Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153910.roa
File:                     AS153910.roa (raw, json)
Hash identifier:          0k8u/0itn5OqLY8Kwhf5aRBKVKP5/Povd9XfR+1qF7s=
Subject key identifier:   F0:2F:C6:FD:B0:21:E5:48:6E:04:A9:64:EC:8B:DE:CF:EE:8C:82:44
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5AED4587856FDDB7964A766D531251A1DAB1627D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153910.roa
Signing time:             Thu 12 Jun 2025 06:16:39 +0000
ROA not before:           Thu 12 Jun 2025 06:11:39 +0000
ROA not after:            Thu 11 Jun 2026 06:16:39 +0000
asID:                     153910
IP address blocks:        2001:df5:93c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 11:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ed:45:87:85:6f:dd:b7:96:4a:76:6d:53:12:51:a1:da:b1:62:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 12 06:11:39 2025 GMT
            Not After : Jun 11 06:16:39 2026 GMT
        Subject: CN=F02FC6FDB021E5486E04A964EC8BDECFEE8C8244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c9:04:77:b1:cd:2a:12:3f:dd:a4:3d:06:da:
                    d3:a0:c1:46:fe:a5:6c:62:72:f2:0b:7c:48:2d:7d:
                    01:49:9d:44:4b:42:bc:a1:0e:5c:0f:84:21:41:af:
                    1c:83:51:23:66:6b:1c:3d:0a:4f:6f:81:f0:5e:09:
                    d0:d8:1d:f2:61:08:8b:4a:f9:62:12:58:1d:88:66:
                    18:36:6c:56:86:c5:04:d4:e2:43:47:1e:ae:5c:41:
                    dc:d4:70:fb:39:55:b1:6f:fa:e1:ff:95:a9:8e:60:
                    0e:bd:6e:cd:87:fc:4a:09:36:c5:7b:97:d2:9a:9c:
                    c4:44:96:49:db:52:47:8a:55:00:c7:db:bb:12:07:
                    73:30:aa:2e:56:8b:d9:9f:50:7d:7c:de:ee:d4:e9:
                    a4:1e:fd:94:bd:1b:89:e4:9f:1f:f9:23:9e:9c:d3:
                    22:77:26:fa:96:f9:91:b6:70:40:64:87:f9:91:06:
                    3d:81:c1:ce:4f:4c:45:16:72:ea:b6:fc:bb:ec:7d:
                    a2:a6:05:cc:f7:59:4e:2b:ae:9d:42:d0:bd:4f:c8:
                    be:b3:0f:f3:21:e0:75:f8:ff:8f:e3:0d:ec:f8:a0:
                    ac:b6:05:f6:94:c3:ec:8e:49:8a:48:47:d4:a6:9b:
                    c0:16:18:1f:2f:15:82:e5:32:b5:e8:1e:aa:19:81:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2F:C6:FD:B0:21:E5:48:6E:04:A9:64:EC:8B:DE:CF:EE:8C:82:44
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153910.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:93c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:91:c4:25:31:0c:a7:d8:13:fb:10:6b:df:be:f1:60:7e:3a:
         8f:07:08:04:f1:59:27:71:df:57:87:31:d0:ca:7b:66:26:6b:
         80:e9:5c:01:b6:b3:77:88:56:fd:07:49:a0:b9:51:d9:da:75:
         d1:00:ab:00:fc:00:de:c5:32:b1:7a:8c:9f:1a:8c:fe:db:3e:
         a5:8e:29:77:a2:26:a8:5c:3b:5b:ce:f3:94:c8:4f:3a:d2:d0:
         4f:0c:a7:6c:eb:df:12:d7:17:43:e8:be:cf:db:9d:c6:64:66:
         78:1c:1f:52:ee:34:70:20:65:5c:b9:e1:c3:1c:5b:ba:63:49:
         40:00:e1:2b:00:79:5c:e1:17:1d:21:e3:8e:15:c2:6b:0d:2e:
         d6:5e:22:f5:43:b7:c5:bf:71:01:b9:9d:a7:61:7a:ec:c3:71:
         ac:76:70:e5:69:02:7f:c7:f1:5d:47:3b:fa:4f:03:10:2c:c0:
         42:91:15:0e:52:64:cc:34:da:33:67:13:11:45:65:70:be:d4:
         fb:8f:13:93:26:cf:09:da:c6:a4:ab:a1:d5:74:38:21:b1:f6:
         aa:d3:00:fc:4b:37:b9:a7:d9:01:33:dd:66:cc:26:ca:18:43:
         47:c2:28:f0:a5:42:d6:a8:d8:c4:9e:e5:0e:e6:83:d8:95:d6:
         73:35:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:30 2025 by rpki-client