Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151565.roa
File:                     AS151565.roa (raw, json)
Hash identifier:          Awd3Du9rjy0r6zzv01S4oqL2B44T4M981j0Uo8mQcH4=
Subject key identifier:   1F:C9:D7:E7:4D:AA:85:8F:C0:81:74:1D:74:5D:C7:AF:83:A2:94:BC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1E73F784B5AAAA7280EC694C2A7A2C1B356FAC6B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151565.roa
Signing time:             Wed 30 Jul 2025 04:00:00 +0000
ROA not before:           Wed 30 Jul 2025 03:55:00 +0000
ROA not after:            Wed 29 Jul 2026 04:00:00 +0000
asID:                     151565
IP address blocks:        103.253.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 13:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:73:f7:84:b5:aa:aa:72:80:ec:69:4c:2a:7a:2c:1b:35:6f:ac:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 30 03:55:00 2025 GMT
            Not After : Jul 29 04:00:00 2026 GMT
        Subject: CN=1FC9D7E74DAA858FC081741D745DC7AF83A294BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:1a:48:e9:73:da:73:a2:be:e9:24:eb:2d:
                    67:bf:68:c6:be:8f:c1:f4:97:87:44:39:81:de:87:
                    bd:29:fe:e3:70:b2:e2:f2:4f:89:dc:26:56:49:55:
                    62:f2:65:29:61:99:ff:08:77:16:88:72:89:30:9d:
                    16:61:f1:27:75:4d:7d:c0:d4:da:2b:ae:ba:93:df:
                    1b:73:e5:7e:e6:87:98:7c:f5:60:a1:0c:fb:38:2f:
                    60:1f:64:b5:d1:38:5c:2c:4d:33:9b:c3:0d:c0:71:
                    f5:6f:6d:65:18:a6:7d:9d:80:ef:c9:34:f9:26:e0:
                    aa:27:a3:a2:8e:db:06:d4:09:d0:05:71:3a:10:fe:
                    29:c1:d3:99:92:04:7f:5b:d7:e3:3f:c2:40:65:76:
                    04:69:be:79:02:08:eb:89:bc:e1:63:dd:51:86:0a:
                    90:31:ff:be:78:18:93:2f:6d:3f:56:9f:98:1f:d6:
                    b0:9d:2e:1f:6c:89:0c:22:33:6c:5f:e8:a2:45:20:
                    1a:15:99:a2:a2:1b:ab:64:62:b4:30:be:07:26:01:
                    c5:a7:7d:91:ef:90:45:83:24:36:50:5e:bb:a6:80:
                    a2:ea:fb:12:63:98:6d:37:b2:8e:1d:93:b3:eb:6c:
                    14:4c:5a:ec:02:1f:47:b5:1a:3b:4c:a6:2d:08:fd:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:D7:E7:4D:AA:85:8F:C0:81:74:1D:74:5D:C7:AF:83:A2:94:BC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151565.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:88:34:cf:60:06:06:b1:44:22:9e:72:bb:d2:90:f7:09:
         31:a2:a2:e0:b2:89:a2:c6:35:f0:c6:6f:38:35:1d:08:be:15:
         4b:67:b7:62:4e:57:b6:fa:c4:ed:e2:b9:0b:12:ac:2d:7f:ac:
         5d:67:a7:10:f8:94:a0:87:40:5f:a9:1c:b9:4d:e6:52:3d:69:
         85:b6:0a:11:ca:35:ba:42:58:c6:7d:91:08:23:2c:43:51:81:
         72:ef:3c:40:0f:b4:73:b7:c8:b1:cc:6e:4b:ce:7b:41:9d:2b:
         29:0d:7f:36:88:b3:96:24:3d:94:b5:f9:93:51:da:52:a7:db:
         fe:10:d0:99:04:57:68:94:e1:a6:2e:84:ee:01:0e:82:fe:d1:
         d9:b9:a7:3f:c0:cd:30:cd:5f:27:01:55:93:d6:8e:8a:42:87:
         52:22:9c:52:0e:0e:0b:fe:4d:6f:38:7f:a4:a7:26:02:b7:13:
         47:28:b8:15:f0:7e:c4:09:c4:80:40:3c:fe:a8:30:e9:f6:62:
         68:90:c4:2d:49:ed:7b:1b:59:ee:01:87:0e:8b:06:d0:5c:f6:
         19:ba:93:90:b1:88:b1:6b:90:a8:42:c9:92:5a:ad:29:26:a8:
         d3:40:82:79:a0:1b:f0:c5:28:68:90:26:88:c4:3f:6c:02:7e:
         74:c8:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:56 2025 by rpki-client