Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147082.roa
File:                     AS147082.roa (raw, json)
Hash identifier:          Eu2mxqnDHhZAJD4pIMJB5rqG3oPqdc2id89GhCzWavY=
Subject key identifier:   0F:79:A0:69:9D:71:94:14:14:67:CC:51:3D:AB:A1:B6:1B:BB:A1:B0
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       25902885F3E07CBA1DD573B2F34A99701C51271E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147082.roa
Signing time:             Sat 02 May 2026 08:34:45 +0000
ROA not before:           Sat 02 May 2026 08:29:45 +0000
ROA not after:            Sat 01 May 2027 08:34:45 +0000
asID:                     147082
IP address blocks:        103.173.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:90:28:85:f3:e0:7c:ba:1d:d5:73:b2:f3:4a:99:70:1c:51:27:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 08:29:45 2026 GMT
            Not After : May  1 08:34:45 2027 GMT
        Subject: CN=0F79A0699D7194141467CC513DABA1B61BBBA1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:3e:a9:b2:21:dc:c9:89:fc:e3:d6:61:67:
                    03:fe:9f:c2:ec:eb:90:d5:dc:c9:6f:f4:d6:68:9e:
                    db:96:c0:70:ac:f8:96:64:56:e0:3f:fc:f2:7f:54:
                    2a:d6:71:9e:d4:9c:c0:be:df:4d:55:ce:22:ea:12:
                    05:80:74:42:40:55:0f:43:93:18:bd:ff:11:ab:3c:
                    75:80:18:ee:ae:51:e2:96:ce:e4:88:a2:e6:a1:db:
                    99:e4:ed:af:6d:c6:e6:15:91:aa:0b:f2:7b:4f:10:
                    f0:32:b1:03:35:bf:01:87:b0:72:48:18:70:ed:8f:
                    b0:d0:b8:48:62:6e:91:0c:93:10:d3:e0:27:b9:6c:
                    24:cf:91:89:62:4c:c1:5f:10:4f:d4:62:f3:4b:2c:
                    5f:b4:72:ce:c7:5f:dd:86:c5:25:ae:61:80:ec:e1:
                    c7:d0:f5:41:e1:1a:51:fc:03:3b:4b:d0:d9:5a:bf:
                    4f:c4:aa:05:5d:d3:29:14:7c:4d:a0:94:51:0a:68:
                    5a:c5:0f:a7:01:d0:12:37:d7:47:fe:de:53:49:2d:
                    a8:ef:14:b5:f0:8c:7a:4b:33:54:38:55:9c:ac:9c:
                    40:1a:cf:fd:5c:3a:ce:82:46:28:11:2c:db:4f:e1:
                    18:91:01:9b:9f:83:2c:05:be:34:ea:f7:b4:0a:1e:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:A0:69:9D:71:94:14:14:67:CC:51:3D:AB:A1:B6:1B:BB:A1:B0
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:3a:f0:0e:72:07:c7:2e:df:dc:12:97:84:9a:5a:24:ef:
         2c:67:63:c6:2d:72:e3:ec:22:b7:55:bb:e6:64:a1:0f:f3:9d:
         75:84:03:73:c8:91:5d:a9:7f:d7:45:0e:4a:4e:5f:aa:b8:dd:
         04:f0:ea:f2:fc:80:ea:6e:e8:d0:a8:8b:14:0a:32:ba:0b:6e:
         8f:3f:39:3c:ed:88:46:00:1e:58:fa:57:0c:f1:8a:be:6f:35:
         b5:cb:fa:a2:bb:93:25:e1:8c:fe:b7:9d:97:47:45:2a:db:f0:
         23:ee:2a:e8:4f:55:1d:e9:ce:f4:a9:08:50:ee:ea:ee:2e:d7:
         08:88:1b:84:3e:8e:c7:0f:71:b6:cc:d4:56:c9:c0:c0:33:59:
         ea:16:70:7a:a6:a0:a9:b6:e9:20:90:8c:18:17:3d:65:36:eb:
         a7:3e:c6:ac:25:b1:65:6c:4d:6b:10:50:3d:c5:4d:01:6e:30:
         8c:20:a3:2a:3b:4e:61:3b:6a:e2:bb:cd:37:e2:36:d2:30:8a:
         b5:45:d5:9d:86:ab:99:1f:ff:24:10:25:ad:cc:94:1d:55:03:
         eb:8d:e8:c9:8a:e2:cf:11:d3:86:e7:62:cb:ca:69:09:96:07:
         0b:c4:4b:69:52:55:12:82:aa:6f:61:b6:63:31:ab:97:ec:a1:
         b7:b7:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 01:44:16 2026 by rpki-client