Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa
File:                     AS151583.roa (raw, json)
Hash identifier:          fbRbBnuARnFfizL124vT53VW+FNWe+CckAYGgohqUwM=
Subject key identifier:   A3:02:44:EB:F1:6F:2B:33:5D:EE:CF:AC:7C:ED:0B:85:56:5E:BD:54
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0A219CB389FA63751104B0615BB7E66AE686B086
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa
Signing time:             Thu 14 Aug 2025 10:00:00 +0000
ROA not before:           Thu 14 Aug 2025 09:55:00 +0000
ROA not after:            Thu 13 Aug 2026 10:00:00 +0000
asID:                     151583
IP address blocks:        103.236.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 11:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:21:9c:b3:89:fa:63:75:11:04:b0:61:5b:b7:e6:6a:e6:86:b0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 14 09:55:00 2025 GMT
            Not After : Aug 13 10:00:00 2026 GMT
        Subject: CN=A30244EBF16F2B335DEECFAC7CED0B85565EBD54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:ba:aa:8a:9b:34:73:87:e6:cf:4e:ef:7a:
                    b7:79:db:79:b8:3e:8d:c1:43:79:ef:7a:2f:e6:7c:
                    bc:c9:df:8c:e9:90:87:3c:33:82:4e:12:59:ea:69:
                    ba:94:2a:bb:e7:1a:e5:d3:db:d4:37:52:7a:12:93:
                    40:88:b0:87:a3:de:4a:54:75:fe:11:cc:d1:b9:38:
                    16:78:1e:5e:c4:3c:ee:d6:4b:16:39:ff:10:fd:e6:
                    a8:bf:18:29:8b:c9:fc:50:a4:82:c5:5b:a2:d1:84:
                    7a:d7:7c:c9:98:fc:14:5f:6f:ea:bf:09:6d:26:1e:
                    1b:14:40:4e:63:7a:24:0c:5a:44:cc:28:f0:6d:a4:
                    6d:40:83:5b:ad:f9:4e:3c:b3:4b:50:fa:63:c1:ae:
                    d6:d2:33:c9:54:f4:33:5e:0f:1a:8d:88:13:45:a6:
                    e4:9c:d9:30:94:dd:8b:4b:7d:d6:be:e3:ad:7a:57:
                    b8:e0:78:0d:6d:cc:9b:c2:ea:a2:d9:71:ec:fb:84:
                    4f:42:16:c6:92:61:ec:dc:87:b9:b1:f9:bd:88:f0:
                    f9:14:de:58:d6:a3:c4:02:2e:be:f8:3f:8c:24:7a:
                    df:2f:e2:e9:be:0e:f2:9a:51:85:29:e5:26:5f:f5:
                    80:34:a0:de:31:56:c7:39:b4:b1:72:04:f4:02:34:
                    c1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:02:44:EB:F1:6F:2B:33:5D:EE:CF:AC:7C:ED:0B:85:56:5E:BD:54
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:a9:4a:92:b6:f0:d0:af:40:c2:2c:16:ed:b1:63:15:00:b7:
         3e:9b:e0:a9:c5:24:85:f8:e5:ba:f6:19:da:c6:47:e4:2b:e8:
         ef:dd:be:07:b4:23:b3:a3:44:19:2e:79:3a:16:ac:6b:56:ec:
         93:9d:b5:fd:f3:72:22:81:27:be:c3:87:60:51:c0:87:44:1d:
         f5:71:86:b3:c0:09:00:c0:23:1b:1f:e7:d4:bc:ac:84:ce:23:
         db:51:ef:e6:1c:d5:48:4c:58:81:e2:f8:52:ad:38:9e:d2:b1:
         c0:a8:f0:84:f1:77:76:4f:76:c6:cf:d5:a3:50:dd:a8:ca:01:
         49:b6:13:51:54:1a:7e:68:f9:13:1c:63:1e:55:9a:a3:73:b2:
         5b:69:d5:b8:d5:b9:f1:94:51:4d:35:4a:c9:dc:a7:37:14:43:
         6d:8e:b9:dc:e0:d3:55:c6:21:07:41:1c:bc:31:50:08:35:26:
         1d:e7:99:ab:cb:f0:12:7b:32:11:9e:7e:8e:52:35:04:14:75:
         6a:5e:15:eb:fe:e1:c0:f0:37:4a:52:ce:64:93:0d:f0:2b:2b:
         9e:66:0e:02:fc:15:0c:9b:aa:1f:a6:c6:2e:aa:81:55:60:43:
         44:ea:bc:01:7e:98:c4:14:bc:a7:e9:b2:2e:27:61:9a:2e:57:
         2d:09:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:12:20 2025 by rpki-client