Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147161.roa
File:                     AS147161.roa (raw, json)
Hash identifier:          fuZ1uDH6M9YIUpItSsShU/jkDlbkAyKmP7GXiN2QwN8=
Subject key identifier:   25:1B:35:72:96:91:77:9D:17:C3:C2:18:DB:02:1F:77:78:93:18:A1
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       59F490182D6865680279CE521C27F4A8995AACBE
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147161.roa
Signing time:             Sat 02 May 2026 09:20:41 +0000
ROA not before:           Sat 02 May 2026 09:15:41 +0000
ROA not after:            Sat 01 May 2027 09:20:41 +0000
asID:                     147161
IP address blocks:        103.177.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f4:90:18:2d:68:65:68:02:79:ce:52:1c:27:f4:a8:99:5a:ac:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:15:41 2026 GMT
            Not After : May  1 09:20:41 2027 GMT
        Subject: CN=251B35729691779D17C3C218DB021F77789318A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:28:6b:4c:1f:bf:14:2f:84:ce:a9:a1:cf:
                    77:a6:cc:e9:cd:b3:45:20:c1:67:7a:d8:cf:4d:26:
                    92:99:59:7d:3a:b6:53:23:50:36:15:f0:f6:a2:7c:
                    9c:9b:92:ca:7d:04:5b:2d:6c:0c:fb:78:46:cd:48:
                    04:66:77:79:84:8b:0e:d1:b1:0b:cf:91:d0:ce:f6:
                    e0:6d:2d:ea:a5:9a:b8:41:e5:79:15:22:15:de:e3:
                    48:c8:d9:df:0d:f3:83:bb:80:7f:98:73:4b:26:48:
                    a2:59:42:7b:a1:97:32:fc:98:9b:58:1d:ec:ed:c1:
                    60:ee:51:d2:e1:96:92:ba:2b:01:ec:54:3a:99:fd:
                    e8:2a:da:c8:39:35:3c:35:12:9b:a0:0d:d6:4d:00:
                    1d:87:b0:d7:c5:5c:dc:9d:47:22:39:f4:96:fc:3f:
                    f0:42:be:ce:e2:a5:a7:e0:10:46:05:c7:ab:d9:84:
                    4b:14:e2:71:bc:9b:a9:65:07:59:a8:4d:b7:3e:dd:
                    66:68:e7:83:8a:a3:6f:57:48:af:43:6b:f1:82:78:
                    0e:27:60:6f:54:9f:ed:5a:76:48:79:ac:17:57:ed:
                    a5:0f:a0:a1:bd:3f:3b:1b:60:8e:5b:c6:17:ee:ef:
                    85:c1:1d:61:57:53:d5:92:ab:3d:e4:e0:24:e3:3e:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1B:35:72:96:91:77:9D:17:C3:C2:18:DB:02:1F:77:78:93:18:A1
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147161.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b6:a8:2d:75:ea:26:f8:fe:70:92:1d:9e:29:8c:63:ee:7c:
         97:a9:34:c1:62:b0:db:f7:14:79:06:ae:f5:a8:62:bd:64:9c:
         e8:b5:ef:6b:7f:9c:8e:7b:1d:d6:c0:79:29:0e:0d:e4:0a:b0:
         20:0c:1d:2f:85:05:22:b6:a9:69:99:4d:44:c8:29:ec:88:3d:
         f4:60:ba:85:38:83:2a:a1:f5:9c:d9:14:e2:8d:67:05:1a:9e:
         21:5f:64:e6:eb:59:64:20:37:06:d8:4e:f0:1d:6d:c4:fe:46:
         a3:6e:d1:c3:c1:c9:4d:16:ae:32:43:03:e2:8f:dd:ba:cf:f9:
         be:fc:49:89:ca:c8:3d:e3:2e:5f:90:cf:2a:2e:6d:c4:7c:06:
         e4:6c:1e:44:63:69:54:c7:fe:ff:99:b6:2c:80:1e:ba:64:2f:
         97:79:5c:28:eb:ff:b8:79:da:ef:4a:8e:d4:1f:26:62:4c:04:
         43:b7:93:69:54:6d:23:95:5c:03:df:56:ab:5c:f1:61:67:46:
         7b:a6:cc:ae:83:96:7b:da:53:19:d1:2c:8c:d6:6d:b6:6f:43:
         e4:e6:1f:12:7c:18:9b:d1:44:4b:4c:9c:6a:f4:f6:2f:83:ce:
         40:7e:24:b1:7a:1d:21:17:cf:a3:9a:30:58:10:d8:57:2f:b1:
         0f:c9:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:39:51 2026 by rpki-client