Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150483.roa
File:                     AS150483.roa (raw, json)
Hash identifier:          QahhVaFXMY+gxcxTYDoqhWAedLAiNg2/JYNSxxl6I2w=
Subject key identifier:   D2:32:A4:B8:CD:CA:C9:BF:AA:24:0B:D6:9A:9F:45:6B:E5:71:71:93
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       5C10D51A9B33E228674B227C4ACF47EE83D82101
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150483.roa
Signing time:             Sun 03 May 2026 05:55:20 +0000
ROA not before:           Sun 03 May 2026 05:50:20 +0000
ROA not after:            Sun 02 May 2027 05:55:20 +0000
asID:                     150483
IP address blocks:        103.54.168.0/23 maxlen: 23
                          2001:df2:dec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:10:d5:1a:9b:33:e2:28:67:4b:22:7c:4a:cf:47:ee:83:d8:21:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 05:50:20 2026 GMT
            Not After : May  2 05:55:20 2027 GMT
        Subject: CN=D232A4B8CDCAC9BFAA240BD69A9F456BE5717193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:a5:78:ce:d2:51:1d:6b:9f:da:0b:30:fd:
                    7e:6c:c9:5e:81:87:fd:b0:61:06:0e:d0:a6:69:1c:
                    c7:24:cf:4b:8c:30:43:bf:f0:d5:07:25:37:19:05:
                    ef:e6:28:69:9e:7b:ff:c4:f7:94:57:60:ef:38:7d:
                    f2:30:43:e7:a3:de:90:f9:d9:c5:79:49:d2:14:6c:
                    88:bc:ad:7a:9b:44:01:f8:15:cf:68:b2:b9:22:a8:
                    e1:53:2c:d9:e8:12:db:eb:c4:aa:92:17:1e:d4:8d:
                    df:80:f5:55:79:f7:96:5f:a0:af:18:d8:12:7c:8b:
                    0d:53:23:58:88:0c:82:2b:5c:dd:3c:01:bb:ac:3a:
                    fc:fb:23:97:c1:ac:6c:cb:c3:6d:26:6a:8e:dd:0b:
                    89:b5:4d:8e:66:fa:a3:91:df:54:9a:24:de:5e:8b:
                    2b:6d:7d:a3:67:76:fb:43:1a:8e:d7:c8:c4:3f:13:
                    88:3e:05:12:eb:07:f0:e7:2d:87:5a:81:ca:85:7e:
                    51:f2:96:7c:10:aa:f6:72:c8:35:85:d8:a6:45:fc:
                    59:58:6e:2c:3a:5c:28:31:a9:f7:8f:e3:f5:b9:bd:
                    ec:dc:11:1d:e7:c6:e7:fd:41:8d:53:22:89:02:98:
                    e8:9e:50:84:9c:0d:da:d9:83:23:d9:b5:91:ae:ce:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:32:A4:B8:CD:CA:C9:BF:AA:24:0B:D6:9A:9F:45:6B:E5:71:71:93
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.168.0/23
                IPv6:
                  2001:df2:dec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:88:14:65:c5:81:dc:e3:6a:59:eb:0d:8e:2b:90:73:d8:c4:
         a4:19:ab:ef:3d:30:ac:67:b7:b6:82:49:3f:7b:fc:9a:b1:04:
         c5:a2:48:50:c8:d8:08:e9:77:6e:ad:13:dd:93:ab:fa:14:7c:
         69:de:ec:a5:43:5e:dc:ba:7b:5e:04:c1:87:94:dd:86:3e:38:
         f6:d2:f5:66:ed:90:15:9b:b3:f5:06:b6:65:02:71:1f:78:4b:
         cf:8c:60:cb:09:dd:61:3a:8d:48:5a:e1:1f:8b:6c:b7:4e:14:
         fd:fd:f6:82:fd:6f:34:10:c2:2b:89:77:8c:86:10:63:13:17:
         af:ce:22:63:aa:ea:3b:c4:6a:6d:ec:2f:7a:dc:dd:fb:5e:69:
         89:ab:6f:63:13:78:a4:4a:f2:c1:54:d5:58:3d:37:0a:d3:b3:
         16:58:ef:7e:34:0c:ae:19:1f:30:20:88:27:bc:44:60:a1:e5:
         5c:8a:3c:f2:4a:c7:8a:34:d8:8c:eb:3d:75:94:c2:08:4d:32:
         e4:e2:12:fb:5a:32:2c:17:0a:b8:a6:f0:51:1c:49:53:3f:9b:
         6b:4f:01:c0:53:36:38:af:f5:47:b5:36:92:66:06:67:72:c7:
         e4:1a:a8:99:1b:84:c6:3c:be:14:4e:b2:40:6b:bb:bd:27:04:
         79:71:3e:71
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUXBDVGpsz4ihnSyJ8Ss9H7oPYIQEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1NTAyMFoX
DTI3MDUwMjA1NTUyMFowMzExMC8GA1UEAxMoRDIzMkE0QjhDRENBQzlCRkFBMjQw
QkQ2OUE5RjQ1NkJFNTcxNzE5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALWSpXjO0lEda5/aCzD9fmzJXoGH/bBhBg7QpmkcxyTPS4wwQ7/w1QclNxkF
7+YoaZ57/8T3lFdg7zh98jBD56PekPnZxXlJ0hRsiLyteptEAfgVz2iyuSKo4VMs
2egS2+vEqpIXHtSN34D1VXn3ll+grxjYEnyLDVMjWIgMgitc3TwBu6w6/Psjl8Gs
bMvDbSZqjt0LibVNjmb6o5HfVJok3l6LK219o2d2+0MajtfIxD8TiD4FEusH8Oct
h1qByoV+UfKWfBCq9nLINYXYpkX8WVhuLDpcKDGp94/j9bm97NwRHefG5/1BjVMi
iQKY6J5QhJwN2tmDI9m1ka7OVdMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTSMqS4
zcrJv6okC9aan0Vr5XFxkzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNDgzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA
ATAGAwQBZzaoMA8EAgACMAkDBwAgAQ3y3sAwDQYJKoZIhvcNAQELBQADggEBAH2I
FGXFgdzjalnrDY4rkHPYxKQZq+89MKxnt7aCST97/JqxBMWiSFDI2Ajpd26tE92T
q/oUfGne7KVDXty6e14EwYeU3YY+OPbS9WbtkBWbs/UGtmUCcR94S8+MYMsJ3WE6
jUha4R+LbLdOFP399oL9bzQQwiuJd4yGEGMTF6/OImOq6jvEam3sL3rc3fteaYmr
b2MTeKRK8sFU1Vg9NwrTsxZY7340DK4ZHzAgiCe8RGCh5VyKPPJKx4o02IzrPXWU
wghNMuTiEvtaMiwXCrim8FEcSVM/m2tPAcBTNjiv9Ue1NpJmBmdyx+QaqJkbhMY8
vhROskBru70nBHlxPnE=
-----END CERTIFICATE-----
Generated at Tue May 12 22:55:51 2026 by rpki-client