Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS202036.roa
File:                     AS202036.roa (raw, json)
Hash identifier:          UZDh/T86TZLS2em0XNgwKtliBkamzsihTWejFgSsLoE=
Subject key identifier:   6C:69:F4:1B:57:26:CB:A6:D6:6A:04:43:10:B2:00:36:3E:F9:39:32
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       4903E97A1D72C111000FBCE636F30B3C11985B05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS202036.roa
Signing time:             Wed 06 May 2026 09:10:28 +0000
ROA not before:           Wed 06 May 2026 09:05:28 +0000
ROA not after:            Wed 05 May 2027 09:10:28 +0000
asID:                     202036
IP address blocks:        103.181.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:03:e9:7a:1d:72:c1:11:00:0f:bc:e6:36:f3:0b:3c:11:98:5b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  6 09:05:28 2026 GMT
            Not After : May  5 09:10:28 2027 GMT
        Subject: CN=6C69F41B5726CBA6D66A044310B200363EF93932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:7c:ed:17:11:75:bd:43:4f:73:76:77:1e:
                    4e:d1:df:f9:53:1d:dd:2a:19:d8:ea:3f:e1:37:39:
                    8f:53:b7:ae:d6:5a:eb:63:2b:c4:da:cd:9c:6c:4d:
                    7d:a9:9a:b3:7a:9d:5a:7a:e2:12:28:14:c6:84:63:
                    a7:df:15:0c:d4:b5:7a:c4:60:9c:3b:46:77:d2:d5:
                    47:80:f9:01:15:00:0d:4c:4d:22:9c:a4:ea:b2:06:
                    a8:b8:97:8d:fb:61:3c:6c:9d:f8:19:80:e7:a4:d0:
                    87:12:46:bb:ca:38:a5:af:22:77:45:98:19:0f:e9:
                    a7:31:c4:96:50:04:db:5b:2c:1a:43:ee:fe:c4:d4:
                    83:db:6b:f6:e1:60:fe:11:fa:b8:2d:db:1b:a7:5f:
                    86:80:a8:32:46:41:17:5e:b9:c7:2b:40:4b:7c:ac:
                    85:0c:f9:7c:0a:a3:df:db:eb:a2:00:46:99:b5:6a:
                    3b:c1:84:e6:10:75:97:1e:cf:82:a7:5f:d5:12:e5:
                    63:22:59:c9:c8:71:e9:2a:32:e6:29:6b:7d:ac:e4:
                    1c:3b:06:55:5a:c6:7f:8c:3d:8a:c6:3f:01:24:14:
                    d7:c1:11:c3:71:9d:94:f4:ea:6a:a0:e2:ed:8d:3a:
                    b5:ee:63:b5:d4:8c:d9:2d:6c:d7:33:de:f7:53:c9:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:69:F4:1B:57:26:CB:A6:D6:6A:04:43:10:B2:00:36:3E:F9:39:32
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS202036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:80:8b:56:41:e8:56:97:15:97:2b:f0:77:a9:d6:27:11:0e:
         df:fd:bc:87:eb:6e:24:65:29:cf:5a:8d:d2:5e:fb:dd:ed:a0:
         43:c6:a8:2f:f6:ec:5c:dd:8b:b9:56:fb:76:32:7f:a5:b3:da:
         e4:29:81:5e:be:6c:00:5e:a1:96:4b:08:83:ca:94:e8:53:40:
         ca:3e:2e:25:4b:3b:e0:c7:ca:6f:a2:c1:3a:0a:a5:ce:db:ff:
         d6:ff:1a:1b:2f:5e:c7:6f:6e:6c:62:53:55:bb:48:d1:73:04:
         3a:9e:4b:54:5d:e6:30:bf:e8:80:87:4c:51:7d:e7:04:42:7b:
         3a:32:ac:05:f9:d8:92:a6:90:46:5f:a5:26:b3:eb:7a:6b:b6:
         a0:67:bd:e3:88:34:dc:c0:d9:7a:aa:22:98:85:46:c6:35:f9:
         e5:6a:5f:7e:bb:04:35:4f:56:80:40:22:f9:b8:ea:2a:40:f4:
         18:1c:2a:94:15:5d:f5:ed:8f:3b:72:83:7d:67:0d:f6:ac:f7:
         0a:7b:75:ed:3d:f9:b7:8d:b5:8d:03:9c:90:29:c2:76:17:fc:
         40:13:4c:93:81:0d:84:0e:e9:13:f0:5d:07:1e:4b:ad:a8:c7:
         46:02:17:a5:7f:7f:6c:99:4c:1b:b3:22:cd:a5:ce:82:ca:36:
         df:d3:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:47 2026 by rpki-client