Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133357.roa
File:                     AS133357.roa (raw, json)
Hash identifier:          YCBBZnAFw5RcxbcnUx1cH7dl0TrqIMHFlDCuMJsZ2Z8=
Subject key identifier:   81:6A:7A:4F:15:CC:3F:18:24:09:3B:4B:4A:2F:D4:D7:B4:58:07:AB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0EE28D3353081D352AE9DFCF8F0049C42632DBE9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133357.roa
Signing time:             Mon 14 Jul 2025 02:30:06 +0000
ROA not before:           Mon 14 Jul 2025 02:25:06 +0000
ROA not after:            Mon 13 Jul 2026 02:30:06 +0000
asID:                     133357
IP address blocks:        2001:df3:fbc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 00:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e2:8d:33:53:08:1d:35:2a:e9:df:cf:8f:00:49:c4:26:32:db:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 14 02:25:06 2025 GMT
            Not After : Jul 13 02:30:06 2026 GMT
        Subject: CN=816A7A4F15CC3F1824093B4B4A2FD4D7B45807AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:88:42:4a:59:ea:65:67:76:88:ec:90:96:
                    77:f7:33:c4:3a:3f:20:5b:8f:17:89:bd:05:95:c4:
                    17:44:e6:8b:44:20:21:19:a5:28:58:e0:08:d7:40:
                    1d:e2:b0:53:e1:75:a4:bc:a6:d6:8d:06:e4:cd:a9:
                    99:18:4a:a4:62:19:db:44:82:25:e8:72:94:8d:15:
                    42:55:ea:a6:4a:91:ab:d4:a0:3a:74:4f:c9:3a:30:
                    c9:d0:7f:11:60:6d:07:51:9f:b3:f5:35:2c:82:d1:
                    44:86:0d:94:14:08:6a:1f:9c:77:59:63:d2:c0:93:
                    23:f1:1b:dc:e2:9d:27:10:51:6d:ea:2c:e6:df:fa:
                    cc:61:78:4f:69:a9:5a:8c:03:f4:7b:f8:5f:fe:a8:
                    76:09:79:cf:97:04:91:ef:b3:e2:05:6a:c6:ce:fc:
                    90:fb:4c:d9:48:de:36:ed:7c:8f:be:fd:ab:f5:20:
                    6a:2e:88:f5:ee:5a:85:f7:8d:b8:a9:3e:4c:5a:40:
                    c7:12:fc:40:6a:e1:6e:1d:df:00:38:60:b5:2e:b4:
                    c3:d1:5a:1c:b8:b2:17:81:c4:38:8f:53:aa:6f:45:
                    11:a6:23:18:dc:44:16:11:53:16:27:a5:cd:c4:9a:
                    da:e7:9d:a8:18:3b:42:66:1f:36:af:b3:df:f0:4d:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6A:7A:4F:15:CC:3F:18:24:09:3B:4B:4A:2F:D4:D7:B4:58:07:AB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133357.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:fbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:4a:33:01:87:da:7b:6e:1d:25:84:2d:71:0a:21:14:41:f4:
         0e:61:ff:d8:ca:4e:94:85:f2:d9:78:45:8e:1d:24:7c:f1:1d:
         f3:48:be:9e:a8:87:52:8e:06:77:3f:22:a7:1d:7b:e7:3d:85:
         f1:a2:ce:3c:92:5e:ed:e9:70:bd:95:16:11:0d:d8:e6:c1:a2:
         8c:5b:aa:00:6f:06:0f:b6:26:fd:1c:75:8a:32:5c:b0:51:bd:
         74:45:1a:1d:22:fa:59:d6:65:c3:04:12:99:23:de:ad:c1:77:
         a2:6e:5e:a3:da:ba:68:8a:8d:a2:bb:2e:07:17:9a:62:85:73:
         14:3b:9b:ff:3f:de:a7:c7:32:9a:a2:35:8b:2c:e6:89:35:aa:
         b8:d3:6b:79:a6:0a:84:74:26:26:da:f5:73:9d:ae:1f:50:d0:
         7d:a8:af:1c:1d:ca:30:8b:0f:f9:e8:16:0f:8f:3c:ef:c5:8a:
         97:3e:f3:a8:d1:aa:76:bb:bf:c9:00:b0:29:84:89:0d:31:53:
         a3:42:ea:81:b6:c7:e5:0e:7a:aa:02:ec:12:0a:9e:40:c0:d8:
         3c:27:f5:b5:33:64:df:c8:13:59:b5:cc:34:cd:ee:5d:85:b3:
         33:56:17:76:df:f4:17:94:35:49:1d:68:ee:40:11:4f:28:eb:
         0f:6c:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:56:23 2025 by rpki-client