Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141893.roa
File:                     AS141893.roa (raw, json)
Hash identifier:          kGOUR/evnDoA7zfDErde7bj+OO1C7FyZ2TkYZ7jzVxw=
Subject key identifier:   0D:83:BF:01:40:E5:A3:12:9B:13:40:23:4D:84:24:54:E2:AE:07:53
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6BA0DECA0F33E3A2477A42B4C9012252DDA12C31
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141893.roa
Signing time:             Tue 10 Dec 2024 05:00:25 +0000
ROA not before:           Tue 10 Dec 2024 04:55:25 +0000
ROA not after:            Tue 09 Dec 2025 05:00:25 +0000
asID:                     141893
IP address blocks:        103.162.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a0:de:ca:0f:33:e3:a2:47:7a:42:b4:c9:01:22:52:dd:a1:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 04:55:25 2024 GMT
            Not After : Dec  9 05:00:25 2025 GMT
        Subject: CN=0D83BF0140E5A3129B1340234D842454E2AE0753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:c7:63:11:01:64:8c:96:29:16:5b:b6:19:
                    77:3a:87:4e:bf:ae:90:ca:ab:6a:7c:5e:b6:bf:fb:
                    11:63:31:9b:ec:9b:2c:bd:c7:52:aa:59:02:61:c3:
                    05:27:9e:2f:26:c0:f4:7e:19:44:c9:e3:19:6d:a9:
                    16:29:3c:7e:e3:d3:e3:60:18:b3:e8:a8:02:d6:37:
                    85:47:2f:9f:76:a0:bc:3e:66:b7:68:04:12:1e:97:
                    39:db:ad:2d:d2:ee:9c:7e:e1:95:2f:81:e2:6e:a2:
                    74:3c:8e:34:ca:dc:40:99:22:ed:4a:65:04:7e:dd:
                    a1:6c:36:15:f0:f6:41:1d:12:2f:c0:b7:1f:bf:18:
                    d5:b8:7d:2a:80:2f:8c:34:2b:db:c6:e9:e0:08:21:
                    e9:29:14:d2:db:7e:fb:f3:03:7b:3c:7a:81:4b:b6:
                    e3:5c:1a:38:81:bb:4c:8a:58:6a:d8:7b:96:b8:a3:
                    b5:ee:8e:0f:44:44:66:94:f5:73:0c:15:f4:22:b7:
                    2a:c5:01:90:64:36:ea:eb:67:56:8c:85:ee:3b:de:
                    3b:0e:e7:3d:a5:5e:5a:6b:dc:60:1c:b9:4f:74:92:
                    a1:be:6f:2c:19:a9:33:bc:ef:3c:fc:3d:7f:99:ee:
                    ce:5f:c6:1d:6a:92:71:02:0c:e2:38:ab:1a:a7:58:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:83:BF:01:40:E5:A3:12:9B:13:40:23:4D:84:24:54:E2:AE:07:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141893.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:15:cb:0b:de:88:31:3b:de:b3:fa:9e:b1:72:ce:7d:70:09:
         30:a4:76:1e:df:45:e1:86:fd:8f:ab:c9:54:ab:e5:df:ea:8a:
         b9:96:b5:67:55:22:c9:96:b2:5b:73:15:b3:7e:33:7f:c4:dc:
         93:46:a0:55:f6:21:00:43:b3:5f:a0:ca:b8:3b:a3:68:77:34:
         74:4f:a5:78:6e:08:20:9b:6b:b4:22:63:78:ef:74:de:99:4a:
         a7:bc:54:38:b4:59:1c:96:9d:6a:b6:91:5c:ca:64:3a:98:bb:
         6f:16:3f:96:46:7c:6f:ca:3a:12:1e:cb:91:43:04:a7:de:5b:
         58:b7:fe:2f:86:32:4c:10:23:15:3f:cf:25:3e:a7:ca:ee:1f:
         cb:29:1b:25:87:83:ad:24:04:54:a7:34:e3:6e:03:43:b1:de:
         26:df:f5:b0:2f:af:ed:26:a2:5b:c2:ad:98:c4:f6:8f:60:83:
         b1:f7:15:1e:4b:d7:0e:ae:5c:b4:04:b9:34:8f:29:ea:c9:8d:
         46:d5:e6:d8:7b:76:0d:8d:e7:0c:0f:f8:d0:d4:61:f5:3e:1e:
         3a:2d:a8:ea:4d:61:0a:1b:5d:da:55:bc:18:34:68:7b:d1:95:
         52:17:cf:41:3a:37:62:32:d8:93:03:de:11:dc:c7:2b:f9:0b:
         43:6c:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:12 2025 by rpki-client