Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150265.roa
File:                     AS150265.roa (raw, json)
Hash identifier:          HfvgJ07tPDUjhfV3/ow/NjenOkf6QV8i6kTKoB4nntk=
Subject key identifier:   A5:86:F8:9A:4A:38:82:61:DF:A7:57:A0:E2:89:A8:D3:F2:AD:B3:88
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       512B38E20B45A224937D7A2E345C2705F66357ED
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150265.roa
Signing time:             Mon 13 Jul 2026 02:28:54 +0000
ROA not before:           Mon 13 Jul 2026 02:23:54 +0000
ROA not after:            Mon 12 Jul 2027 02:28:54 +0000
asID:                     150265
IP address blocks:        103.191.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 09:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2b:38:e2:0b:45:a2:24:93:7d:7a:2e:34:5c:27:05:f6:63:57:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Jul 13 02:23:54 2026 GMT
            Not After : Jul 12 02:28:54 2027 GMT
        Subject: CN=A586F89A4A388261DFA757A0E289A8D3F2ADB388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:1c:47:ee:59:2b:94:c7:d7:49:64:93:8e:
                    83:01:f1:14:42:71:14:e5:88:7f:13:4b:98:fa:33:
                    3f:26:6b:ae:f4:e6:17:52:c9:78:9d:7f:bf:f5:b1:
                    8a:cd:a0:b3:78:e2:15:fd:d5:fc:d1:fd:aa:75:f5:
                    67:a1:73:5e:b2:e8:07:86:eb:72:09:03:01:84:c3:
                    ed:de:29:18:a2:a0:0c:b2:b8:b1:e2:40:bb:4f:40:
                    6b:80:c7:a6:fd:63:a2:45:26:90:3b:af:0b:d8:06:
                    2e:fb:9f:68:96:54:12:8a:19:57:e8:5a:74:a1:e5:
                    ae:eb:5e:9f:05:03:bc:fe:eb:51:23:1b:47:3e:fb:
                    0d:a8:ed:e5:53:1e:a8:24:3b:0b:76:db:8c:e5:4d:
                    f7:37:13:21:48:93:c3:de:e2:da:3d:bc:66:a9:c2:
                    34:8f:57:6a:18:ca:17:9b:1c:bf:23:fc:9b:18:3e:
                    19:21:bd:78:c8:7d:f8:c0:d5:ee:89:21:e9:03:67:
                    28:e5:f8:21:89:b9:51:6d:49:c3:35:96:5e:b4:39:
                    52:f4:92:c5:34:fe:c5:5f:2c:cc:34:c7:d0:2c:04:
                    97:04:aa:b5:82:53:bc:4e:e5:38:d2:12:8f:88:b1:
                    49:4f:c0:d6:ed:f6:6c:dd:1e:82:82:7f:1a:1c:22:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:86:F8:9A:4A:38:82:61:DF:A7:57:A0:E2:89:A8:D3:F2:AD:B3:88
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150265.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:16:5a:9a:42:5c:e2:28:d5:dc:f7:da:76:16:43:5a:e6:
         59:04:1e:2e:ff:5c:61:98:81:5c:7a:9b:6e:5b:34:a5:80:4f:
         ed:d4:b2:ae:24:1f:a8:57:1a:0f:6c:18:8f:54:1e:f0:25:9f:
         26:96:fe:6f:08:30:18:5c:e6:99:ff:5b:f0:9a:67:3e:23:32:
         32:7d:35:d2:4f:27:aa:0b:a1:1d:4d:5a:69:b2:d3:6b:80:06:
         07:6f:9e:cc:a6:49:3b:b9:67:1f:bf:4d:96:a8:28:0e:8c:ac:
         2a:36:b0:cd:ee:07:f0:35:67:11:5c:d9:34:a0:d2:aa:fe:0d:
         b7:ef:ee:12:b9:a4:11:5e:2d:95:97:f1:30:dd:95:9d:1d:e6:
         dd:8b:0d:85:df:89:6d:18:b6:5f:70:e4:3e:49:25:57:e1:bf:
         88:2c:7b:ae:d6:f9:60:65:d9:6b:e6:37:17:59:66:27:1f:54:
         aa:67:fa:e5:b7:d0:2e:ce:31:0e:f6:5e:a1:73:59:d2:0e:79:
         37:55:a9:43:15:78:b7:6d:0b:f0:25:c4:12:fc:42:dc:79:a8:
         66:7b:56:eb:e6:82:01:12:7b:10:e9:a4:b9:0c:ee:54:5d:c9:
         9c:61:c1:85:c2:b9:30:0b:ce:78:48:8b:68:96:f8:be:2c:48:
         95:fa:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:19:00 2026 by rpki-client