Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151546.roa
File:                     AS151546.roa (raw, json)
Hash identifier:          m4kVyNVwCeY0FdzaqWcGOprsfExzgk82H6eIir0UtVI=
Subject key identifier:   FA:E2:FC:CB:7F:C3:D5:1D:38:55:B3:A0:A3:B6:6A:BD:D8:79:FA:5B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2FC65FAEF832EC986B1E0F656185444A7B35A4D1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151546.roa
Signing time:             Tue 21 Oct 2025 07:00:00 +0000
ROA not before:           Tue 21 Oct 2025 06:55:00 +0000
ROA not after:            Tue 20 Oct 2026 07:00:00 +0000
asID:                     151546
IP address blocks:        103.250.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c6:5f:ae:f8:32:ec:98:6b:1e:0f:65:61:85:44:4a:7b:35:a4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 21 06:55:00 2025 GMT
            Not After : Oct 20 07:00:00 2026 GMT
        Subject: CN=FAE2FCCB7FC3D51D3855B3A0A3B66ABDD879FA5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:41:81:a2:90:16:1a:54:6e:34:4b:64:e0:
                    1a:76:8f:a5:b5:5f:5c:a6:3d:21:4f:34:19:55:e7:
                    3f:ce:b5:ce:ac:4f:66:bc:31:7f:bf:9a:1a:45:ee:
                    dc:7c:17:e8:52:61:46:e5:bb:79:4d:02:36:de:d4:
                    65:9b:fa:c4:e4:8a:bb:c5:d6:ad:c3:0a:03:1f:1d:
                    73:e9:bf:38:bf:2d:de:65:91:08:cf:72:fc:2d:dc:
                    a4:57:30:30:bb:3e:ca:fa:21:cf:ef:f9:b9:6f:b9:
                    2b:65:a9:62:bf:07:85:c8:e0:45:23:95:06:23:56:
                    ee:73:51:c9:a4:96:1b:a1:8b:b7:a2:3d:2c:90:62:
                    cd:3c:09:d9:b3:5f:51:01:bc:e3:fa:44:e4:47:b3:
                    b5:67:6c:f7:c9:fb:20:4a:3a:b2:b8:75:35:ef:16:
                    cb:c9:0a:5a:a4:66:e3:e2:f7:94:a5:cd:b8:54:e4:
                    ea:7e:5e:51:bf:67:2e:de:97:d2:95:4b:e5:95:de:
                    50:7f:97:1c:22:6e:dd:38:26:56:5c:9a:92:9c:cb:
                    6d:ee:d1:7c:d8:cc:8b:42:72:e5:91:ac:16:58:00:
                    48:71:45:4a:e1:8a:da:1c:12:35:93:21:a8:8f:e5:
                    fd:a8:95:e6:b5:2a:6b:34:f6:57:38:61:ae:6a:21:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E2:FC:CB:7F:C3:D5:1D:38:55:B3:A0:A3:B6:6A:BD:D8:79:FA:5B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151546.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:d7:92:07:c2:8c:b8:21:04:a0:08:e6:9c:9b:43:fb:71:
         42:46:7d:1f:5d:2d:0f:86:f3:c2:c2:8c:a5:bb:32:65:9d:ba:
         a7:ae:ba:4d:e6:a4:dd:d3:e9:38:da:e6:46:d0:7a:37:79:8d:
         fd:6b:c8:b0:49:6d:3e:a9:3e:e3:e2:e8:1f:59:33:9e:06:03:
         27:6c:9b:e3:01:7e:16:07:6a:bd:81:b9:27:a8:37:89:d1:d3:
         01:72:79:40:96:08:b2:b3:f3:cf:0e:9e:1c:2f:23:57:47:7d:
         8f:43:ed:f2:e6:fc:49:91:8e:ef:fb:d5:b9:b6:df:30:c1:0f:
         53:f3:8f:12:d9:98:6f:5f:9b:92:08:97:08:aa:91:02:78:60:
         6d:14:2c:1b:78:80:ea:39:c5:62:16:3f:ad:13:28:af:c8:09:
         2b:3e:5d:d1:c0:fa:f9:0a:f8:3a:9b:a3:45:5d:69:2d:dc:8b:
         0c:14:3d:0e:dc:8d:a3:09:06:25:20:5e:0e:0f:ad:b6:ce:4a:
         04:19:6f:71:7f:82:f3:7c:4d:2d:7a:37:e2:9b:15:01:6b:37:
         a3:58:96:78:02:13:8c:57:d1:0f:61:b7:6c:b8:25:bf:ea:4a:
         cb:85:4b:e7:cd:b6:7a:32:c0:25:e4:dd:b7:f6:8f:92:dd:ab:
         81:65:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:33:19 2025 by rpki-client