Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150186.roa
File:                     AS150186.roa (raw, json)
Hash identifier:          AwTj1MeGJnmDzPCpO5bD30d2skSTOcSJpeNH5q5helg=
Subject key identifier:   FE:B4:F0:03:BC:B6:DB:CA:73:6E:81:DD:B9:7C:C9:D8:67:8D:35:7D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3018586404A90766CDAB8E27E8653A0EDB18CBB2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150186.roa
Signing time:             Fri 20 Feb 2026 05:00:00 +0000
ROA not before:           Fri 20 Feb 2026 04:55:00 +0000
ROA not after:            Fri 19 Feb 2027 05:00:00 +0000
asID:                     150186
IP address blocks:        103.146.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:18:58:64:04:a9:07:66:cd:ab:8e:27:e8:65:3a:0e:db:18:cb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 20 04:55:00 2026 GMT
            Not After : Feb 19 05:00:00 2027 GMT
        Subject: CN=FEB4F003BCB6DBCA736E81DDB97CC9D8678D357D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cd:b3:d7:bf:32:f3:4e:68:ac:f3:55:ff:82:
                    c1:7f:cb:a8:15:db:74:48:35:9b:b0:0e:b2:77:ad:
                    e0:4b:41:41:44:6b:16:a1:38:90:6a:c4:72:4a:09:
                    e0:cc:be:fc:3a:c7:ae:11:10:14:82:8b:07:b9:cf:
                    21:7a:0f:86:cf:49:a5:13:9b:f4:ee:2e:13:0f:96:
                    54:fa:39:3e:4d:c2:48:e4:7a:96:be:f4:18:80:af:
                    9e:88:10:93:64:9e:33:2f:3e:fc:c6:9a:fd:3a:c5:
                    de:77:e0:d8:e8:4c:87:50:28:00:c4:48:6c:6b:06:
                    f5:b1:f8:b1:7a:f1:29:88:7e:07:20:4a:04:42:10:
                    0d:11:5c:0b:72:29:6c:99:8c:67:da:84:3f:4d:18:
                    9f:a4:3c:fd:29:76:1f:06:46:94:af:ab:b1:68:ea:
                    6a:00:0a:36:c5:7e:4c:31:e6:e3:31:cc:f5:98:0d:
                    87:f1:93:38:a1:b3:8e:63:24:51:8b:67:20:b8:d9:
                    9c:99:bf:af:b6:e7:8b:9d:07:e2:d7:38:05:cc:49:
                    38:9d:83:0c:da:92:a2:a9:5c:9a:2d:10:5b:84:1a:
                    a6:8e:e3:d4:45:39:9a:8d:58:98:05:ed:3d:d3:ab:
                    5f:11:52:99:8c:a0:b6:94:d4:fe:7d:f7:26:ae:33:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:F0:03:BC:B6:DB:CA:73:6E:81:DD:B9:7C:C9:D8:67:8D:35:7D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:3d:c9:07:8c:fd:a4:db:c4:b0:86:d1:55:3d:5a:a8:1f:c6:
         b9:2c:c1:79:9d:84:eb:a6:cf:4f:e5:f4:20:80:90:3c:cf:ae:
         50:c3:de:af:d5:ee:f3:84:98:5d:2b:9d:53:ba:75:cf:61:d0:
         c8:95:fb:61:0f:bb:8f:e6:10:41:c5:b4:d2:15:b1:4f:38:22:
         86:60:3c:cf:c1:7a:2f:43:0f:8c:f7:a7:82:38:30:76:24:27:
         7d:ef:f2:1a:f5:ab:95:9e:bd:f0:40:63:28:5d:94:7a:50:d9:
         89:38:5e:10:4f:4c:de:e5:65:b3:9e:a4:53:30:9c:32:9e:c9:
         1c:69:bc:58:de:6b:cc:73:75:8e:2f:89:99:81:51:f0:ef:56:
         4b:87:ea:99:67:96:fa:ca:86:09:8f:75:80:21:88:fd:ab:2a:
         4b:b7:ca:6d:5b:d0:ad:bd:40:08:7d:ea:56:0d:a8:a9:d1:81:
         62:d1:85:6c:f3:f2:d0:f8:fc:08:51:de:46:25:e1:c6:33:74:
         d6:91:1c:f0:74:5f:af:11:e7:83:6f:44:32:a3:e4:50:c7:29:
         7b:2a:95:56:5e:9c:6c:7f:3a:4d:0f:af:e8:ad:63:36:02:d2:
         13:44:04:bc:34:47:b1:15:56:6e:0f:d5:a1:2a:f5:ad:65:bd:
         34:38:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:24:55 2026 by rpki-client