Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151511.roa
File:                     AS151511.roa (raw, json)
Hash identifier:          6T9oOmIe+oZo5hzeaMYutE/bq1sxg6sfhI7WoqLEjVM=
Subject key identifier:   EF:92:E5:BA:F3:A8:0B:61:0A:F6:EE:29:98:8F:44:54:52:AB:64:72
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0D9D67CEE0A351882D1393A3FCD2296AE929A952
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151511.roa
Signing time:             Thu 24 Jul 2025 07:16:55 +0000
ROA not before:           Thu 24 Jul 2025 07:11:55 +0000
ROA not after:            Thu 23 Jul 2026 07:16:55 +0000
asID:                     151511
IP address blocks:        103.235.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 13:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9d:67:ce:e0:a3:51:88:2d:13:93:a3:fc:d2:29:6a:e9:29:a9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 24 07:11:55 2025 GMT
            Not After : Jul 23 07:16:55 2026 GMT
        Subject: CN=EF92E5BAF3A80B610AF6EE29988F445452AB6472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:3f:e8:45:84:2c:6c:e2:2d:56:c1:4f:e7:
                    6a:5e:e7:49:8e:26:7d:2f:ab:c2:b1:fe:28:91:1b:
                    31:0a:d7:7a:1d:d4:fd:18:02:72:3c:55:67:86:67:
                    bd:5b:c0:76:a1:18:d2:80:64:7d:47:0d:25:3c:01:
                    29:38:d0:3f:6c:6f:ff:88:bf:e3:73:c0:c0:76:64:
                    35:b0:fa:45:18:3c:f9:d0:73:3c:15:27:2e:84:6e:
                    61:c9:99:c3:c6:0d:61:62:5c:3f:cb:1d:c9:48:cc:
                    a6:31:e8:27:c6:2d:05:6d:3a:d9:f0:ed:7d:d7:63:
                    e3:a3:02:8a:8b:d1:75:a8:9c:62:1f:85:fa:8e:f7:
                    36:dc:90:2e:18:6e:d8:ff:7f:44:4b:84:97:44:96:
                    1e:23:e4:92:62:93:78:63:02:17:8e:da:f5:a2:0a:
                    e0:aa:c3:66:80:7a:b4:37:2b:c1:12:ab:99:0f:f4:
                    40:3d:04:94:38:f1:2c:bb:98:bf:bb:1f:73:94:e8:
                    fc:33:1c:56:b2:80:40:f2:2a:23:3e:62:06:86:63:
                    31:23:a5:80:3c:1f:e2:a7:56:33:c8:6c:4a:fb:36:
                    2d:91:24:d2:61:fb:57:eb:ef:f5:3c:d5:ab:05:c8:
                    74:51:b5:0c:dd:ef:40:9c:08:72:dd:a5:b6:47:14:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:92:E5:BA:F3:A8:0B:61:0A:F6:EE:29:98:8F:44:54:52:AB:64:72
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151511.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:ef:36:24:5f:b6:de:a9:d7:fe:33:1b:fe:f1:30:40:64:
         3d:03:d6:24:45:91:51:a2:5e:a0:68:20:5c:2d:49:27:8d:18:
         29:a4:9a:34:46:eb:7f:b5:6b:a5:11:e3:8d:0f:7f:6a:c2:bc:
         c8:90:ed:cb:29:27:86:5c:47:2a:65:87:40:bd:13:2f:ad:f9:
         b5:f2:f5:f4:21:ed:98:6c:55:e9:12:1b:ed:c6:85:44:54:8a:
         3e:16:c0:42:70:ab:e9:11:88:94:48:30:2b:09:ad:4d:2c:2e:
         f1:7f:32:78:6f:16:d5:f2:8b:f8:db:42:8c:59:55:3f:78:c2:
         cc:91:a7:7e:8c:1d:22:23:72:c5:75:a3:7e:a2:6e:54:ba:bb:
         a1:05:32:35:91:a3:f8:1b:2d:4e:f0:be:bd:e7:53:ef:78:8e:
         4c:04:0b:ac:ce:9c:d5:e3:55:fe:90:a9:7d:2d:33:a9:2c:53:
         26:56:92:f9:ef:12:ac:7c:e1:0e:5d:d1:5c:c9:b7:d8:8c:31:
         eb:3f:51:85:e5:bb:19:89:aa:62:ae:44:87:c1:b1:f5:9b:31:
         6f:6e:37:02:a4:66:66:4d:33:86:91:aa:c6:02:91:56:46:8a:
         fd:f4:86:f8:d8:1a:5b:42:d8:ba:95:f1:97:9e:e4:92:2d:6d:
         02:65:5c:b7
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUDZ1nzuCjUYgtE5Oj/NIpaukpqVIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyNDA3MTE1NVoX
DTI2MDcyMzA3MTY1NVowMzExMC8GA1UEAxMoRUY5MkU1QkFGM0E4MEI2MTBBRjZF
RTI5OTg4RjQ0NTQ1MkFCNjQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK1sP+hFhCxs4i1WwU/nal7nSY4mfS+rwrH+KJEbMQrXeh3U/RgCcjxVZ4Zn
vVvAdqEY0oBkfUcNJTwBKTjQP2xv/4i/43PAwHZkNbD6RRg8+dBzPBUnLoRuYcmZ
w8YNYWJcP8sdyUjMpjHoJ8YtBW062fDtfddj46MCiovRdaicYh+F+o73NtyQLhhu
2P9/REuEl0SWHiPkkmKTeGMCF47a9aIK4KrDZoB6tDcrwRKrmQ/0QD0ElDjxLLuY
v7sfc5To/DMcVrKAQPIqIz5iBoZjMSOlgDwf4qdWM8hsSvs2LZEk0mH7V+vv9TzV
qwXIdFG1DN3vQJwIct2ltkcUnWsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTvkuW6
86gLYQr27imYj0RUUqtkcjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUxMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWfrtjANBgkqhkiG9w0BAQsFAAOCAQEAX2DvNiRftt6p1/4zG/7x
MEBkPQPWJEWRUaJeoGggXC1JJ40YKaSaNEbrf7VrpRHjjQ9/asK8yJDtyyknhlxH
KmWHQL0TL635tfL19CHtmGxV6RIb7caFRFSKPhbAQnCr6RGIlEgwKwmtTSwu8X8y
eG8W1fKL+NtCjFlVP3jCzJGnfowdIiNyxXWjfqJuVLq7oQUyNZGj+BstTvC+vedT
73iOTAQLrM6c1eNV/pCpfS0zqSxTJlaS+e8SrHzhDl3RXMm32Iwx6z9RheW7GYmq
Yq5Eh8Gx9Zsxb243AqRmZk0zhpGqxgKRVkaK/fSG+NgaW0LYupXxl57kki1tAmVc
tw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 03:58:06 2025 by rpki-client