Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141095.roa
File:                     AS141095.roa (raw, json)
Hash identifier:          BOx1OltWPyZOJX//9Ry3nPJVpaZkxp1mutRO6zDDUe0=
Subject key identifier:   DE:72:59:D4:A5:81:85:1A:BD:A7:E6:BA:5B:FC:FC:14:31:AE:19:9C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3039802494B355646F18196FEECE796386731D30
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141095.roa
Signing time:             Tue 10 Dec 2024 05:00:18 +0000
ROA not before:           Tue 10 Dec 2024 04:55:18 +0000
ROA not after:            Tue 09 Dec 2025 05:00:18 +0000
asID:                     141095
IP address blocks:        103.156.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:39:80:24:94:b3:55:64:6f:18:19:6f:ee:ce:79:63:86:73:1d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 04:55:18 2024 GMT
            Not After : Dec  9 05:00:18 2025 GMT
        Subject: CN=DE7259D4A581851ABDA7E6BA5BFCFC1431AE199C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:cc:9e:c1:c5:96:85:07:50:05:79:3e:d8:
                    93:3f:dc:d0:4c:f6:61:66:40:0c:f1:50:23:4d:b8:
                    a1:67:c1:fb:54:4a:12:f7:7b:cb:76:6a:81:fb:6b:
                    ea:b0:dd:fc:d3:ce:73:86:64:b4:f1:b2:9a:c7:8c:
                    f9:fe:a7:24:9c:0a:d0:e3:8c:b4:f8:57:d6:f0:8a:
                    7f:ed:c3:fe:46:d3:99:05:66:d4:f1:40:fc:25:09:
                    56:d7:2d:6f:da:e0:e4:fb:d7:61:d5:7c:88:fe:d7:
                    6e:08:fe:38:eb:71:0b:dc:9e:d7:e2:a0:0b:fc:98:
                    3d:cb:88:20:55:db:87:e3:08:ab:e8:5c:ee:ad:67:
                    72:d8:29:23:db:16:38:38:ab:69:c8:62:8a:ca:96:
                    a0:79:e0:3a:40:63:23:be:05:49:ef:17:2f:98:05:
                    61:8c:c5:ec:8d:2a:e2:b6:31:d5:ab:c6:83:89:6d:
                    b9:43:2b:ac:e1:ec:cd:e9:d6:22:48:b5:03:2c:72:
                    47:e3:27:f0:74:7b:ce:4a:23:09:28:7e:5f:e4:0e:
                    60:ba:46:57:99:55:79:c5:59:7c:d6:96:5e:a5:88:
                    ce:cd:d1:ba:72:a5:0b:10:27:4e:02:30:7f:b1:61:
                    b9:51:55:d0:24:3e:9b:40:2a:6a:75:64:bc:1c:aa:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:72:59:D4:A5:81:85:1A:BD:A7:E6:BA:5B:FC:FC:14:31:AE:19:9C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141095.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:8b:91:96:69:b7:f5:d6:53:76:f0:82:fe:3b:63:c9:48:
         43:4e:97:9d:6a:ef:18:85:ed:8e:e8:3c:97:3e:67:2f:45:91:
         20:ae:bd:3a:7b:aa:95:09:da:69:62:67:59:4e:cf:71:ff:90:
         04:ef:02:8f:d5:13:bf:f2:99:f4:e9:95:d9:ae:bb:e7:f1:ec:
         e4:b4:f9:c5:a2:66:8d:28:87:5d:a8:5b:f9:30:51:32:90:2c:
         b5:79:57:82:7d:3c:51:f2:26:e0:c2:26:00:1e:a8:44:f8:0f:
         b8:7d:a7:54:ca:34:7c:2d:e9:a4:34:32:a1:af:6f:20:4f:ae:
         96:69:d1:22:fc:f7:5e:1e:7b:01:66:15:d2:b5:83:ce:85:8e:
         fa:d3:fd:6a:5f:b7:22:62:85:5d:51:5f:41:7e:f7:ad:62:3f:
         3f:37:26:51:d7:87:42:a2:b3:bb:74:71:93:4a:de:4a:90:4f:
         43:4c:c6:5f:4f:56:10:1f:89:2c:7b:ae:de:6d:d8:8b:3e:2a:
         2a:a7:d7:8a:85:b0:69:7a:af:7d:3b:66:fc:5f:11:e8:1e:e5:
         d2:71:07:e6:d8:f4:be:e0:45:18:d2:14:e2:a2:95:cd:94:d6:
         10:e7:d7:39:23:4b:1e:76:bd:76:df:7c:35:7f:00:3c:23:81:
         82:81:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:42 2025 by rpki-client