Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149362.roa
File:                     AS149362.roa (raw, json)
Hash identifier:          UQ7BixKVIj0e5F0CdW3Z3usFrXszRgGbTa+erMh1QoE=
Subject key identifier:   AD:8A:17:96:AC:D8:29:3D:20:D4:3C:A5:3F:B1:92:8C:30:6A:34:D4
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       7EF7B12D8DA484110A1941436F05DDA40BBD6CB3
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149362.roa
Signing time:             Sat 02 May 2026 09:20:27 +0000
ROA not before:           Sat 02 May 2026 09:15:27 +0000
ROA not after:            Sat 01 May 2027 09:20:27 +0000
asID:                     149362
IP address blocks:        103.178.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f7:b1:2d:8d:a4:84:11:0a:19:41:43:6f:05:dd:a4:0b:bd:6c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:15:27 2026 GMT
            Not After : May  1 09:20:27 2027 GMT
        Subject: CN=AD8A1796ACD8293D20D43CA53FB1928C306A34D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:e3:f0:30:46:9a:01:a6:77:13:2c:5f:02:
                    b7:07:af:d0:00:01:60:3b:db:28:a9:59:57:68:88:
                    23:a8:dd:40:d8:01:44:fb:36:9c:86:ca:da:cb:50:
                    34:77:73:21:00:80:f9:1e:e3:04:2e:c2:78:2b:2e:
                    b4:c0:e8:e4:d6:1d:1b:e0:1b:64:a7:87:68:a9:69:
                    66:d4:42:ec:bc:a5:89:62:59:08:1b:be:bd:c9:5e:
                    f6:4b:c7:98:fc:37:9b:d7:a0:17:d1:a2:72:6e:ba:
                    ea:88:43:21:0f:51:d8:e8:e6:db:66:09:2e:4c:c8:
                    d2:f4:4f:d1:7d:6b:3b:6f:72:c7:46:d7:96:45:89:
                    cc:ce:42:2b:4b:99:5a:a6:f9:f0:b1:eb:07:c9:a6:
                    d6:e5:fc:e1:15:89:0d:5f:ab:3c:28:c4:74:5e:96:
                    cb:61:9a:72:0c:bd:3d:74:d2:2f:95:fd:cc:09:19:
                    2f:3f:a3:47:ce:f5:12:f6:83:d0:49:4d:00:fe:d1:
                    29:5a:06:cc:a8:93:f9:5d:79:86:17:b1:6f:8f:79:
                    18:f7:ff:21:0d:78:6a:af:7e:cd:c9:31:36:92:0b:
                    ca:4f:1e:bb:fd:91:08:90:67:bd:ca:d0:d7:65:43:
                    37:6d:e2:84:a4:44:04:89:1d:f6:0e:15:a1:48:db:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8A:17:96:AC:D8:29:3D:20:D4:3C:A5:3F:B1:92:8C:30:6A:34:D4
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:85:26:12:82:a1:d2:04:b9:3f:22:63:96:08:8f:e8:ff:52:
         42:ec:98:fa:e4:82:8d:54:d3:3f:13:80:5c:d4:22:51:a1:a5:
         6c:78:1f:a3:b6:d2:35:5c:7d:93:ec:b1:71:59:ae:56:53:16:
         7b:4a:94:46:46:5a:73:5c:d4:1a:a8:57:7d:a6:f6:e8:3b:24:
         77:13:90:b0:bc:94:e9:e5:81:91:b6:ba:cc:1f:3e:c8:d7:f2:
         d1:00:96:06:31:75:58:2a:05:c4:ce:45:ad:e7:55:22:06:b5:
         06:12:23:d2:d9:f1:0b:ee:8b:b7:f7:04:82:d3:ca:66:8f:3c:
         17:a2:66:a4:1c:76:54:99:3b:72:2a:1d:02:06:8e:45:29:98:
         85:c1:3b:38:58:51:74:69:0d:43:6c:a0:05:30:f7:25:10:ed:
         4b:c6:c9:ea:11:3b:2d:56:b1:ef:3e:01:7d:da:6b:4d:ee:b2:
         fb:08:06:c2:c0:57:0d:74:8b:15:bc:4c:bb:0d:b4:1e:9a:11:
         ec:9c:e9:00:84:f4:b4:89:75:18:b5:3c:76:c4:48:3f:12:e5:
         e1:d6:9b:3f:0e:bd:d9:e2:f7:4b:4a:99:41:68:4d:b8:e7:9e:
         f8:bd:14:d9:1c:0c:3c:89:82:5d:45:bb:fd:8e:0b:14:a0:b0:
         2d:b7:aa:20
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUfvexLY2khBEKGUFDbwXdpAu9bLMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUyN1oX
DTI3MDUwMTA5MjAyN1owMzExMC8GA1UEAxMoQUQ4QTE3OTZBQ0Q4MjkzRDIwRDQz
Q0E1M0ZCMTkyOEMzMDZBMzRENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK6X4/AwRpoBpncTLF8Ctwev0AABYDvbKKlZV2iII6jdQNgBRPs2nIbK2stQ
NHdzIQCA+R7jBC7CeCsutMDo5NYdG+AbZKeHaKlpZtRC7LyliWJZCBu+vcle9kvH
mPw3m9egF9Gicm666ohDIQ9R2Ojm22YJLkzI0vRP0X1rO29yx0bXlkWJzM5CK0uZ
Wqb58LHrB8mm1uX84RWJDV+rPCjEdF6Wy2Gacgy9PXTSL5X9zAkZLz+jR871EvaD
0ElNAP7RKVoGzKiT+V15hhexb495GPf/IQ14aq9+zckxNpILyk8eu/2RCJBnvcrQ
12VDN23ihKREBIkd9g4VoUjbyyMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBStiheW
rNgpPSDUPKU/sZKMMGo01DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5MzYyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ7JZMA0GCSqGSIb3DQEBCwUAA4IBAQCjhSYSgqHSBLk/ImOWCI/o/1JC
7Jj65IKNVNM/E4Bc1CJRoaVseB+jttI1XH2T7LFxWa5WUxZ7SpRGRlpzXNQaqFd9
pvboOyR3E5CwvJTp5YGRtrrMHz7I1/LRAJYGMXVYKgXEzkWt51UiBrUGEiPS2fEL
7ou39wSC08pmjzwXomakHHZUmTtyKh0CBo5FKZiFwTs4WFF0aQ1DbKAFMPclEO1L
xsnqETstVrHvPgF92mtN7rL7CAbCwFcNdIsVvEy7DbQemhHsnOkAhPS0iXUYtTx2
xEg/EuXh1ps/Dr3Z4vdLSplBaE245574vRTZHAw8iYJdRbv9jgsUoLAtt6og
-----END CERTIFICATE-----
Generated at Sun May 3 00:40:30 2026 by rpki-client