Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151584.roa
File:                     AS151584.roa (raw, json)
Hash identifier:          wBeNhROWu7NmzUkPnqm9ryyxVFqvdvgz4RF1mL5VJnE=
Subject key identifier:   2F:D9:0A:04:B2:AC:D1:01:01:6A:48:C2:10:71:88:86:EF:C2:3F:CB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       046A1CA3AA5A04B4E2CD682B223C1D61414E520F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151584.roa
Signing time:             Mon 11 Aug 2025 08:00:00 +0000
ROA not before:           Mon 11 Aug 2025 07:55:00 +0000
ROA not after:            Mon 10 Aug 2026 08:00:00 +0000
asID:                     151584
IP address blocks:        103.216.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 11:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6a:1c:a3:aa:5a:04:b4:e2:cd:68:2b:22:3c:1d:61:41:4e:52:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 11 07:55:00 2025 GMT
            Not After : Aug 10 08:00:00 2026 GMT
        Subject: CN=2FD90A04B2ACD101016A48C210718886EFC23FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:53:ce:84:2f:a7:2a:0e:04:0f:eb:1e:d8:a1:
                    63:ad:49:7d:20:c4:45:b1:de:b8:81:86:8c:68:4d:
                    50:f6:82:87:75:60:dc:99:b4:a3:13:e1:ec:d3:40:
                    34:22:39:f1:2c:39:fb:7c:70:14:67:1a:c5:04:f6:
                    ac:f9:5e:b3:de:5d:59:32:46:91:42:d9:99:ab:d6:
                    9e:88:29:a2:b6:ea:00:e5:e0:c9:80:d3:94:0d:6e:
                    f3:74:8f:9f:26:5b:24:6f:48:0d:02:dd:8c:d8:ab:
                    13:5b:7e:f9:56:04:5a:ca:2d:d7:69:d8:80:0d:b6:
                    28:71:20:c3:9c:08:ca:7d:0a:48:9a:5d:e5:ac:5a:
                    3b:91:a2:31:ba:1a:6c:fe:6d:11:5b:40:6f:97:e7:
                    d7:e1:5c:b0:89:0d:03:a8:49:09:02:97:67:ca:2d:
                    e7:51:f3:61:5f:45:c8:b2:e3:4f:4b:c0:11:7c:6a:
                    df:b3:ad:94:42:64:93:5c:1a:30:16:fc:90:ab:b3:
                    24:20:9f:52:ea:d7:e3:72:c9:57:0a:88:a2:af:88:
                    97:dc:c9:80:29:ff:e6:ab:b8:8c:01:eb:24:92:db:
                    da:d1:98:d2:1d:8a:15:0c:25:53:c9:f7:1c:40:1c:
                    45:03:6f:3c:48:18:9e:2f:ac:35:f0:5f:10:88:75:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D9:0A:04:B2:AC:D1:01:01:6A:48:C2:10:71:88:86:EF:C2:3F:CB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151584.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:0c:86:fa:7d:cf:84:54:c1:9e:9e:2d:b9:6c:21:67:48:94:
         41:bc:c2:4b:f7:8b:0d:39:4d:c7:be:1a:99:e9:48:4e:ba:38:
         d5:13:04:1b:7b:13:c6:06:59:2c:f5:1e:0f:21:fd:c3:f2:55:
         cd:51:13:2c:b1:d7:bc:88:fd:2e:9a:d6:e5:88:fc:59:fd:44:
         c8:0e:b0:6d:85:6f:63:45:01:b6:f2:79:24:67:35:22:ed:c8:
         de:f2:33:8f:4e:1b:fb:6e:96:1c:08:01:40:1c:aa:98:24:d5:
         15:e8:82:d6:70:0c:68:61:47:e5:83:a8:8c:d1:b6:a8:a8:55:
         95:35:a7:a9:54:e7:44:53:f4:7c:77:50:3d:f5:43:ff:ad:bd:
         d3:7b:f5:6d:fb:fa:17:37:66:91:d4:b2:86:7d:ea:ae:05:38:
         38:7d:a6:02:94:6a:12:37:0f:7f:ad:d2:99:e9:4b:d6:09:76:
         f0:fa:ac:30:8d:58:73:e6:4f:01:c4:ee:ae:83:7e:01:5a:a2:
         7c:38:11:be:e3:d8:00:2b:21:a0:3f:cc:65:68:da:4b:88:fd:
         db:79:84:75:54:e0:78:bf:b3:13:ac:be:a0:74:6b:9a:a7:5f:
         52:e7:8e:20:7d:b9:1d:aa:00:29:4f:c1:99:fa:e7:e4:07:16:
         96:2b:25:4b
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUBGoco6paBLTizWgrIjwdYUFOUg8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxMTA3NTUwMFoX
DTI2MDgxMDA4MDAwMFowMzExMC8GA1UEAxMoMkZEOTBBMDRCMkFDRDEwMTAxNkE0
OEMyMTA3MTg4ODZFRkMyM0ZDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPVTzoQvpyoOBA/rHtihY61JfSDERbHeuIGGjGhNUPaCh3Vg3Jm0oxPh7NNA
NCI58Sw5+3xwFGcaxQT2rPles95dWTJGkULZmavWnogporbqAOXgyYDTlA1u83SP
nyZbJG9IDQLdjNirE1t++VYEWsot12nYgA22KHEgw5wIyn0KSJpd5axaO5GiMboa
bP5tEVtAb5fn1+FcsIkNA6hJCQKXZ8ot51HzYV9FyLLjT0vAEXxq37OtlEJkk1wa
MBb8kKuzJCCfUurX43LJVwqIoq+Il9zJgCn/5qu4jAHrJJLb2tGY0h2KFQwlU8n3
HEAcRQNvPEgYni+sNfBfEIh19KECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQv2QoE
sqzRAQFqSMIQcYiG78I/yzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU4NC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWfYajANBgkqhkiG9w0BAQsFAAOCAQEAlAyG+n3PhFTBnp4tuWwh
Z0iUQbzCS/eLDTlNx74amelITro41RMEG3sTxgZZLPUeDyH9w/JVzVETLLHXvIj9
LprW5Yj8Wf1EyA6wbYVvY0UBtvJ5JGc1Iu3I3vIzj04b+26WHAgBQByqmCTVFeiC
1nAMaGFH5YOojNG2qKhVlTWnqVTnRFP0fHdQPfVD/62903v1bfv6FzdmkdSyhn3q
rgU4OH2mApRqEjcPf63SmelL1gl28PqsMI1Yc+ZPAcTuroN+AVqifDgRvuPYACsh
oD/MZWjaS4j923mEdVTgeL+zE6y+oHRrmqdfUueOIH25HaoAKU/Bmfrn5AcWlisl
Sw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:12:20 2025 by rpki-client