Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153962.roa
File:                     AS153962.roa (raw, json)
Hash identifier:          qz+5giiLQWPRG8m2ML9yn6+VsqHl0oK0Rqdx6rb4KK0=
Subject key identifier:   7A:C0:F5:E3:5B:E1:9F:4C:2F:E2:8B:8A:E6:69:B1:8B:6A:84:94:19
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       63AD7C3F25C946423713CC64D6CEF2B7E85776C6
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153962.roa
Signing time:             Thu 03 Jul 2025 02:59:18 +0000
ROA not before:           Thu 03 Jul 2025 02:54:18 +0000
ROA not after:            Thu 02 Jul 2026 02:59:18 +0000
asID:                     153962
IP address blocks:        165.99.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 13:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ad:7c:3f:25:c9:46:42:37:13:cc:64:d6:ce:f2:b7:e8:57:76:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jul  3 02:54:18 2025 GMT
            Not After : Jul  2 02:59:18 2026 GMT
        Subject: CN=7AC0F5E35BE19F4C2FE28B8AE669B18B6A849419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:01:a4:57:13:cf:1b:ae:52:81:52:0e:11:
                    63:7b:43:a9:ab:e1:17:05:01:dc:aa:88:81:f7:69:
                    d1:66:b4:ec:3a:4e:be:7a:3b:f3:f2:71:22:6a:a7:
                    bd:3f:05:17:4b:bd:3d:a6:88:d1:b8:1b:43:0f:3b:
                    99:a1:70:24:be:63:43:72:1e:5d:3f:c1:75:bf:4c:
                    6a:1e:03:3a:ce:d5:e1:47:63:c8:83:fb:0a:32:e8:
                    38:04:6a:9a:7d:39:a8:ab:30:2a:8e:6f:39:e0:32:
                    bb:3f:ef:e4:d0:66:16:07:09:e4:1a:13:69:5c:9c:
                    47:eb:62:7f:00:01:74:96:3f:06:2a:9f:6a:99:8f:
                    f9:c5:f7:06:0f:dd:58:27:0e:d4:06:1d:a0:0c:9e:
                    0d:a4:5d:1a:54:56:11:ce:22:4a:5c:ab:86:a6:9d:
                    14:fd:00:b0:a0:5e:76:e5:1a:fa:14:89:60:b8:44:
                    e3:c0:e4:c7:ea:5b:b4:56:f4:95:46:41:aa:8a:ed:
                    fd:1f:0d:ae:45:8d:81:98:00:c4:9d:38:d2:8e:7d:
                    56:47:18:c6:5f:30:09:86:f2:bb:c8:6b:3e:c3:96:
                    93:17:49:ad:c4:56:a6:bd:79:17:b4:41:d2:97:92:
                    3c:1e:d7:ac:fa:9d:e0:dc:d2:3e:81:53:57:a8:3a:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C0:F5:E3:5B:E1:9F:4C:2F:E2:8B:8A:E6:69:B1:8B:6A:84:94:19
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153962.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:50:63:24:c0:c2:a1:5a:13:88:9f:93:8e:59:af:85:67:7b:
         97:b1:11:4e:44:35:62:00:1e:00:07:8f:bf:04:91:71:dd:b1:
         a7:a9:e5:f6:5e:c3:c7:08:47:df:a9:3e:82:3f:56:76:23:2d:
         f3:40:05:75:8e:32:68:11:8f:a2:02:38:6a:06:78:be:e5:1a:
         e3:8f:1f:9f:96:1c:0c:aa:e0:38:4d:a9:86:9b:8b:ff:60:59:
         72:48:b7:9b:35:58:40:81:9c:25:f0:e4:05:18:4c:d8:b5:95:
         f9:ee:6e:a1:ea:d4:03:5b:9f:40:13:67:cc:94:fc:94:ff:5b:
         54:3c:d7:04:b3:9a:93:0a:a1:4f:3d:8e:b0:68:a0:a5:4d:80:
         6e:dd:21:00:49:f2:44:ee:cc:90:7f:07:02:8c:73:e5:14:b0:
         03:1a:77:79:1b:42:ad:cd:6d:f4:80:6d:fa:2d:ad:da:71:f1:
         ca:9d:7d:d4:9d:af:fb:7d:5e:d7:5f:08:3c:9f:2e:f5:2c:a7:
         68:af:bd:8c:83:26:64:b9:e0:34:f0:71:19:24:5b:44:51:46:
         e8:3e:9d:b1:b7:d4:14:81:19:fd:70:9d:bc:0b:c8:cc:e9:98:
         cd:63:a9:f3:1d:40:50:05:79:d2:18:a4:83:e4:0f:af:01:df:
         a2:6d:56:85
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUY618PyXJRkI3E8xk1s7yt+hXdsYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcwMzAyNTQxOFoX
DTI2MDcwMjAyNTkxOFowMzExMC8GA1UEAxMoN0FDMEY1RTM1QkUxOUY0QzJGRTI4
QjhBRTY2OUIxOEI2QTg0OTQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANS8AaRXE88brlKBUg4RY3tDqavhFwUB3KqIgfdp0Wa07DpOvno78/JxImqn
vT8FF0u9PaaI0bgbQw87maFwJL5jQ3IeXT/Bdb9Mah4DOs7V4UdjyIP7CjLoOARq
mn05qKswKo5vOeAyuz/v5NBmFgcJ5BoTaVycR+tifwABdJY/BiqfapmP+cX3Bg/d
WCcO1AYdoAyeDaRdGlRWEc4iSlyrhqadFP0AsKBeduUa+hSJYLhE48Dkx+pbtFb0
lUZBqort/R8NrkWNgZgAxJ040o59VkcYxl8wCYbyu8hrPsOWkxdJrcRWpr15F7RB
0peSPB7XrPqd4NzSPoFTV6g64u8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR6wPXj
W+GfTC/ii4rmabGLaoSUGTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mzk2Mi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKVjujANBgkqhkiG9w0BAQsFAAOCAQEAN1BjJMDCoVoTiJ+Tjlmv
hWd7l7ERTkQ1YgAeAAePvwSRcd2xp6nl9l7DxwhH36k+gj9WdiMt80AFdY4yaBGP
ogI4agZ4vuUa448fn5YcDKrgOE2phpuL/2BZcki3mzVYQIGcJfDkBRhM2LWV+e5u
oerUA1ufQBNnzJT8lP9bVDzXBLOakwqhTz2OsGigpU2Abt0hAEnyRO7MkH8HAoxz
5RSwAxp3eRtCrc1t9IBt+i2t2nHxyp191J2v+31e118IPJ8u9SynaK+9jIMmZLng
NPBxGSRbRFFG6D6dsbfUFIEZ/XCdvAvIzOmYzWOp8x1AUAV50hikg+QPrwHfom1W
hQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:56:20 2025 by rpki-client