Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149364.roa
File:                     AS149364.roa (raw, json)
Hash identifier:          FKaEqzLeL6P4CvcpYzW5e2D+pv9+uo/RzjVubVSnpPg=
Subject key identifier:   72:3A:5C:8F:81:C5:C2:7E:05:A3:8A:C6:EA:5E:03:10:85:94:8C:8D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6AE79758D7742087F6E13DA7A4AEEE7DC1F956EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149364.roa
Signing time:             Thu 28 Aug 2025 01:28:26 +0000
ROA not before:           Thu 28 Aug 2025 01:23:26 +0000
ROA not after:            Thu 27 Aug 2026 01:28:26 +0000
asID:                     149364
IP address blocks:        103.176.77.0/24 maxlen: 24
                          2402:1d60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 17:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e7:97:58:d7:74:20:87:f6:e1:3d:a7:a4:ae:ee:7d:c1:f9:56:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 28 01:23:26 2025 GMT
            Not After : Aug 27 01:28:26 2026 GMT
        Subject: CN=723A5C8F81C5C27E05A38AC6EA5E031085948C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:39:a3:cc:55:88:7d:d8:62:be:9d:54:89:
                    7e:95:40:3d:8d:90:e0:bb:73:9a:c4:97:98:1f:92:
                    79:c5:d1:0d:0c:a2:a2:5c:35:25:49:a5:b0:1b:37:
                    af:cf:12:b5:b0:87:84:5d:9b:68:25:f0:88:ed:39:
                    7b:b1:91:63:d4:84:8e:67:84:93:b2:ae:5a:ba:3b:
                    7b:50:c1:31:a5:a3:86:16:83:f7:70:1e:df:f7:a9:
                    75:67:e9:68:d5:3b:c3:2f:50:e9:3a:a0:e3:f2:c0:
                    15:b0:f9:2e:6b:a8:1f:ae:fc:1f:ce:55:50:61:62:
                    53:eb:9c:ca:81:2a:dd:b5:a7:c5:6d:13:62:47:26:
                    73:24:59:eb:55:b0:e3:38:dc:0a:db:6b:b4:32:02:
                    a8:73:2a:bb:79:a6:fd:61:6d:d6:de:b6:2f:5d:2e:
                    a6:51:a8:89:ea:99:d7:57:f5:47:d8:bd:02:d5:59:
                    22:2d:d8:9d:fc:10:24:00:ad:db:7f:51:d3:50:96:
                    ea:8a:40:fe:66:79:94:31:9d:10:a8:59:82:cf:d2:
                    e1:e5:34:21:57:06:92:5c:1a:1f:3c:2e:f4:75:b2:
                    34:60:06:1e:71:3a:0c:a3:e3:8d:5c:4d:c5:4f:d0:
                    72:a4:cf:8b:16:a1:2d:a7:d8:02:be:34:5e:f5:80:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:5C:8F:81:C5:C2:7E:05:A3:8A:C6:EA:5E:03:10:85:94:8C:8D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149364.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.77.0/24
                IPv6:
                  2402:1d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:0f:1b:df:e2:54:8f:e4:b9:7a:38:1a:e1:01:d6:b6:d8:
         30:56:56:c8:5e:c7:0c:6a:90:6d:c9:67:9c:96:1e:66:c8:3e:
         0e:94:2f:be:21:ad:32:f2:3a:32:a4:29:4e:07:e9:0a:48:5c:
         4e:bc:a0:3a:49:05:ad:47:e0:33:bc:ad:d0:42:ba:99:22:6f:
         44:84:d9:86:22:37:ba:d9:c4:84:00:ca:5e:69:0b:a6:47:03:
         aa:ed:b0:79:0e:1e:95:ec:cb:4e:b5:39:61:52:c8:2a:2c:8f:
         21:6b:14:8a:61:5b:e8:26:82:ea:19:7f:69:04:f7:d3:ff:fa:
         2a:8b:0f:88:e4:f0:8d:90:65:95:e7:f2:36:53:a3:22:43:93:
         1f:67:76:06:6e:6d:d4:f2:0d:27:f6:a6:da:50:97:26:33:40:
         b9:ff:9e:a1:a5:63:ee:36:90:a7:2b:64:7d:6f:79:49:d7:6c:
         4f:d4:19:ae:5f:ec:f6:31:16:aa:82:2d:b9:74:b5:8f:a2:a0:
         46:8f:1e:5e:b4:74:f5:00:b0:ef:0b:24:eb:50:9a:73:c9:8f:
         67:b1:77:12:c6:a2:06:ac:6e:73:11:68:ff:b7:e8:86:fc:33:
         22:f7:a9:f9:99:cb:ba:bc:2d:f7:c6:8f:6b:77:6c:8e:dd:71:
         a6:25:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:17:32 2025 by rpki-client