Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138050.roa
File:                     AS138050.roa (raw, json)
Hash identifier:          5Me2syf+16hTMM9lYHmbDEj7CHRBdPhxknjbbR7q54U=
Subject key identifier:   02:4E:1C:97:0E:F9:F4:62:D8:65:04:74:47:6B:BB:6F:39:5D:78:42
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       452263EEC2F210AB20D1FC600DF7B78988A60875
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138050.roa
Signing time:             Sat 02 May 2026 21:08:01 +0000
ROA not before:           Sat 02 May 2026 21:03:01 +0000
ROA not after:            Sat 01 May 2027 21:08:01 +0000
asID:                     138050
IP address blocks:        103.147.222.0/24 maxlen: 24
                          202.58.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 03:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:22:63:ee:c2:f2:10:ab:20:d1:fc:60:0d:f7:b7:89:88:a6:08:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 21:03:01 2026 GMT
            Not After : May  1 21:08:01 2027 GMT
        Subject: CN=024E1C970EF9F462D8650474476BBB6F395D7842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:4b:b1:fb:28:2f:46:c9:b3:c4:ca:2a:36:
                    5f:83:9d:01:40:2a:02:e9:34:f7:c2:ea:90:f4:6b:
                    4f:5b:ae:f3:85:b2:a3:5e:68:f8:08:0f:b3:1c:f0:
                    8b:fd:fe:95:c2:3f:c5:1e:40:e2:6a:2f:de:cd:69:
                    ff:e7:ca:e8:34:81:ce:98:4f:2c:8c:2f:d9:ff:69:
                    d5:6d:ee:a4:de:2d:10:6d:39:63:70:17:ef:cb:ae:
                    7c:8d:c8:87:c4:04:5f:32:6a:e1:3f:94:b1:21:d8:
                    c0:11:b6:37:d0:25:06:90:4d:2c:9f:3d:ef:82:22:
                    2c:b2:a6:52:03:30:f6:d6:54:50:e4:99:e2:69:cd:
                    68:96:c6:91:a5:fe:67:2d:6a:45:90:26:16:a8:09:
                    d5:a8:6f:08:db:1a:64:5a:9d:88:d1:b2:c9:aa:2a:
                    ae:c0:e3:ad:12:06:77:30:9b:f4:9e:0c:a6:bc:6f:
                    a5:5b:bd:40:85:90:98:61:dd:0e:5b:94:e1:35:60:
                    6c:a3:8b:e7:4e:29:3d:89:19:cc:72:93:b7:f5:e7:
                    eb:a3:23:8e:f3:12:31:c9:87:a9:1f:2b:8f:b8:15:
                    69:d7:45:d2:35:f6:c9:25:7e:f3:4c:34:b7:ca:9a:
                    c7:29:94:f1:48:df:9c:9e:dd:a9:a9:c5:e7:64:12:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4E:1C:97:0E:F9:F4:62:D8:65:04:74:47:6B:BB:6F:39:5D:78:42
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138050.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.222.0/24
                  202.58.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:24:c4:e5:3d:63:31:88:fc:e4:99:4f:ed:81:6b:0f:ea:
         e5:38:31:55:b3:69:ba:94:c3:14:58:c2:7e:df:b0:3c:28:e6:
         d3:f5:0c:58:eb:29:27:6d:b8:08:76:78:fa:1e:fc:0a:76:26:
         8f:ab:5f:75:29:a1:b7:ce:14:13:1a:b3:38:67:49:d7:8d:d8:
         50:37:58:dd:43:b1:ce:00:79:25:f0:94:14:59:f6:5d:66:05:
         19:9e:c3:06:86:c3:34:1c:82:c0:b2:94:b5:f9:21:c2:3b:32:
         bc:0b:02:35:e8:52:fe:01:48:91:2f:fb:9e:db:9b:3a:30:0e:
         80:dd:e2:cb:0a:bb:bc:01:80:80:53:ad:ce:98:32:c4:c9:a2:
         cf:63:b7:35:75:93:7b:b1:34:48:4d:06:0c:8f:a0:75:0e:b1:
         19:c9:e0:10:d4:4a:33:9f:31:83:48:78:9b:b6:04:e9:5c:9a:
         96:fc:b1:5e:ad:06:5a:5e:ba:88:8f:b4:77:ac:5d:6e:de:1f:
         f0:8a:7a:1e:9b:18:b5:b6:44:7a:12:fe:42:9d:c0:5c:65:72:
         f2:7a:2c:e6:ca:20:7c:b8:05:66:d4:db:a3:93:e9:a8:98:6c:
         a9:95:87:94:4d:65:e3:c0:71:d0:67:3e:fa:f1:cb:7c:3d:b6:
         c1:c4:6b:86
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIURSJj7sLyEKsg0fxgDfe3iYimCHUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDMwMVoX
DTI3MDUwMTIxMDgwMVowMzExMC8GA1UEAxMoMDI0RTFDOTcwRUY5RjQ2MkQ4NjUw
NDc0NDc2QkJCNkYzOTVENzg0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJTzS7H7KC9GybPEyio2X4OdAUAqAuk098LqkPRrT1uu84Wyo15o+AgPsxzw
i/3+lcI/xR5A4mov3s1p/+fK6DSBzphPLIwv2f9p1W3upN4tEG05Y3AX78uufI3I
h8QEXzJq4T+UsSHYwBG2N9AlBpBNLJ8974IiLLKmUgMw9tZUUOSZ4mnNaJbGkaX+
Zy1qRZAmFqgJ1ahvCNsaZFqdiNGyyaoqrsDjrRIGdzCb9J4MprxvpVu9QIWQmGHd
DluU4TVgbKOL504pPYkZzHKTt/Xn66MjjvMSMcmHqR8rj7gVaddF0jX2ySV+80w0
t8qaxymU8UjfnJ7dqanF52QSBNMCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBQCThyX
Dvn0YthlBHRHa7tvOV14QjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM4MDUwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA
ATAMAwQAZ5PeAwQAyjryMA0GCSqGSIb3DQEBCwUAA4IBAQBx6CTE5T1jMYj85JlP
7YFrD+rlODFVs2m6lMMUWMJ+37A8KObT9QxY6yknbbgIdnj6HvwKdiaPq191KaG3
zhQTGrM4Z0nXjdhQN1jdQ7HOAHkl8JQUWfZdZgUZnsMGhsM0HILAspS1+SHCOzK8
CwI16FL+AUiRL/ue25s6MA6A3eLLCru8AYCAU63OmDLEyaLPY7c1dZN7sTRITQYM
j6B1DrEZyeAQ1EoznzGDSHibtgTpXJqW/LFerQZaXrqIj7R3rF1u3h/winoemxi1
tkR6Ev5CncBcZXLyeizmyiB8uAVm1Nujk+momGyplYeUTWXjwHHQZz768ct8PbbB
xGuG
-----END CERTIFICATE-----
Generated at Sun May 3 01:44:02 2026 by rpki-client