    2c:99:fa:d3:e4:48:84:52:ec:55:03:4a:84:1c:2f:
                    23:c3:9a:bb:e8:da:f3:df:9a:0a:5c:db:47:69:71:
                    72:39:4e:0e:ba:74:eb:c7:96:2b:bf:36:08:f6:f7:
                    cf:dc:c4:6c:c0:76:39:88:05:6f:5d:20:5e:b7:6b:
                    db:40:cd:40:37:16:39:2b:36:14:48:f6:31:d2:9f:
                    a9:28:2f:6e:a9:8e:4c:d9:22:3e:7c:64:c0:62:03:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:01:FD:42:9D:3D:BF:38:EF:0F:A7:C9:03:BC:45:BF:79:40:36:23
            X509v3 Authority Key Identifier:
                keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.170.0/23
                  115.124.70.0/23
                  202.182.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:b5:fe:a5:9a:56:41:5e:1e:9f:a1:9d:eb:ee:86:b0:f9:
         f9:8d:40:01:c7:19:3d:05:f4:f5:db:f8:ce:c8:e0:54:66:45:
         76:f3:ec:67:f0:d1:8b:02:53:fc:64:73:b4:88:62:ba:87:43:
         87:9c:f4:ff:4b:78:a5:a5:57:8b:15:5e:5c:5b:a3:97:01:87:
         ce:6e:0c:30:2a:96:49:73:09:5b:f3:62:50:9d:5f:e6:57:7b:
         44:9a:39:97:7a:cc:eb:4a:69:de:9c:7f:89:10:ab:92:df:1e:
         bb:a3:cb:d9:e3:b5:b4:6c:9f:de:9c:bf:62:5b:df:21:9d:da:
         bb:0c:83:45:2a:d4:b5:ce:2f:1c:7c:4b:50:53:55:41:f4:8a:
         0d:e0:38:d4:0f:f8:ab:9d:fc:9d:2d:7b:99:a8:50:19:4b:d9:
         04:86:c1:af:ad:a7:d9:d3:1f:22:aa:bd:c1:1a:aa:05:41:9f:
         d9:cf:00:b1:23:2a:91:c6:5a:2d:6b:64:5a:79:59:42:01:4b:
         e2:45:b2:1e:b2:4c:0d:ae:66:10:76:a3:ed:e1:23:e3:41:f2:
         38:b1:fe:79:b3:c5:bd:bb:24:9a:c9:6d:a9:9a:2a:3d:5e:42:
         ba:65:dc:05:2b:7b:00:89:8f:f3:a9:26:6a:91:87:a9:fd:5a:
         8a:cc:1e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:02 2026 by rpki-client