Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150187.roa
File:                     AS150187.roa (raw, json)
Hash identifier:          03WeV12VFTgzEOcTq7mPviaSXutlOXaCsDsqzdDiTW0=
Subject key identifier:   AD:1D:83:1D:28:41:40:8B:A9:04:46:07:97:61:2F:B5:38:6D:B3:79
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       6EB60BE846EADFC12F2339885123686CBD851BFE
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150187.roa
Signing time:             Sat 02 May 2026 09:23:27 +0000
ROA not before:           Sat 02 May 2026 09:18:27 +0000
ROA not after:            Sat 01 May 2027 09:23:27 +0000
asID:                     150187
IP address blocks:        157.15.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 20:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b6:0b:e8:46:ea:df:c1:2f:23:39:88:51:23:68:6c:bd:85:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: May  2 09:18:27 2026 GMT
            Not After : May  1 09:23:27 2027 GMT
        Subject: CN=AD1D831D2841408BA904460797612FB5386DB379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:68:d4:81:33:2a:47:c2:15:1c:1e:4d:4c:
                    20:0a:08:01:05:ea:a6:63:6c:11:b3:94:08:65:16:
                    0d:4a:e9:f3:a0:93:fd:a8:03:05:24:83:14:83:3d:
                    a5:8f:4f:3e:9c:30:9b:a4:37:80:2b:dd:a1:88:b3:
                    fd:82:f4:fa:29:0e:5c:c5:51:60:c1:7d:e1:78:b6:
                    6b:0d:34:9f:b8:08:c8:cb:36:85:6e:29:b6:40:7b:
                    a7:77:e4:7c:22:5d:1c:63:bb:c9:d1:a6:bf:6d:ab:
                    e5:f0:3f:e9:75:e5:6d:74:bf:4b:f5:e8:82:cd:7a:
                    0b:26:14:e6:c0:f1:2a:74:92:4a:44:6e:7a:4f:d3:
                    c3:f9:9f:82:3b:7e:5a:17:b9:6b:f3:a0:72:49:aa:
                    b9:61:72:4f:b9:5a:c9:9e:f1:0e:b1:64:ce:bb:5a:
                    ac:c3:ca:95:4f:f9:4e:72:0f:2c:d0:7e:e5:68:e9:
                    95:c3:a1:fc:49:2f:87:74:08:0b:9c:89:a1:ac:53:
                    d0:b9:55:cf:6b:04:13:49:61:ef:50:40:ae:d6:1a:
                    bf:cd:08:b1:4b:0c:4f:53:63:84:2a:13:64:ce:cc:
                    f9:0a:85:3c:9e:53:9d:6a:13:7e:f0:bf:36:f5:e9:
                    3e:c9:cd:e6:8c:f5:f2:58:2d:c2:6f:26:37:d0:97:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1D:83:1D:28:41:40:8B:A9:04:46:07:97:61:2F:B5:38:6D:B3:79
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150187.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:78:50:66:95:f2:ea:ac:6a:40:8c:a0:b1:04:c7:68:94:
         0a:7a:ae:d0:04:31:e2:ee:1f:18:53:64:5a:2a:63:12:cf:b3:
         9d:dc:4f:0a:7d:71:7f:f9:3c:b1:7b:69:a7:3f:27:59:8a:86:
         62:3a:20:67:d5:62:f2:b3:7f:4e:ad:8c:e5:34:14:fc:dc:b1:
         e5:6e:00:f5:b9:b8:7a:f0:65:62:89:f2:d3:8e:0a:ec:65:ce:
         94:20:1e:3d:cd:6b:bb:84:b0:fc:f6:f0:14:be:d9:01:9f:6b:
         22:14:72:a9:f1:4e:1b:45:4c:c7:95:da:24:de:e1:c4:3d:79:
         ab:a7:3c:db:1a:a1:79:62:f0:85:53:f1:61:7a:82:17:8c:7c:
         e1:3a:3b:44:d7:d2:bb:ce:e9:e3:8c:8f:51:8e:fe:cb:83:59:
         d9:34:d9:75:9d:19:88:ef:6d:66:a4:45:06:fe:b5:33:9f:f1:
         57:49:3d:7b:9b:da:fb:fc:25:89:df:57:b3:9d:9c:fd:66:f4:
         f7:17:0d:6b:08:9c:6e:ae:20:13:5a:13:a4:bd:0f:45:44:b7:
         18:01:6f:00:38:ab:db:d2:b1:da:6d:8c:f4:22:40:4c:33:1b:
         93:8a:d8:19:c6:d5:b7:3b:b8:03:e3:42:3d:25:b7:f0:22:f6:
         47:40:23:21
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUbrYL6Ebq38EvIzmIUSNobL2FG/4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0
NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgyN1oX
DTI3MDUwMTA5MjMyN1owMzExMC8GA1UEAxMoQUQxRDgzMUQyODQxNDA4QkE5MDQ0
NjA3OTc2MTJGQjUzODZEQjM3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMOXaNSBMypHwhUcHk1MIAoIAQXqpmNsEbOUCGUWDUrp86CT/agDBSSDFIM9
pY9PPpwwm6Q3gCvdoYiz/YL0+ikOXMVRYMF94Xi2aw00n7gIyMs2hW4ptkB7p3fk
fCJdHGO7ydGmv22r5fA/6XXlbXS/S/Xogs16CyYU5sDxKnSSSkRuek/Tw/mfgjt+
Whe5a/OgckmquWFyT7layZ7xDrFkzrtarMPKlU/5TnIPLNB+5WjplcOh/Ekvh3QI
C5yJoaxT0LlVz2sEE0lh71BArtYav80IsUsMT1NjhCoTZM7M+QqFPJ5TnWoTfvC/
NvXpPsnN5oz18lgtwm8mN9CXc/0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBStHYMd
KEFAi6kERgeXYS+1OG2zeTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT
YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB
NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG
MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz
Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUwMTg3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAnQ9JMA0GCSqGSIb3DQEBCwUAA4IBAQBagnhQZpXy6qxqQIygsQTHaJQK
eq7QBDHi7h8YU2RaKmMSz7Od3E8KfXF/+Tyxe2mnPydZioZiOiBn1WLys39OrYzl
NBT83LHlbgD1ubh68GViifLTjgrsZc6UIB49zWu7hLD89vAUvtkBn2siFHKp8U4b
RUzHldok3uHEPXmrpzzbGqF5YvCFU/FheoIXjHzhOjtE19K7zunjjI9Rjv7Lg1nZ
NNl1nRmI721mpEUG/rUzn/FXST17m9r7/CWJ31eznZz9ZvT3Fw1rCJxuriATWhOk
vQ9FRLcYAW8AOKvb0rHabYz0IkBMMxuTitgZxtW3O7gD40I9JbfwIvZHQCMh
-----END CERTIFICATE-----
Generated at Sat May 2 21:03:46 2026 by rpki-client