Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150273.roa
File:                     AS150273.roa (raw, json)
Hash identifier:          LZ/e7QjuRdrFHFB6S2YCg7vYmYmrtE2sHTtZvgMGKGI=
Subject key identifier:   F4:77:5E:3D:32:62:A2:96:40:E1:C0:CD:C3:28:6B:28:E3:C1:F8:07
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       0E929841AAB2479B2ED0FF90F8D03671B142515B
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150273.roa
Signing time:             Sat 02 May 2026 09:21:52 +0000
ROA not before:           Sat 02 May 2026 09:16:52 +0000
ROA not after:            Sat 01 May 2027 09:21:52 +0000
asID:                     150273
IP address blocks:        103.63.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:92:98:41:aa:b2:47:9b:2e:d0:ff:90:f8:d0:36:71:b1:42:51:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:16:52 2026 GMT
            Not After : May  1 09:21:52 2027 GMT
        Subject: CN=F4775E3D3262A29640E1C0CDC3286B28E3C1F807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:fd:e3:2c:2e:54:19:ff:07:56:1c:4a:06:
                    cc:85:34:a9:a7:6b:f8:3a:66:fd:a8:dc:bb:18:9d:
                    72:d0:7a:36:9c:72:0a:57:d4:4b:c4:e6:a4:46:4f:
                    f2:33:08:5e:f6:90:77:ab:5a:61:20:42:4f:6b:b7:
                    02:fc:cf:c4:85:51:31:af:34:85:6c:b2:08:93:36:
                    87:5c:50:cd:d5:77:f3:b5:59:e1:fe:22:c6:ac:1c:
                    6a:92:b2:ac:af:5c:cd:2f:be:28:7b:10:ea:0a:21:
                    4c:a4:69:ad:20:ff:70:44:75:f6:c2:44:66:42:76:
                    8c:66:a5:06:73:fa:0f:57:47:c5:a5:1b:f0:70:1c:
                    b0:64:fd:36:f7:90:74:da:c6:57:7d:d7:a8:06:80:
                    fd:b3:4a:82:1c:b9:1d:45:62:04:12:2f:29:82:94:
                    cd:15:f1:ca:d8:4b:2c:9c:e7:86:c2:75:f1:8a:71:
                    df:d3:47:19:e7:e8:78:4b:bd:26:46:bc:ea:4b:87:
                    6d:b3:e2:8d:19:3a:b9:a3:9e:b3:49:de:34:c7:6c:
                    c4:12:7b:33:6a:21:a0:e7:4b:c0:2e:1e:13:ce:9c:
                    65:ec:6a:3f:a1:2a:60:e5:e3:9c:fa:6e:41:94:72:
                    68:0b:ac:26:b2:ac:a8:a9:a8:b0:61:b6:c9:d8:b5:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:77:5E:3D:32:62:A2:96:40:E1:C0:CD:C3:28:6B:28:E3:C1:F8:07
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150273.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:32:97:eb:9e:6d:51:aa:c7:1e:73:31:01:9f:22:40:2d:83:
         db:89:19:cf:35:c2:35:b5:93:ce:58:7b:a6:0b:bb:4f:55:c5:
         a6:9f:ea:f9:84:66:cf:24:4a:83:06:55:0e:fd:8d:e2:ff:a6:
         33:ed:e4:7d:97:3f:7d:21:c2:18:f6:ec:a2:fa:e1:50:42:69:
         f3:c1:cc:24:ef:90:18:41:c2:3d:8e:6e:44:68:d5:df:fd:b9:
         c3:28:6b:70:38:cd:ff:ae:b2:c2:98:fd:46:5b:de:7a:48:66:
         45:d8:5f:2c:20:d5:26:e7:07:6a:14:4b:09:3e:81:79:a2:0f:
         22:d7:4c:c9:da:ae:da:57:56:87:05:e4:36:27:77:89:3c:eb:
         92:0d:d3:a2:d6:09:3d:73:d2:a5:69:12:40:cc:f9:e9:75:a8:
         05:04:30:4c:1f:27:e2:f1:b2:bb:a9:66:58:5e:ab:e4:1d:01:
         c6:c8:03:a1:18:4a:41:fa:3b:8d:92:35:c4:55:06:07:22:72:
         5e:5e:b4:05:80:b6:a8:3c:46:2e:c5:f5:b8:cb:1b:f2:81:32:
         e0:71:2b:ab:95:d9:94:b1:8a:79:6d:a9:32:c2:72:39:e8:ae:
         67:49:84:6d:68:9a:5c:96:97:75:9a:74:3b:8e:f7:a5:14:49:
         51:f3:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:36 2026 by rpki-client