Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136077.roa
File:                     AS136077.roa (raw, json)
Hash identifier:          tFFniNzszlF769gQ7xwg5IvG79xp0gi3jcU9DI2HXjA=
Subject key identifier:   A0:18:C3:7C:4C:AF:09:0A:7E:FB:BE:05:01:F4:6C:BF:35:B3:0D:FA
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       26F6B89DE9300AA078233A835AEDD08167F4C80A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136077.roa
Signing time:             Sun 03 May 2026 01:33:23 +0000
ROA not before:           Sun 03 May 2026 01:28:23 +0000
ROA not after:            Sun 02 May 2027 01:33:23 +0000
asID:                     136077
IP address blocks:        103.85.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f6:b8:9d:e9:30:0a:a0:78:23:3a:83:5a:ed:d0:81:67:f4:c8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 01:28:23 2026 GMT
            Not After : May  2 01:33:23 2027 GMT
        Subject: CN=A018C37C4CAF090A7EFBBE0501F46CBF35B30DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:44:c9:6d:b6:27:8f:a5:67:d2:34:0c:89:f5:
                    4c:b8:95:68:eb:26:24:08:ce:1c:73:1c:27:ee:4c:
                    f5:64:ea:5d:9e:3e:80:0b:5e:2c:02:f0:fc:81:15:
                    7c:e8:65:a9:93:b7:63:71:2d:31:14:08:ad:b5:d2:
                    d9:62:b4:20:b6:5f:37:4a:86:83:d8:18:f8:4f:d1:
                    4d:4b:b5:1d:66:8a:a9:ff:33:19:ef:c0:45:cc:37:
                    5a:d0:4c:d9:c0:12:f8:eb:cd:65:eb:24:43:ce:d9:
                    02:d7:46:8f:f5:e1:36:63:a7:2e:6a:21:8a:40:eb:
                    4c:bc:99:72:8b:83:2c:11:bb:94:81:92:92:0d:c1:
                    9b:02:3e:2a:2c:de:07:ba:83:a1:f8:04:b4:f8:88:
                    19:38:f7:f4:e6:d4:6e:e1:54:a1:1c:fb:87:d6:f2:
                    be:d9:63:5e:8a:35:0e:86:b0:4d:b0:65:12:6d:8b:
                    03:45:e1:60:93:88:9e:7e:bb:9c:4d:df:c9:b6:38:
                    9f:5b:e2:8e:35:0d:3a:e2:a3:02:63:5c:de:5c:1d:
                    ae:fc:36:24:5e:a2:7b:4b:d8:25:6c:e9:7f:6c:fa:
                    40:53:c1:f4:1b:79:95:de:e8:fb:42:59:3d:6e:91:
                    86:59:99:41:1f:e5:73:77:d1:10:55:04:c6:62:30:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:18:C3:7C:4C:AF:09:0A:7E:FB:BE:05:01:F4:6C:BF:35:B3:0D:FA
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136077.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:47:9b:40:2c:57:95:d4:b2:5d:4b:69:b5:f6:80:cc:c6:
         3d:5a:84:c8:80:a6:cb:f9:05:af:c9:d9:37:4b:26:1a:57:5e:
         fe:6d:78:93:0b:d4:63:72:b1:57:74:3e:55:26:1e:7c:77:aa:
         9e:af:68:03:c1:8f:f4:aa:68:3d:8f:92:ba:e7:aa:0b:59:16:
         99:08:9d:59:bf:87:fb:5a:6c:b0:db:8e:4e:21:e3:23:81:ba:
         13:ac:a5:df:0d:9e:12:b3:20:1b:cf:85:e1:8b:00:8b:a6:d0:
         ad:f0:6d:30:31:9a:53:fd:96:23:11:bb:2c:ae:44:8d:2b:74:
         22:79:1e:ac:69:49:53:fb:b2:99:f3:cf:bb:70:81:db:bd:3c:
         b9:32:f7:bd:65:61:f0:71:fb:cc:32:4d:e7:e7:5b:78:04:47:
         9e:51:d3:b4:b0:1d:a0:88:a9:7a:ab:6c:e8:ad:43:a9:ef:0a:
         40:8c:7b:75:c6:c1:97:3f:57:f3:ac:d9:b7:f5:c1:62:19:e9:
         fb:b4:e5:aa:9a:1c:4c:9f:84:14:5a:e1:08:c7:92:39:c5:d2:
         a8:66:7e:58:fa:96:63:d7:8c:f0:49:75:ba:83:5b:84:51:8e:
         4b:d4:a6:7f:6c:a4:91:12:fe:9b:c7:15:d9:de:f1:8b:38:73:
         e0:8d:4a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:10 2026 by rpki-client