Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150506.roa
File:                     AS150506.roa (raw, json)
Hash identifier:          C7SGYs7f1TmVOrGRXsGNox1NahbRn1xnKVAy9M1dGSg=
Subject key identifier:   61:CD:1D:44:FA:E1:0C:6D:00:DB:54:FC:C5:27:45:CC:6E:E3:14:86
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       2504A015C169A473008AEC0B3279225CD5D1FA79
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150506.roa
Signing time:             Thu 06 Aug 2026 07:35:47 +0000
ROA not before:           Thu 06 Aug 2026 07:30:47 +0000
ROA not after:            Thu 05 Aug 2027 07:35:47 +0000
asID:                     150506
IP address blocks:        103.61.226.0/23 maxlen: 24
                          202.57.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 21:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:04:a0:15:c1:69:a4:73:00:8a:ec:0b:32:79:22:5c:d5:d1:fa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Aug  6 07:30:47 2026 GMT
            Not After : Aug  5 07:35:47 2027 GMT
        Subject: CN=61CD1D44FAE10C6D00DB54FCC52745CC6EE31486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:69:fd:db:e8:e2:d4:fa:78:42:78:95:b0:
                    d2:d8:60:ab:3f:a7:6c:44:ab:70:0e:56:64:94:c5:
                    c4:22:45:ca:c7:4b:b6:a6:76:f7:6e:83:ea:93:35:
                    61:ea:bf:87:43:3c:0a:2e:9d:80:35:32:33:47:2b:
                    0d:42:a0:f7:32:02:c6:3e:a3:f1:53:5e:50:b6:3a:
                    9e:f3:84:d7:cb:b4:46:d5:8b:6c:4b:b4:66:34:5e:
                    b7:d9:37:6e:3b:55:cf:ef:47:61:47:c4:2b:f7:83:
                    15:ce:8a:d5:29:4b:c4:8f:80:7f:18:f0:3e:42:4a:
                    c3:c0:0a:ad:14:91:73:d8:16:ba:87:20:de:7e:e3:
                    e1:f9:a5:d2:a0:eb:b4:72:1d:5e:ea:9d:0e:bf:59:
                    85:b5:7a:69:36:14:d8:2f:0b:c4:8a:c5:9d:b3:41:
                    5d:b8:4c:42:d7:04:74:ef:11:04:aa:49:55:e4:75:
                    3e:eb:21:50:18:77:63:41:57:3b:0c:f8:f1:d8:5d:
                    f0:aa:32:6a:86:32:26:61:7a:33:22:f4:3d:a4:46:
                    87:27:61:f1:91:33:49:ee:05:72:eb:67:ff:5c:43:
                    1a:66:4c:a2:63:32:a1:f1:05:08:4e:40:d5:13:ce:
                    35:dc:d7:39:62:01:9b:4a:b6:dc:80:a6:c8:d3:a7:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CD:1D:44:FA:E1:0C:6D:00:DB:54:FC:C5:27:45:CC:6E:E3:14:86
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.226.0/23
                  202.57.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:e2:50:e9:d8:03:e1:88:85:01:23:71:f0:df:7f:05:09:
         ee:ff:e5:b3:6b:12:c5:c7:a1:df:36:f0:67:16:9a:3f:b0:76:
         45:65:73:f7:a4:60:14:07:2b:92:c8:f9:ad:c7:e9:b2:6f:44:
         6c:c9:9d:19:64:7c:cf:09:31:ce:0e:3d:b5:f7:c4:bf:5e:cf:
         00:56:5f:88:06:1e:46:ea:23:45:97:66:e9:fe:04:57:a1:5a:
         d1:68:26:80:f5:47:98:e8:b2:72:d6:1c:db:98:f1:cd:24:07:
         8f:85:ab:0d:6e:27:8c:f9:e5:cd:e5:5f:27:37:48:a7:c3:18:
         97:a9:34:c5:85:54:99:72:73:45:d8:d7:a6:e5:b5:ce:17:75:
         09:12:0f:b5:e5:c8:44:8a:4a:90:cb:fa:70:b5:2f:95:87:d9:
         94:0a:25:99:87:36:9c:ec:d2:a5:05:fc:e5:73:b6:ac:19:7d:
         74:3a:dd:bf:e3:59:ec:af:e6:a4:2c:b6:b0:29:30:06:0c:35:
         5c:50:ca:b6:1a:63:02:18:fd:f0:03:cb:48:64:d8:ab:12:22:
         bb:43:76:af:59:65:09:b6:c3:f6:58:d3:94:df:15:9f:52:8f:
         2e:31:e5:69:cd:41:5e:12:c5:d1:fa:50:2a:d9:f0:02:b8:7a:
         70:35:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:09:47 2026 by rpki-client