Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150506.roa
File:                     AS150506.roa (raw, json)
Hash identifier:          nDWjGBy+3N9hsz0q2O+LEZ/4PGfMoh63Kwt+dD42D/I=
Subject key identifier:   DE:00:48:E7:FB:1F:9D:62:C1:C5:6B:F2:03:65:A2:61:D8:65:5E:42
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       059FE45FC3AB4845F1FA8CBCF08CD5434E81A51E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150506.roa
Signing time:             Mon 13 Apr 2026 06:26:14 +0000
ROA not before:           Mon 13 Apr 2026 06:21:14 +0000
ROA not after:            Mon 12 Apr 2027 06:26:14 +0000
asID:                     150506
IP address blocks:        103.61.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 20:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:e4:5f:c3:ab:48:45:f1:fa:8c:bc:f0:8c:d5:43:4e:81:a5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 13 06:21:14 2026 GMT
            Not After : Apr 12 06:26:14 2027 GMT
        Subject: CN=DE0048E7FB1F9D62C1C56BF20365A261D8655E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:d6:ae:ec:ae:0b:fe:bb:79:69:45:ef:38:
                    5b:a7:2c:65:71:13:55:35:9c:31:46:1f:5b:02:d8:
                    41:f3:28:c8:83:39:c9:f4:ce:4b:11:3b:d2:41:28:
                    8f:16:a1:fb:59:16:04:ae:80:d8:af:fa:49:bf:19:
                    2e:7f:9f:95:0a:95:b2:e3:ad:07:8a:d3:dd:6c:7b:
                    08:59:5f:5d:dd:0d:72:40:50:6e:5f:c5:b0:a6:37:
                    39:93:96:78:28:c2:15:bf:48:a2:93:5b:e4:34:d0:
                    0c:b1:88:10:4e:a8:2a:03:36:f5:24:15:e8:aa:97:
                    09:bf:d8:5e:6d:21:56:46:bd:54:18:ab:e9:1c:f1:
                    e4:f2:0f:53:5b:17:fb:a3:3a:be:15:23:2f:f0:21:
                    e4:92:c3:8c:10:6a:77:a0:ab:26:4d:c7:ca:ad:26:
                    7e:9a:95:ff:67:27:b5:5b:48:02:2b:1e:24:43:e9:
                    09:fd:dc:69:0b:42:de:6f:c9:68:3a:dd:44:a9:7c:
                    7d:cc:96:9b:8d:23:9f:47:9b:37:f0:bd:1a:98:54:
                    f1:4b:72:de:9f:72:d0:c6:f7:77:6d:4f:66:aa:44:
                    d8:2a:b9:df:79:69:c7:51:7d:10:4d:8f:9b:fd:f4:
                    0c:4d:ad:fa:af:2a:fc:ad:8e:94:60:3d:d0:82:09:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:00:48:E7:FB:1F:9D:62:C1:C5:6B:F2:03:65:A2:61:D8:65:5E:42
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:14:62:33:46:62:33:fc:a0:a6:d9:59:ae:32:0a:ef:5f:
         0e:5d:76:aa:45:5e:d3:e8:b8:8a:39:6f:e1:4c:79:4d:3b:78:
         47:35:b0:22:c8:5d:6a:0e:7b:ad:fb:ff:4a:b6:5d:7a:df:71:
         58:9d:fb:f9:52:87:7e:08:1e:3b:4c:ca:97:8e:a6:4b:ef:b5:
         b1:59:50:bb:83:0b:ef:c3:80:1c:63:ce:2e:bb:26:c2:5a:ed:
         13:6a:df:ef:58:0e:80:e7:ce:8a:91:cd:5a:e4:88:e6:a0:4c:
         a7:f1:99:23:0b:c2:e5:2e:70:40:7d:13:17:82:33:67:db:31:
         b4:e4:92:9d:5f:46:c5:ba:75:4e:00:2d:73:de:00:70:fa:49:
         31:3a:70:d9:fc:ee:f8:b9:25:6e:94:26:37:6e:5a:fa:72:63:
         1a:72:f4:3b:5e:27:73:d1:32:9a:af:9d:47:ec:8f:a1:b1:4d:
         c8:78:74:95:a7:f7:f4:df:a8:28:40:ce:54:2e:aa:20:c9:7f:
         b4:95:69:25:5a:a1:10:88:2e:de:58:2c:6e:81:0f:f1:c1:d4:
         aa:f1:5b:54:bc:a6:ea:5d:f9:50:88:b8:51:40:54:d3:28:74:
         94:cb:7f:1e:a3:b5:60:78:7e:7d:71:d1:4f:09:4b:49:7c:63:
         0e:c4:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:54:49 2026 by rpki-client