Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140411.roa
File:                     AS140411.roa (raw, json)
Hash identifier:          n6egRxT1YSJYboQA3KMsthquvgsakaqVteuQXdZmhTY=
Subject key identifier:   52:C7:07:25:1F:16:79:B2:E5:9B:D2:B8:C4:EC:20:56:6C:E8:AF:FB
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       45F3C7A0E2BA43C3A60CB97272879BC2586DD573
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140411.roa
Signing time:             Fri 04 Sep 2026 03:15:28 +0000
ROA not before:           Fri 04 Sep 2026 03:10:28 +0000
ROA not after:            Fri 03 Sep 2027 03:15:28 +0000
asID:                     140411
IP address blocks:        103.54.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 05:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f3:c7:a0:e2:ba:43:c3:a6:0c:b9:72:72:87:9b:c2:58:6d:d5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Sep  4 03:10:28 2026 GMT
            Not After : Sep  3 03:15:28 2027 GMT
        Subject: CN=52C707251F1679B2E59BD2B8C4EC20566CE8AFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:9c:1a:07:2d:72:bb:4a:74:e1:dc:c0:03:
                    17:8b:c0:c2:1c:b6:0d:26:05:c5:b2:0e:65:03:bf:
                    ec:79:de:32:20:ec:96:4c:80:1f:88:52:82:5d:96:
                    d0:be:55:18:58:fe:a2:3e:33:71:e4:1e:19:81:8b:
                    45:f6:15:d8:00:bf:50:4d:6a:ee:32:e9:ab:fa:86:
                    60:ff:ad:1e:1e:77:f6:71:dd:76:d7:a2:d0:01:17:
                    64:28:af:20:70:3e:50:25:de:b2:8b:1f:84:13:9a:
                    93:87:4f:bd:34:30:cc:bb:1f:d5:a0:52:1e:f6:39:
                    f0:4e:09:86:ad:59:f0:f9:09:2f:da:b4:92:5e:1e:
                    db:7e:58:7e:05:81:1c:3e:94:f5:51:e6:3f:f1:aa:
                    7f:ea:71:31:01:e7:f0:2a:03:bf:d9:24:94:d6:e6:
                    f8:b9:74:d9:30:a9:13:f4:a3:ab:4b:80:44:a9:32:
                    79:3a:cc:1f:34:4a:17:15:30:26:f4:af:d9:1e:0b:
                    bc:6d:7a:ae:cc:0a:15:fa:d4:fd:e3:eb:34:c9:83:
                    82:39:fd:df:85:c3:73:84:69:04:bb:ec:aa:fd:ca:
                    b7:52:03:f5:d0:02:88:e3:0f:38:b7:09:06:b0:36:
                    b6:3f:9e:2c:b2:ff:ff:09:b1:84:54:f8:8d:fb:04:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C7:07:25:1F:16:79:B2:E5:9B:D2:B8:C4:EC:20:56:6C:E8:AF:FB
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140411.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:12:78:7e:32:00:13:7d:c6:01:9b:d5:3f:4c:b0:82:e7:cb:
         28:4f:83:32:8a:b2:66:92:6e:82:c0:da:2c:3e:3c:d5:a3:33:
         7b:7d:5b:cb:34:bc:e1:be:cf:e1:99:27:3e:fe:d3:b1:b5:38:
         02:12:cc:a0:d6:3b:7a:24:33:de:c0:9a:8b:be:df:77:6a:af:
         30:84:9e:f1:f6:9e:8d:fe:aa:82:8a:d1:67:05:78:50:4b:f0:
         e1:73:ed:c1:90:b1:ce:4f:fe:b8:cb:8d:cd:eb:3c:12:6c:c7:
         1f:2e:e4:2e:23:4b:44:e1:6c:23:96:4d:02:8a:8f:da:e6:de:
         fd:f8:3d:61:29:cc:d1:17:76:08:7b:63:59:f3:ec:7a:33:6e:
         23:ee:47:17:cd:be:f0:97:2c:5c:51:b7:66:88:ef:89:38:65:
         d6:ec:e6:67:9e:92:6d:5b:91:5c:75:7c:4b:58:9a:ac:31:9f:
         d5:20:75:9f:75:71:00:ec:9f:81:3d:0c:e6:b4:09:4a:b0:d2:
         17:3b:31:9a:76:94:10:01:81:88:cd:3f:d0:f3:40:0d:cf:c2:
         bc:da:80:75:83:d8:aa:26:f3:e7:2b:88:fe:aa:7f:8b:39:66:
         9c:b6:d6:3d:80:e2:f2:7d:e0:01:31:d4:0b:c2:05:57:aa:d6:
         fa:98:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:28:28 2026 by rpki-client