Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141963.roa
File:                     AS141963.roa (raw, json)
Hash identifier:          pRl01oNNQs022jPS4xlaCRah9UizLfms+96+L+zxxik=
Subject key identifier:   83:C4:6F:7D:AC:69:E9:60:5F:72:A3:3C:34:02:8C:83:4D:F7:B2:76
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       73AF9950F8F8B37245E251081DEC40C177C906DB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141963.roa
Signing time:             Tue 10 Dec 2024 05:00:20 +0000
ROA not before:           Tue 10 Dec 2024 04:55:20 +0000
ROA not after:            Tue 09 Dec 2025 05:00:20 +0000
asID:                     141963
IP address blocks:        103.166.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:af:99:50:f8:f8:b3:72:45:e2:51:08:1d:ec:40:c1:77:c9:06:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 04:55:20 2024 GMT
            Not After : Dec  9 05:00:20 2025 GMT
        Subject: CN=83C46F7DAC69E9605F72A33C34028C834DF7B276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:d4:81:05:b9:47:80:d1:d4:26:fe:37:8d:
                    d7:1f:8a:d5:ec:b6:54:15:40:f8:e6:13:da:c0:97:
                    2b:ac:7f:24:6c:ba:da:39:e1:b8:93:79:4f:ac:54:
                    09:ed:0e:93:28:ac:95:96:f8:fb:4f:d8:a1:54:06:
                    0c:43:49:73:99:48:9a:0b:ce:6d:96:1d:2e:c4:f1:
                    e9:f8:c4:57:a7:fe:e1:2a:6e:b8:8a:3a:2c:34:d7:
                    e7:d8:46:ac:10:94:c4:33:18:4a:5f:22:4c:6d:ce:
                    4c:4a:44:e2:02:27:0d:c1:a5:70:2e:03:d1:5a:f2:
                    18:76:75:da:d9:59:ca:8f:a6:32:a9:44:b0:5b:c2:
                    23:4f:1f:28:89:a4:e8:c1:84:e7:df:bb:92:79:0c:
                    94:0d:cf:c5:3a:11:ad:5f:57:23:07:01:3d:85:88:
                    69:e6:a0:dc:06:c1:43:b5:9b:7a:ee:e5:ac:8b:cf:
                    b9:bf:a3:5e:8f:e2:79:23:4d:d4:5b:38:df:af:5a:
                    69:ba:61:d0:98:ee:0e:f5:5c:bd:0f:26:d4:fb:2c:
                    51:74:d6:10:01:e7:ab:de:6d:b0:fb:36:96:e1:2a:
                    d7:b2:f1:f3:75:b8:6d:60:40:f1:ee:f7:cf:ff:24:
                    a9:0d:a3:b6:6b:e3:18:ae:88:0b:1d:06:4a:44:37:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C4:6F:7D:AC:69:E9:60:5F:72:A3:3C:34:02:8C:83:4D:F7:B2:76
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141963.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:30:79:f2:71:49:25:8b:71:56:66:ef:aa:ff:e7:9c:a3:87:
         5a:55:c5:98:1e:f1:bc:6b:09:e8:d0:01:7b:31:56:4a:ec:72:
         36:09:62:45:d0:28:b1:40:e0:27:ac:b8:ab:28:c1:8a:8e:14:
         10:c0:3b:58:5f:6f:98:42:c7:0a:01:1d:f2:51:11:4a:90:0c:
         29:e0:0d:61:7f:2c:7c:53:b9:98:eb:00:5a:da:ad:96:b7:51:
         b1:26:f2:35:7e:b8:62:c6:8e:f5:b6:72:00:97:73:28:9f:62:
         e6:0e:74:a8:62:02:b0:1a:eb:f5:26:bf:da:08:b8:8e:3e:b5:
         b4:80:09:37:c3:bb:57:84:b6:90:9f:6c:24:ae:47:69:96:f2:
         29:88:ff:07:91:7d:d8:dc:70:16:e3:0a:3a:1c:11:cc:78:bd:
         e7:d2:90:71:c8:5b:46:02:d5:c0:e9:56:1f:7a:46:81:65:cb:
         f5:2b:3b:4d:68:2f:e8:7c:8f:e7:fd:e5:1d:9f:25:d6:d5:c2:
         08:cc:ed:03:d4:7c:8f:08:a7:20:e8:eb:77:66:52:f8:42:01:
         11:35:34:6f:18:a0:28:2e:36:82:3c:c2:e9:47:19:a9:15:82:
         8c:60:fc:ac:2c:d2:c2:34:ac:17:12:ab:9e:1e:bd:f7:8a:78:
         3e:2f:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:22 2025 by rpki-client