Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135477.roa
File:                     AS135477.roa (raw, json)
Hash identifier:          jo7RC8neuUewT59X7v35RD8GA//z7nuttv536aQxgz4=
Subject key identifier:   AF:10:46:11:12:E8:FD:5F:96:AB:E5:5A:8B:0D:3F:0F:1A:AD:3A:C0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0668FFD21CAA5653AB7A071290557F220D94627F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135477.roa
Signing time:             Tue 26 Aug 2025 07:10:31 +0000
ROA not before:           Tue 26 Aug 2025 07:05:31 +0000
ROA not after:            Tue 25 Aug 2026 07:10:31 +0000
asID:                     135477
IP address blocks:        103.241.178.0/24 maxlen: 24
                          202.47.88.0/24 maxlen: 24
                          203.29.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 17:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:68:ff:d2:1c:aa:56:53:ab:7a:07:12:90:55:7f:22:0d:94:62:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 26 07:05:31 2025 GMT
            Not After : Aug 25 07:10:31 2026 GMT
        Subject: CN=AF10461112E8FD5F96ABE55A8B0D3F0F1AAD3AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:99:b7:ff:99:cd:a2:f8:6a:b8:74:d2:01:
                    54:f5:eb:d8:4b:61:f1:22:d3:01:ca:ce:32:6c:e6:
                    92:c6:09:e2:43:de:44:ec:6e:16:c8:fa:e1:ba:2e:
                    7f:76:b0:a3:2a:4a:bd:ce:ae:f3:0c:80:35:f3:a9:
                    38:32:f5:da:13:14:72:a9:97:4c:24:4b:bf:a2:3f:
                    de:1c:12:6e:f1:b1:34:93:30:24:4c:bd:32:31:ff:
                    7a:4d:93:1c:6a:69:86:d8:3a:0e:52:92:7c:e7:27:
                    b2:42:53:ef:1d:4e:e6:a6:fb:dd:85:e4:95:05:3a:
                    52:d7:58:3c:21:85:0f:8d:9e:92:0a:58:89:0e:80:
                    5f:de:a9:29:6d:53:1d:bf:66:16:56:c2:cf:5e:00:
                    9d:9a:29:5c:56:79:18:03:91:88:8c:30:8c:e9:28:
                    1b:55:26:2b:8c:eb:06:87:42:cd:1b:7a:bb:74:d4:
                    c2:cb:4e:14:64:20:62:4e:e4:9f:b3:d3:cc:a1:44:
                    55:a6:ee:a5:5b:d4:78:3e:fc:3c:f3:8d:fc:5a:5e:
                    9c:8a:fd:af:8b:a0:3e:24:3e:e2:fd:32:5e:8f:82:
                    9b:f1:3e:b7:13:9e:c6:ff:84:31:17:d6:5c:68:fa:
                    19:9b:31:ff:d0:af:fc:bd:c3:33:5a:69:10:a5:cb:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:10:46:11:12:E8:FD:5F:96:AB:E5:5A:8B:0D:3F:0F:1A:AD:3A:C0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135477.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.178.0/24
                  202.47.88.0/24
                  203.29.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d9:61:9a:83:0d:de:6e:d7:84:f3:a5:e7:5c:f2:a4:15:30:
         e1:20:e7:f2:9a:fa:9c:42:37:52:c6:c4:c6:ec:39:51:d8:84:
         83:79:91:ae:98:be:39:79:22:bd:d3:0d:17:af:ea:22:0c:52:
         f9:ed:7b:01:ec:fd:f6:0e:84:f1:90:31:0a:ec:32:c7:03:87:
         7b:a7:95:a4:e3:4e:f3:1a:39:3c:97:9c:04:3c:0c:53:c8:65:
         f9:43:b9:80:29:18:ea:79:ec:cc:1b:4b:e2:54:62:67:2e:a6:
         ea:0b:c7:9a:aa:44:a6:4a:08:7e:24:f0:b0:c6:26:40:33:64:
         c1:6b:5d:18:67:61:23:86:c9:79:18:d4:55:ea:dd:11:d0:ae:
         2d:52:66:45:86:59:95:45:c6:6a:f2:53:e0:ea:99:17:b6:bf:
         f6:6f:1c:1f:74:dd:8d:d7:c4:d3:fd:78:85:d1:92:92:6b:6d:
         8f:e6:e4:32:d5:59:22:7d:c4:e3:ba:12:d4:57:92:d8:df:5d:
         fc:b1:20:e0:f1:77:55:5f:7d:08:f2:54:0e:80:79:8d:7e:78:
         87:91:56:2f:c2:d4:94:ea:22:80:07:6b:c0:1b:36:b3:bd:6b:
         83:27:0c:cf:6f:91:ff:a2:43:90:a9:03:f0:3e:e3:e6:35:8d:
         94:ec:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:09:20 2025 by rpki-client