Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa
File:                     AS141916.roa (raw, json)
Hash identifier:          XebgrhReuiXE0+wFC/mqHLkdIYB+l1cxmMru/mJ3veE=
Subject key identifier:   0F:1D:48:B3:ED:5F:C6:2E:1C:50:CD:BF:17:C5:93:F4:F9:F7:C2:61
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       410E160B07111817396CFBD0B09BA0EA214FB109
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa
Signing time:             Mon 20 Apr 2026 03:50:44 +0000
ROA not before:           Mon 20 Apr 2026 03:45:44 +0000
ROA not after:            Mon 19 Apr 2027 03:50:44 +0000
asID:                     141916
IP address blocks:        103.164.235.0/24 maxlen: 24
                          163.128.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0e:16:0b:07:11:18:17:39:6c:fb:d0:b0:9b:a0:ea:21:4f:b1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 20 03:45:44 2026 GMT
            Not After : Apr 19 03:50:44 2027 GMT
        Subject: CN=0F1D48B3ED5FC62E1C50CDBF17C593F4F9F7C261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:6d:9b:3c:ac:0a:98:21:de:81:7a:7d:67:
                    a6:d2:3d:e1:b5:59:9d:f3:66:ca:e8:9e:4e:76:8c:
                    31:4d:42:88:32:a7:76:87:5a:84:53:25:e0:44:46:
                    84:0e:82:86:aa:ab:08:e5:6b:77:6b:62:7e:e0:a3:
                    b2:cc:0b:68:37:f7:d1:c3:85:9e:6d:c7:34:98:3e:
                    4f:5f:af:b8:ec:eb:bb:d2:b5:5c:bb:f6:0e:96:8e:
                    26:55:52:a6:5e:4b:10:62:5a:41:0e:17:33:31:0d:
                    6e:42:df:6b:78:b3:0a:9b:57:5c:ce:f4:1f:c9:f1:
                    20:b9:16:d4:c5:9f:90:d8:c2:29:04:39:63:bd:b2:
                    f6:e2:98:7c:7c:03:f1:c0:2a:c6:b1:b2:b4:2f:94:
                    da:ab:fd:96:20:3f:e0:89:04:42:f2:5b:cc:38:a6:
                    11:03:9b:3c:8e:d7:e7:2d:d7:c3:ba:50:4d:7e:48:
                    46:6c:78:5e:35:6d:19:ef:c4:a9:ee:a2:a8:a6:ed:
                    13:7b:47:1c:a7:2e:b3:c0:b5:ba:ff:0b:4d:36:81:
                    20:bf:e2:08:6c:45:40:a6:2d:91:86:3c:d3:02:32:
                    e5:58:de:df:e8:82:85:62:59:c3:a3:77:ab:f1:f4:
                    e9:c8:ac:9c:8b:d1:f3:c6:70:b9:9b:ec:65:55:b3:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1D:48:B3:ED:5F:C6:2E:1C:50:CD:BF:17:C5:93:F4:F9:F7:C2:61
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.235.0/24
                  163.128.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:67:ee:3c:5a:32:b0:a2:0c:47:c6:26:28:51:c0:57:86:
         9c:1c:e2:41:16:e7:92:31:64:9f:37:6e:1c:d7:b3:c6:53:73:
         dc:fb:f5:4e:d9:85:39:d7:62:91:27:89:f3:8c:e4:20:eb:0a:
         be:94:d1:13:6a:54:e6:52:82:8a:3b:b6:90:e2:52:50:b4:56:
         f8:d4:fc:ac:a0:61:3e:04:22:e5:98:db:bd:46:8b:75:d6:07:
         b2:d9:25:a6:31:a3:b3:45:3a:72:a9:09:52:85:c4:91:29:87:
         ee:10:1d:26:d5:67:ef:22:0b:b5:62:49:8b:43:40:88:0b:8d:
         8e:83:8c:a2:6a:47:57:c9:e8:3c:ff:67:d6:0b:80:d3:b4:bd:
         70:a3:23:88:e3:38:ff:70:3b:23:8c:48:6a:e9:08:02:54:7f:
         71:5e:da:df:de:cf:6e:4c:5f:a5:a8:cb:8c:3b:f6:9f:0c:6d:
         18:66:75:82:8c:d7:8e:2b:37:81:16:86:84:84:c5:1f:4d:4c:
         72:c1:b7:10:c2:21:f6:74:0d:63:40:52:7c:c5:5b:8a:21:48:
         bd:67:0a:cb:ae:e0:18:51:af:66:6f:f2:7e:3d:8a:06:e6:aa:
         ed:1b:3a:83:59:15:96:48:46:d0:0e:b5:36:df:d2:46:16:f5:
         79:96:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:54 2026 by rpki-client