Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63877.roa
File:                     AS63877.roa (raw, json)
Hash identifier:          21iRM/pxWHQlTkCwsZL/zOZhD7GBAiPVWrki2h/FP/s=
Subject key identifier:   9F:19:08:C9:A5:28:41:40:70:45:F8:D0:62:32:ED:96:D9:74:F4:31
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       5E95FEF09B68A134B6F9A433854D7B8671C05FE5
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63877.roa
Signing time:             Tue 23 Jun 2026 06:54:28 +0000
ROA not before:           Tue 23 Jun 2026 06:49:28 +0000
ROA not after:            Tue 22 Jun 2027 06:54:28 +0000
asID:                     63877
IP address blocks:        103.54.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:95:fe:f0:9b:68:a1:34:b6:f9:a4:33:85:4d:7b:86:71:c0:5f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Jun 23 06:49:28 2026 GMT
            Not After : Jun 22 06:54:28 2027 GMT
        Subject: CN=9F1908C9A52841407045F8D06232ED96D974F431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:83:d7:c9:db:2b:e5:94:f8:6d:39:24:d3:
                    cc:c6:ca:52:78:43:0b:4c:7c:7d:96:94:15:b4:a7:
                    5f:ad:db:4a:20:8e:be:fe:af:e9:41:f7:16:0a:9a:
                    3d:0e:95:2f:23:dd:db:de:29:7c:1d:97:db:e4:f7:
                    e7:c2:db:62:65:8d:37:5a:29:74:f5:54:ab:ef:a8:
                    c8:e2:8d:be:77:b9:39:68:5d:6c:39:2b:5b:f9:39:
                    c3:43:2b:91:7e:27:03:df:ab:bd:f0:fa:83:ce:bf:
                    06:ed:b0:16:20:1d:dc:4d:39:47:ff:16:db:ae:0f:
                    1e:e0:ed:85:53:55:09:70:5a:91:a6:a5:2d:a4:f9:
                    f8:8b:44:2b:f8:5a:0c:e0:9e:92:c4:80:f6:e9:77:
                    72:f7:97:1b:9c:4b:18:52:33:ec:6b:e0:82:bf:6c:
                    9f:2d:1c:bc:d9:60:96:96:26:65:76:9e:9e:ab:fc:
                    da:39:02:0e:b9:23:6e:a7:01:f0:20:46:fb:67:8f:
                    c2:49:b7:45:85:0f:47:28:7c:4e:c3:f9:a4:ee:fd:
                    c6:80:1b:74:6a:c1:49:05:8b:7c:e9:df:11:51:9f:
                    31:47:a0:84:15:a3:13:7d:f1:34:93:56:b9:89:0e:
                    1a:36:13:fe:61:0e:2a:c2:be:4e:60:3d:b5:3f:a7:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:08:C9:A5:28:41:40:70:45:F8:D0:62:32:ED:96:D9:74:F4:31
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63877.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:cc:3d:2c:93:51:f3:25:85:31:c5:04:9d:90:73:3f:12:95:
         3b:4f:b2:5a:d2:59:c6:c0:1b:84:d9:6f:d2:64:b3:00:2d:a4:
         0c:31:33:0c:ea:20:ef:43:ef:8d:26:2d:39:0c:b0:3a:11:59:
         d3:bc:29:cc:89:21:9a:df:d6:f7:7b:d1:4c:72:88:31:7c:81:
         d8:a5:b8:4e:07:0b:7d:10:89:41:47:21:a6:90:f0:ed:2b:87:
         81:b8:79:9b:6b:f2:38:ec:d9:b0:e2:c1:44:db:6c:53:a5:bb:
         63:4b:88:e8:11:2f:b2:1a:1d:ae:22:1f:5b:e6:10:3c:df:b3:
         11:38:61:48:e6:ba:54:b1:61:ce:1e:d4:bb:86:ae:fd:46:61:
         d0:cf:6a:b9:75:e0:5a:55:dd:66:32:d8:19:ab:0c:78:17:0f:
         1d:03:a6:06:a9:ef:3c:41:64:78:b2:d1:59:08:57:d8:42:f5:
         0c:0b:11:a1:6e:78:f1:15:4d:bb:f7:4f:39:41:a4:44:21:9d:
         83:21:ed:dd:83:8b:c6:b5:e0:d4:5d:63:75:7a:b5:56:a0:07:
         35:8d:e4:56:76:2e:03:79:ba:69:9d:bc:0e:80:18:cf:d1:f9:
         66:34:ea:34:f2:69:52:2d:0e:09:96:ad:8d:c0:fb:ba:c3:ee:
         64:00:e1:df
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgIUXpX+8JtooTS2+aQzhU17hnHAX+UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyMzA2NDkyOFoX
DTI3MDYyMjA2NTQyOFowMzExMC8GA1UEAxMoOUYxOTA4QzlBNTI4NDE0MDcwNDVG
OEQwNjIzMkVEOTZEOTc0RjQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMNog9fJ2yvllPhtOSTTzMbKUnhDC0x8fZaUFbSnX63bSiCOvv6v6UH3Fgqa
PQ6VLyPd294pfB2X2+T358LbYmWNN1opdPVUq++oyOKNvne5OWhdbDkrW/k5w0Mr
kX4nA9+rvfD6g86/Bu2wFiAd3E05R/8W264PHuDthVNVCXBakaalLaT5+ItEK/ha
DOCeksSA9ul3cveXG5xLGFIz7Gvggr9sny0cvNlglpYmZXaenqv82jkCDrkjbqcB
8CBG+2ePwkm3RYUPRyh8TsP5pO79xoAbdGrBSQWLfOnfEVGfMUeghBWjE33xNJNW
uYkOGjYT/mEOKsK+TmA9tT+nnDMCAwEAAaOCAcswggHHMB0GA1UdDgQWBBSfGQjJ
pShBQHBF+NBiMu2W2XT0MTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjM4Nzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnNuIwDQYJKoZIhvcNAQELBQADggEBAILMPSyTUfMlhTHFBJ2Qcz8SlTtP
slrSWcbAG4TZb9JkswAtpAwxMwzqIO9D740mLTkMsDoRWdO8KcyJIZrf1vd70Uxy
iDF8gdiluE4HC30QiUFHIaaQ8O0rh4G4eZtr8jjs2bDiwUTbbFOlu2NLiOgRL7Ia
Ha4iH1vmEDzfsxE4YUjmulSxYc4e1LuGrv1GYdDParl14FpV3WYy2BmrDHgXDx0D
pgap7zxBZHiy0VkIV9hC9QwLEaFuePEVTbv3TzlBpEQhnYMh7d2Di8a14NRdY3V6
tVagBzWN5FZ2LgN5ummdvA6AGM/R+WY06jTyaVItDgmWrY3A+7rD7mQA4d8=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:11 2026 by rpki-client