Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55690.roa
File:                     AS55690.roa (raw, json)
Hash identifier:          0YmdoOzNaGMm/sQ2yfwjpVoHSHYHWhSlH2zG8HPHTF4=
Subject key identifier:   ED:3F:30:2F:B3:CC:F6:77:11:52:9A:91:53:96:44:BF:FE:D7:60:91
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       7180031ACF7B9A4E1409C431946CC8654DE8836B
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55690.roa
Signing time:             Sun 03 May 2026 05:38:49 +0000
ROA not before:           Sun 03 May 2026 05:33:49 +0000
ROA not after:            Sun 02 May 2027 05:38:49 +0000
asID:                     55690
IP address blocks:        42.62.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:80:03:1a:cf:7b:9a:4e:14:09:c4:31:94:6c:c8:65:4d:e8:83:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 05:33:49 2026 GMT
            Not After : May  2 05:38:49 2027 GMT
        Subject: CN=ED3F302FB3CCF67711529A91539644BFFED76091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:d8:eb:fb:59:a9:49:1c:bb:22:d8:00:4a:
                    fa:ca:37:88:e2:d9:96:fc:34:7c:ae:e2:58:89:f6:
                    d7:e9:fb:18:1f:64:52:a7:b9:e8:c9:1c:7d:86:5c:
                    91:bc:c8:de:cc:94:8d:88:b7:3b:57:30:c4:0f:c1:
                    c5:fe:0a:67:36:0f:4f:07:26:b8:e5:18:5f:de:6f:
                    61:21:62:ed:1d:4c:1c:0d:3c:67:4e:ed:b2:97:ee:
                    5e:90:14:95:e8:1e:42:33:1f:38:6b:38:b9:52:2a:
                    c1:58:a3:8b:96:03:63:7b:3c:31:e3:c5:ef:58:76:
                    d1:36:1f:57:43:5c:ca:ff:b3:21:ed:db:44:51:e1:
                    c6:6d:25:aa:d2:f9:55:96:bd:7e:52:95:5d:cc:a6:
                    ee:79:b8:0d:ae:e5:c3:15:51:04:4c:72:ef:79:ba:
                    36:af:2e:88:4c:a6:93:16:5c:bf:39:d2:74:31:02:
                    96:59:9e:65:72:6b:d9:03:77:de:c6:7d:fa:87:d8:
                    97:f1:b6:1a:a7:bf:f1:60:ff:52:e0:fc:65:2c:d3:
                    f3:ab:11:5a:8a:df:84:77:51:6f:ba:78:4e:26:48:
                    d1:21:28:1c:32:3a:4b:12:38:72:87:80:29:9b:a3:
                    81:4c:ba:5f:51:ed:e1:c3:23:eb:29:a0:aa:94:e2:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3F:30:2F:B3:CC:F6:77:11:52:9A:91:53:96:44:BF:FE:D7:60:91
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:3c:24:2e:9f:c1:49:5d:56:5b:17:17:74:3b:13:3e:ff:
         e9:74:3a:bc:cd:96:d4:2c:be:a5:c7:8c:b3:26:78:b5:9c:42:
         89:39:29:40:f7:38:b1:79:62:39:8a:b7:b2:ee:c3:e9:8e:ed:
         ad:6d:8b:58:b8:d1:f9:f2:67:26:a0:20:65:54:93:a5:83:c3:
         23:fc:35:4b:b9:3f:d6:f2:e5:39:49:cc:6f:e0:0f:33:e4:31:
         35:3a:5c:b1:50:07:a8:f6:e6:da:1c:7a:62:32:f9:f2:a5:ac:
         a4:09:ef:90:7b:60:0d:e5:28:fc:d6:a1:c2:51:8d:4e:56:9f:
         3c:64:17:51:37:ee:cf:05:e4:99:ec:f2:8e:f6:62:63:a1:ee:
         65:da:a2:20:2f:14:d2:16:8a:97:d6:03:0a:8c:43:3c:b8:3e:
         ed:37:60:37:f7:22:bb:5c:7c:89:94:23:fa:38:b9:31:55:a7:
         7d:c0:df:50:65:90:20:64:6f:79:3f:1f:0d:41:88:f6:50:be:
         03:ff:6d:d7:bb:17:70:82:05:1e:fb:3b:96:eb:7a:4d:ac:22:
         a3:97:70:58:b7:57:be:80:bd:3c:75:bd:1d:3a:0e:1e:24:c5:
         af:59:15:96:b1:fa:59:f8:2e:b2:36:98:fd:05:d6:eb:26:a4:
         61:27:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:53 2026 by rpki-client