Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155057.roa
File:                     AS155057.roa (raw, json)
Hash identifier:          HahO8y2BXLy3Pn6XGnWYJ3UHAAUvD7RkAYoDOhQpZLA=
Subject key identifier:   FE:D1:A2:45:89:C4:53:39:07:85:3E:86:62:24:87:3C:81:8C:5F:C6
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       7660900377F6A95248D51F1A722C3744D1806CCF
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155057.roa
Signing time:             Thu 29 Oct 2026 02:53:38 +0000
ROA not before:           Thu 29 Oct 2026 02:48:38 +0000
ROA not after:            Thu 28 Oct 2027 02:53:38 +0000
asID:                     155057
IP address blocks:        180.214.160.0/24 maxlen: 24
                          2001:df7:c3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 08:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:60:90:03:77:f6:a9:52:48:d5:1f:1a:72:2c:37:44:d1:80:6c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Oct 29 02:48:38 2026 GMT
            Not After : Oct 28 02:53:38 2027 GMT
        Subject: CN=FED1A24589C4533907853E866224873C818C5FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:0b:77:44:7a:6b:2a:64:26:80:01:ad:1a:
                    30:0d:28:46:c8:a5:97:40:ad:14:96:39:24:54:a2:
                    6c:6a:8a:0e:be:0b:a4:e5:d8:a6:9e:41:82:2e:dc:
                    13:9f:15:07:1a:49:f0:f0:f8:a0:87:7a:14:76:26:
                    01:d5:20:e3:8b:53:8f:8a:3b:b9:13:9c:0f:21:e1:
                    2e:da:b6:1a:0e:4c:13:42:4b:96:85:88:03:e0:07:
                    56:72:fc:1f:13:e3:4d:c9:b2:aa:37:c2:3e:02:0e:
                    8e:d5:76:38:a1:6a:9d:c8:9d:f1:b7:b9:fc:bb:ac:
                    37:4e:58:82:41:25:16:f2:aa:30:cf:36:cf:0a:c3:
                    cd:a1:4b:5b:79:37:d5:f7:45:81:8f:a3:7e:5e:68:
                    ad:07:ab:eb:5e:32:ea:3d:72:d2:21:b6:be:1a:3d:
                    5d:9b:0b:6b:5b:44:74:61:80:1b:57:b8:a2:de:ff:
                    8c:8e:e6:2a:29:c8:f1:ee:26:b3:57:31:41:79:07:
                    68:42:29:2f:49:25:91:b8:9e:b2:0e:d2:b7:7c:30:
                    43:51:59:12:ca:2c:30:31:69:f4:f8:19:13:20:75:
                    c6:54:7e:6c:f6:79:08:29:ab:76:f4:19:00:4a:15:
                    4e:da:8c:22:a3:f2:88:54:a3:e2:cc:1c:04:dc:0b:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:A2:45:89:C4:53:39:07:85:3E:86:62:24:87:3C:81:8C:5F:C6
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.160.0/24
                IPv6:
                  2001:df7:c3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:30:ae:34:5e:6a:f9:7a:68:92:31:74:7f:67:10:d4:0d:b1:
         23:01:81:be:0d:cb:46:3f:f1:d0:70:2a:b5:4f:61:1c:16:c9:
         ad:97:a2:cd:fd:95:99:9e:f3:79:3b:55:c4:fd:a3:c7:8b:36:
         63:46:71:7b:96:31:7c:ee:72:8c:6c:3c:68:d3:1b:ad:f6:2a:
         b5:d5:4d:24:1d:c9:ff:c5:40:fa:8a:d7:8b:aa:a9:a2:77:2e:
         f4:ad:59:44:a1:fb:14:4c:35:0d:57:bf:0c:27:3c:4e:c3:9c:
         e9:a2:04:a2:04:d5:de:a9:6f:63:9f:b8:b8:cd:13:da:d5:84:
         14:03:62:6e:3b:aa:65:d6:98:5e:f9:9b:3b:39:32:9a:78:16:
         4a:8c:02:82:5a:0c:2d:e2:7d:b8:07:b6:85:ea:da:9d:c6:e2:
         41:6e:05:f6:38:1c:c8:c1:e2:2e:18:7a:50:90:1f:05:84:21:
         63:36:72:6c:53:1d:be:e3:da:77:26:64:49:8e:c1:2a:7f:44:
         d6:a2:2f:d4:75:f2:84:6e:a5:4d:c5:33:34:ed:21:2d:63:71:
         12:97:16:31:dc:94:9d:d1:4c:0d:0b:c2:ad:af:d4:73:94:4f:
         84:50:91:47:a1:7c:4f:c6:57:70:04:31:3a:89:83:ec:e4:d3:
         ec:6a:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 13:14:36 2026 by rpki-client