Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151478.roa
File:                     AS151478.roa (raw, json)
Hash identifier:          n/LNtx8xjAcOdYbYh9ci9lL6ED57XoFLDy18d3DtGpg=
Subject key identifier:   8D:DB:F2:55:8E:DB:D0:7F:79:D3:FC:6F:77:00:B9:59:68:55:17:5C
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       317EE75BD62804BF758F7450D74F611EFFCBF890
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151478.roa
Signing time:             Mon 31 Aug 2026 06:24:04 +0000
ROA not before:           Mon 31 Aug 2026 06:19:04 +0000
ROA not after:            Mon 30 Aug 2027 06:24:04 +0000
asID:                     151478
IP address blocks:        163.52.75.0/24 maxlen: 24
                          2001:df7:6a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 05:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7e:e7:5b:d6:28:04:bf:75:8f:74:50:d7:4f:61:1e:ff:cb:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Aug 31 06:19:04 2026 GMT
            Not After : Aug 30 06:24:04 2027 GMT
        Subject: CN=8DDBF2558EDBD07F79D3FC6F7700B9596855175C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:03:40:2f:50:54:05:56:da:a0:ff:07:5c:
                    8e:04:95:20:67:23:e7:9f:ad:84:ed:50:dc:af:34:
                    e8:b6:e2:57:60:db:6c:21:14:3b:4b:18:87:97:ec:
                    8d:d8:68:3f:98:d5:21:db:bf:04:59:0b:d7:da:2d:
                    15:2a:d1:0c:a1:52:07:a7:bd:7e:55:5d:34:1f:d7:
                    08:b6:07:f2:3e:be:f4:b4:5f:90:34:7b:0e:77:60:
                    43:d7:6b:21:78:c2:e5:99:e2:36:03:7c:55:41:0c:
                    5d:2b:bb:e6:99:3f:be:a4:2a:0f:9d:09:61:68:78:
                    72:49:39:5e:8d:72:e5:89:da:b6:35:83:4d:dc:91:
                    1a:8f:38:07:af:45:47:eb:6f:49:86:53:28:a5:81:
                    f2:04:bf:66:33:c6:9e:7c:71:9b:4c:da:4e:35:7a:
                    06:12:b5:bf:c6:bd:39:11:73:61:ab:f2:38:05:89:
                    f2:cc:6c:7a:9e:22:ce:d7:a6:aa:0a:b0:42:41:5e:
                    9d:0c:60:0a:3e:80:66:4b:e4:d1:0f:a1:aa:b1:06:
                    e9:b4:4e:b8:b2:b9:dc:0a:bc:d9:3f:a1:01:7c:b0:
                    75:21:38:ef:5f:f5:14:8d:e1:65:af:32:4f:32:c7:
                    c8:93:ba:a8:f7:22:8d:2a:2c:bb:1f:40:c9:d7:ae:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:F2:55:8E:DB:D0:7F:79:D3:FC:6F:77:00:B9:59:68:55:17:5C
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151478.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.75.0/24
                IPv6:
                  2001:df7:6a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:db:9e:0f:90:da:1e:31:9e:21:9b:28:bc:c0:30:04:41:e5:
         54:a6:4b:a7:ec:a4:33:c8:84:50:df:b1:20:0e:4f:a1:9e:70:
         3b:88:62:b6:7d:0a:fe:30:73:fa:5e:8b:c8:af:46:9a:db:06:
         24:c6:8e:84:fa:0c:0c:96:c2:84:5a:07:ea:3a:82:f5:a9:f3:
         1b:07:88:6d:d9:41:49:b4:03:52:9a:de:40:aa:18:56:d0:75:
         4f:ea:c1:22:fc:c8:f4:48:38:26:8d:da:84:99:c2:fb:3c:73:
         ce:46:38:2a:04:7d:a1:cd:91:f0:db:68:8a:fe:94:4e:90:a7:
         53:3a:f1:cf:1f:5f:ef:a4:9b:87:b6:bb:69:0b:dc:60:06:7d:
         26:1d:c8:88:6b:4c:04:ae:7e:7e:67:df:c4:7d:e9:88:44:ca:
         59:76:78:35:a8:32:6d:f3:c6:2a:7b:4f:66:1f:ff:70:9c:d5:
         b3:fb:51:4b:23:0f:f5:34:3d:65:6f:36:7b:c4:a9:99:50:05:
         d4:39:45:44:4d:3f:b1:46:8b:79:cf:0c:53:7e:32:88:48:1d:
         f1:d6:d9:02:42:b9:6a:a9:bc:c5:3c:05:ba:2c:2c:02:39:e1:
         05:65:b6:e1:46:e0:38:65:77:ae:53:9d:2e:3d:40:70:10:33:
         f1:b7:20:6d
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUMX7nW9YoBL91j3RQ109hHv/L+JAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgzMTA2MTkwNFoX
DTI3MDgzMDA2MjQwNFowMzExMC8GA1UEAxMoOEREQkYyNTU4RURCRDA3Rjc5RDNG
QzZGNzcwMEI5NTk2ODU1MTc1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIr2A0AvUFQFVtqg/wdcjgSVIGcj55+thO1Q3K806LbiV2DbbCEUO0sYh5fs
jdhoP5jVIdu/BFkL19otFSrRDKFSB6e9flVdNB/XCLYH8j6+9LRfkDR7DndgQ9dr
IXjC5ZniNgN8VUEMXSu75pk/vqQqD50JYWh4ckk5Xo1y5YnatjWDTdyRGo84B69F
R+tvSYZTKKWB8gS/ZjPGnnxxm0zaTjV6BhK1v8a9ORFzYavyOAWJ8sxsep4iztem
qgqwQkFenQxgCj6AZkvk0Q+hqrEG6bROuLK53Aq82T+hAXywdSE471/1FI3hZa8y
TzLHyJO6qPcijSosux9AydeuveECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSN2/JV
jtvQf3nT/G93ALlZaFUXXDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNDc4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA
ATAGAwQAozRLMA8EAgACMAkDBwAgAQ33akAwDQYJKoZIhvcNAQELBQADggEBADjb
ng+Q2h4xniGbKLzAMARB5VSmS6fspDPIhFDfsSAOT6GecDuIYrZ9Cv4wc/pei8iv
RprbBiTGjoT6DAyWwoRaB+o6gvWp8xsHiG3ZQUm0A1Ka3kCqGFbQdU/qwSL8yPRI
OCaN2oSZwvs8c85GOCoEfaHNkfDbaIr+lE6Qp1M68c8fX++km4e2u2kL3GAGfSYd
yIhrTASufn5n38R96YhEyll2eDWoMm3zxip7T2Yf/3Cc1bP7UUsjD/U0PWVvNnvE
qZlQBdQ5RURNP7FGi3nPDFN+MohIHfHW2QJCuWqpvMU8BbosLAI54QVltuFG4Dhl
d65TnS49QHAQM/G3IG0=
-----END CERTIFICATE-----
Generated at Thu Sep 17 05:27:49 2026 by rpki-client