Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa
File:                     AS141916.roa (raw, json)
Hash identifier:          TKPi5BxUlOEskA8Mk7odw4pA3mz6M0Nri0gyi/d3uZ8=
Subject key identifier:   86:22:FC:F2:05:AD:1E:F4:4E:C7:71:94:54:B4:8A:FE:38:38:E8:6A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       72F9BA9E56AE516B5D5897ACA78B71449CEFAAD9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa
Signing time:             Tue 10 Dec 2024 05:00:08 +0000
ROA not before:           Tue 10 Dec 2024 04:55:08 +0000
ROA not after:            Tue 09 Dec 2025 05:00:08 +0000
asID:                     141916
IP address blocks:        103.164.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f9:ba:9e:56:ae:51:6b:5d:58:97:ac:a7:8b:71:44:9c:ef:aa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 04:55:08 2024 GMT
            Not After : Dec  9 05:00:08 2025 GMT
        Subject: CN=8622FCF205AD1EF44EC7719454B48AFE3838E86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f0:4f:94:82:a9:91:ba:30:74:13:75:5a:a4:
                    87:f7:cb:a7:5c:c9:cc:29:d8:2d:10:c3:8e:8d:0c:
                    ad:f9:5e:ae:43:cb:c6:70:87:c1:6e:93:8d:a0:dc:
                    6a:ce:1d:7d:78:b0:b8:8b:38:38:6c:66:ce:91:5f:
                    c4:a9:d2:db:11:d9:e6:d2:72:a8:81:65:df:ae:af:
                    c6:77:20:b5:a0:55:d3:70:97:59:e2:6c:f8:f7:80:
                    57:b6:94:f9:24:95:f3:3a:97:6b:df:ae:d7:45:bb:
                    6f:50:a1:d3:72:af:76:e2:d2:bf:c8:ca:f0:42:e7:
                    48:ec:1b:c0:a6:6f:72:a9:1d:c6:66:30:b2:fa:58:
                    c9:d5:61:70:05:64:67:a8:e8:20:b7:28:c3:1d:52:
                    1e:01:6d:9d:64:d4:f8:d3:27:41:3d:8f:eb:42:f1:
                    f8:06:ec:6d:f8:ea:fa:34:a1:1c:d9:dd:95:6c:61:
                    5f:c1:84:6c:27:ce:96:97:78:5b:14:07:2c:09:01:
                    9e:e3:3d:2c:f3:70:b7:d5:ac:49:15:0c:e2:2a:f6:
                    8c:bc:96:ba:21:60:bf:02:45:f6:00:55:23:d7:73:
                    2e:78:82:a2:7b:3f:b6:dc:16:03:01:2a:38:73:a1:
                    f2:b8:b2:f0:5b:36:fb:de:27:fb:fe:f2:f5:b3:cc:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:22:FC:F2:05:AD:1E:F4:4E:C7:71:94:54:B4:8A:FE:38:38:E8:6A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c4:2e:3d:c0:41:df:68:a0:98:b8:5f:42:68:4e:a1:50:33:
         85:20:00:bb:b6:3b:89:a5:62:0d:3a:e7:22:dd:3b:1f:01:d9:
         45:c2:f7:2a:de:9e:5a:9f:24:f8:eb:c9:49:52:9a:81:95:80:
         44:b1:f0:0f:ff:c9:0a:5c:67:0c:f4:41:f7:fe:d7:2b:cc:a8:
         4a:3a:60:e4:f0:46:9a:2f:c8:9d:5e:e2:83:35:4a:cb:6b:55:
         89:f2:e1:35:cc:2a:21:ac:5c:c3:f8:41:f5:ca:33:16:24:1d:
         10:f1:fa:7a:cf:7e:62:cb:59:50:cb:39:6b:4c:8c:bf:74:17:
         32:26:d9:c9:8f:5d:da:81:15:74:ed:3a:93:c6:d4:f8:ef:6f:
         73:6b:b5:d0:78:5f:6d:73:dc:98:5b:04:a0:bc:fc:4e:1b:4b:
         91:24:5f:c4:93:67:b4:9f:47:5c:68:c0:b2:98:38:41:90:ca:
         39:83:4c:01:43:58:33:fc:76:e0:f4:45:92:05:eb:cf:f8:64:
         87:39:02:86:39:2e:7c:a0:22:04:c8:75:5c:84:74:b7:0b:a5:
         55:25:06:4e:ae:88:d2:a6:d2:c1:c3:15:f6:64:79:07:32:cc:
         c5:c6:dc:eb:10:9d:c7:9c:a4:af:22:ec:95:e9:46:29:55:51:
         ba:df:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:42 2025 by rpki-client