Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150942.roa
File:                     AS150942.roa (raw, json)
Hash identifier:          TuZotMsNXneUSPrQsno7BkCel423/cgevaZywcYW5iM=
Subject key identifier:   F5:F4:7F:CD:67:87:D2:4A:27:4D:D5:BC:4F:09:58:3E:29:E2:6D:8D
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       792FFD8B8F09A7A3C707F723EC8BA64DE821238E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150942.roa
Signing time:             Sun 03 May 2026 05:39:41 +0000
ROA not before:           Sun 03 May 2026 05:34:41 +0000
ROA not after:            Sun 02 May 2027 05:39:41 +0000
asID:                     150942
IP address blocks:        103.105.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2f:fd:8b:8f:09:a7:a3:c7:07:f7:23:ec:8b:a6:4d:e8:21:23:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 05:34:41 2026 GMT
            Not After : May  2 05:39:41 2027 GMT
        Subject: CN=F5F47FCD6787D24A274DD5BC4F09583E29E26D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:51:47:c2:99:84:46:ac:a4:aa:34:99:9c:
                    eb:54:2a:72:15:13:da:a1:ab:fb:6e:97:d4:1c:51:
                    03:47:07:c8:cf:e2:2c:88:46:4b:9c:8f:f5:ac:4a:
                    ee:1a:e8:dc:9f:08:b0:e7:a9:9f:3b:cd:76:e3:0e:
                    81:ea:c3:57:f1:5f:fd:0d:9b:dc:1f:0b:15:ca:07:
                    1f:3b:93:67:f7:fd:51:0b:c2:20:bd:6f:a9:ff:5a:
                    5f:be:44:c5:0c:96:19:38:46:50:c8:47:62:0e:c6:
                    0d:ad:08:35:3c:5f:b1:f2:bb:b1:ef:43:81:0b:19:
                    8a:23:ad:04:95:b2:b3:d5:c0:99:55:72:0f:6f:91:
                    2f:d7:e8:e8:fd:bb:73:cc:2b:76:26:ed:97:76:90:
                    b5:2b:7f:85:77:26:1a:bc:58:b0:07:29:d4:e4:e1:
                    bb:0a:42:73:82:99:0b:9e:6a:e0:1f:7b:02:05:81:
                    04:84:bd:35:35:66:2c:bf:12:a0:90:7d:aa:0a:df:
                    26:8c:f8:7a:f3:43:c8:4c:69:8d:28:9e:8f:19:43:
                    8a:cb:8e:e3:e2:0e:5b:83:c6:60:c4:3c:65:45:d1:
                    5a:af:39:28:49:82:7d:95:03:4c:0e:b8:79:b8:c6:
                    63:6e:0e:55:66:76:c3:fa:4c:53:28:c5:4c:45:17:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:7F:CD:67:87:D2:4A:27:4D:D5:BC:4F:09:58:3E:29:E2:6D:8D
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150942.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:d8:2f:ff:cd:cc:b9:ba:5e:72:32:f0:9b:a6:47:53:fc:
         32:64:f1:7b:24:6b:fa:a6:95:24:7b:10:bb:65:81:cb:05:3f:
         a3:14:27:66:3a:9e:83:0e:bf:72:cd:31:8d:49:fd:10:ac:05:
         59:68:44:7c:76:33:0c:de:58:68:e0:99:69:29:a7:35:f5:e8:
         3f:7b:2b:6e:b5:c6:da:2b:d4:a3:9d:cc:48:fd:18:92:49:a1:
         95:6e:d7:12:8b:fe:ac:04:c2:bd:1d:70:87:5d:db:ae:f2:4c:
         27:f1:84:4d:54:cc:7b:13:e0:b8:ee:59:5b:72:70:b6:91:f3:
         bb:ef:9e:a1:59:ad:e1:a9:0f:11:49:a3:fb:66:24:de:1d:8e:
         eb:ba:fb:6d:cc:7d:15:7c:63:05:e9:d8:f3:3b:f1:a6:47:55:
         44:f1:8d:10:4c:f7:74:b5:26:3e:44:b3:e8:dc:52:52:ab:8e:
         c7:7c:ab:68:5b:50:a7:2c:99:d5:55:d0:25:b7:05:a0:23:34:
         47:2a:8a:30:a7:84:78:35:82:36:6e:b7:0a:31:a9:1c:58:23:
         e8:76:5d:ed:75:0c:03:eb:79:1c:ff:3d:d3:65:f2:d1:d0:12:
         ac:a9:3b:a5:c9:ed:7a:67:dc:bc:a4:07:c0:07:87:ca:f8:e7:
         8e:1d:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:55:47 2026 by rpki-client