Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151570.roa
File:                     AS151570.roa (raw, json)
Hash identifier:          Yy/4pbjkXPFZOV4nriRvWIHDFdFtsJE2oxXUAUVfdm0=
Subject key identifier:   0B:EA:DC:26:27:F3:BD:31:92:7A:26:7D:EE:8C:43:31:6D:9C:23:40
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       4993AF550F59190643BAFCF64CAF9C71DAA7B055
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151570.roa
Signing time:             Thu 28 May 2026 06:19:58 +0000
ROA not before:           Thu 28 May 2026 06:14:58 +0000
ROA not after:            Thu 27 May 2027 06:19:58 +0000
asID:                     151570
IP address blocks:        103.60.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 04:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:93:af:55:0f:59:19:06:43:ba:fc:f6:4c:af:9c:71:da:a7:b0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May 28 06:14:58 2026 GMT
            Not After : May 27 06:19:58 2027 GMT
        Subject: CN=0BEADC2627F3BD31927A267DEE8C43316D9C2340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:59:86:d3:e8:1e:d6:46:83:ec:cd:ed:a7:
                    f7:ad:f2:d0:f9:58:fd:96:02:58:f5:a9:ef:14:4a:
                    c3:87:2c:c4:1c:04:2a:0f:6e:e1:b3:52:12:aa:0e:
                    99:1f:55:d7:35:c0:af:83:27:78:b5:bf:0e:38:39:
                    28:dc:2e:37:73:df:19:b1:68:ed:e4:1a:ed:f3:a3:
                    4b:69:59:75:e9:47:08:90:c3:31:d0:70:53:da:55:
                    08:1d:ed:12:1f:70:37:e8:05:81:6c:ea:6e:54:58:
                    84:ea:2a:b1:bb:4b:2a:60:ee:2a:4d:50:2a:ff:20:
                    a3:ec:3c:b1:d9:59:16:55:8a:57:9d:da:d2:95:eb:
                    9e:20:f3:55:d2:b0:7b:92:c9:32:9f:47:bb:ec:c4:
                    22:d0:b9:55:74:32:8f:ee:ca:cd:ef:4d:47:b0:db:
                    7d:18:f5:ba:87:b0:a2:8d:92:43:9e:f3:90:71:ad:
                    7b:76:a1:1c:1d:ee:7c:29:0a:b3:38:5f:56:66:fd:
                    0b:ff:87:b2:93:b7:56:30:b1:4b:09:07:6d:d4:83:
                    05:21:3f:d9:35:63:4d:82:fb:c7:0f:16:05:3b:e0:
                    2a:a2:bd:e3:2d:27:49:37:a4:86:1c:c4:48:89:33:
                    8e:d9:03:8d:c6:9c:ed:14:52:92:7a:96:bc:9d:f1:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EA:DC:26:27:F3:BD:31:92:7A:26:7D:EE:8C:43:31:6D:9C:23:40
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151570.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:77:3a:c4:c4:a0:85:be:c6:c4:11:69:d3:84:47:3b:ab:05:
         ca:da:df:83:fb:ad:2e:ae:81:43:95:8a:dd:ca:83:0a:05:32:
         3c:38:e5:c1:73:5b:5f:84:44:05:0f:88:48:d6:b6:ca:dd:4c:
         ce:4e:d4:c0:b6:68:21:40:01:7f:e1:36:b8:a8:4c:f5:7a:32:
         26:cd:87:5f:95:c9:ab:6d:97:06:7f:94:e5:27:1a:6e:56:eb:
         b1:8b:bd:85:11:15:15:68:b6:97:32:df:fb:0c:62:25:69:e9:
         4f:eb:da:d8:e2:aa:2f:83:c7:e2:0e:80:e3:d3:c5:8c:14:91:
         60:a7:7d:9b:b9:b5:0a:24:39:04:b3:9c:2c:c7:49:85:5b:6f:
         d0:bd:fb:95:4a:1d:4e:d2:ae:1f:26:00:ff:5e:1b:8b:30:82:
         08:3f:65:d8:43:1d:29:72:37:93:1d:a4:19:f8:1f:a8:ca:b0:
         16:42:07:7f:b9:35:be:7e:ef:79:9c:12:e2:38:c7:9c:b2:87:
         96:1f:65:aa:10:5c:ea:eb:5a:a6:d6:9a:b8:f9:59:71:e0:f2:
         e1:9f:7d:f2:73:b3:39:5c:d6:9e:8e:fc:54:9d:cb:60:8d:17:
         de:e2:a4:a3:cd:61:fb:3e:f8:48:e5:94:a6:8e:de:9a:8a:5b:
         31:0f:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:53:34 2026 by rpki-client