Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153126.roa
File:                     AS153126.roa (raw, json)
Hash identifier:          YJ/P1zWifunYM3oH77qZVnhdZuiYoGzGvwTEdAn6XG4=
Subject key identifier:   63:71:CF:88:A4:7D:30:DD:49:E9:C8:09:9F:A7:2D:02:75:9C:82:19
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1AB1C0E10ADCE155C219AD6B3C2C3A8221D61146
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153126.roa
Signing time:             Mon 21 Jul 2025 01:56:07 +0000
ROA not before:           Mon 21 Jul 2025 01:51:07 +0000
ROA not after:            Mon 20 Jul 2026 01:56:07 +0000
asID:                     153126
IP address blocks:        2001:df4:48c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 11:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b1:c0:e1:0a:dc:e1:55:c2:19:ad:6b:3c:2c:3a:82:21:d6:11:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 21 01:51:07 2025 GMT
            Not After : Jul 20 01:56:07 2026 GMT
        Subject: CN=6371CF88A47D30DD49E9C8099FA72D02759C8219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ec:c9:4e:5d:81:8f:75:09:c1:6d:59:d1:20:
                    b1:d0:f7:d8:74:39:cd:12:18:d2:cf:8d:28:6c:a1:
                    05:29:50:71:aa:e5:95:98:6e:ee:92:52:90:ac:26:
                    78:b0:53:4e:f1:cd:d9:e2:fc:65:8a:fb:c8:73:e7:
                    40:37:8f:f4:01:5b:f6:f1:ee:3a:0f:1d:5a:ed:fc:
                    ae:6a:e3:4c:73:53:d3:1b:83:78:01:4f:f6:25:4b:
                    d0:d0:5b:93:fb:e9:07:55:0b:6f:85:4b:78:5a:8b:
                    07:ca:49:9a:05:66:52:ad:e7:a2:9d:c4:1f:c9:00:
                    9e:3b:a5:3f:d8:c0:1a:fb:9e:e1:aa:54:4d:a2:8f:
                    2a:be:9b:59:aa:ac:13:d7:58:42:54:10:d2:63:8c:
                    59:8e:86:a8:3b:bc:c5:bb:90:d5:e0:b9:6b:23:1a:
                    84:c9:a3:14:7a:17:d3:e4:b7:c0:6e:17:92:4f:fa:
                    5d:3a:54:17:d5:25:2a:9f:a9:71:06:ce:1a:d7:2d:
                    c4:e9:b4:89:52:a7:5d:6c:c3:44:e6:9d:73:3a:7a:
                    9b:71:21:b1:50:17:26:4b:99:df:0c:a3:27:c5:62:
                    9b:ab:ec:ff:ac:e1:51:91:3a:d9:ef:a8:41:4a:da:
                    54:20:b3:dc:39:e4:06:ee:30:70:da:f1:92:61:d0:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:71:CF:88:A4:7D:30:DD:49:E9:C8:09:9F:A7:2D:02:75:9C:82:19
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153126.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:48c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:d0:84:a2:b8:8f:fb:3c:01:1e:09:da:9a:3c:fd:4c:77:
         59:18:6d:d6:78:45:b0:47:37:bf:84:b9:9a:f9:28:80:98:3b:
         ea:c3:16:8b:74:f1:64:cc:a6:fc:25:16:cb:14:f8:c6:aa:c9:
         3c:c1:8c:7e:a9:7c:31:43:90:04:a2:dd:fc:c8:68:82:c9:83:
         df:d3:9a:4f:ec:b1:e5:74:d4:1d:95:d5:d5:a3:c7:45:6e:4c:
         0e:f1:09:4d:9e:56:35:09:8e:ce:3b:ee:ac:19:e3:40:74:ec:
         31:9f:f4:20:3f:ab:38:15:4f:0f:9a:74:2f:75:b4:11:34:06:
         ca:6c:1d:c5:4e:be:ac:b4:10:e4:1d:a6:1c:89:c0:88:c1:e8:
         a8:d9:f6:9a:8a:fd:ab:9d:ee:51:9c:cf:94:e9:49:b5:31:2b:
         5b:99:ef:b6:66:1b:44:4e:91:a5:33:8d:dd:c2:a3:2e:c8:2d:
         ef:3f:33:b7:34:b5:87:d7:d8:96:c8:97:04:53:27:ab:fa:76:
         15:0e:c0:50:2b:c3:f9:e2:c5:83:3d:3e:10:e2:f9:93:18:41:
         03:dd:3e:b9:f6:19:ba:d5:cd:b1:78:34:02:1e:b2:91:3b:5d:
         72:37:43:d7:46:67:3a:f8:73:d7:0a:36:73:68:46:33:58:1d:
         2a:45:c3:57
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUGrHA4Qrc4VXCGa1rPCw6giHWEUYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMTAxNTEwN1oX
DTI2MDcyMDAxNTYwN1owMzExMC8GA1UEAxMoNjM3MUNGODhBNDdEMzBERDQ5RTlD
ODA5OUZBNzJEMDI3NTlDODIxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPTsyU5dgY91CcFtWdEgsdD32HQ5zRIY0s+NKGyhBSlQcarllZhu7pJSkKwm
eLBTTvHN2eL8ZYr7yHPnQDeP9AFb9vHuOg8dWu38rmrjTHNT0xuDeAFP9iVL0NBb
k/vpB1ULb4VLeFqLB8pJmgVmUq3nop3EH8kAnjulP9jAGvue4apUTaKPKr6bWaqs
E9dYQlQQ0mOMWY6GqDu8xbuQ1eC5ayMahMmjFHoX0+S3wG4Xkk/6XTpUF9UlKp+p
cQbOGtctxOm0iVKnXWzDROadczp6m3EhsVAXJkuZ3wyjJ8Vim6vs/6zhUZE62e+o
QUraVCCz3DnkBu4wcNrxkmHQNhkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRjcc+I
pH0w3UnpyAmfpy0CdZyCGTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzEyNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfRIwDANBgkqhkiG9w0BAQsFAAOCAQEAdrPQhKK4j/s8AR4J
2po8/Ux3WRht1nhFsEc3v4S5mvkogJg76sMWi3TxZMym/CUWyxT4xqrJPMGMfql8
MUOQBKLd/MhogsmD39OaT+yx5XTUHZXV1aPHRW5MDvEJTZ5WNQmOzjvurBnjQHTs
MZ/0ID+rOBVPD5p0L3W0ETQGymwdxU6+rLQQ5B2mHInAiMHoqNn2mor9q53uUZzP
lOlJtTErW5nvtmYbRE6RpTON3cKjLsgt7z8ztzS1h9fYlsiXBFMnq/p2FQ7AUCvD
+eLFgz0+EOL5kxhBA90+ufYZutXNsXg0Ah6ykTtdcjdD10ZnOvhz1wo2c2hGM1gd
KkXDVw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:24:00 2025 by rpki-client