Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140460.roa
File:                     AS140460.roa (raw, json)
Hash identifier:          ZkHWS8rkJl1j7utg8EBP4FYHC6bH+tKh3LFm1TV1zQE=
Subject key identifier:   90:24:49:66:D6:25:08:63:1E:D1:EA:D4:5D:8A:7C:C1:99:48:26:78
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       6149809C1227DD4593D9C6538BB5AA4A93BDA394
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140460.roa
Signing time:             Sat 02 May 2026 21:35:08 +0000
ROA not before:           Sat 02 May 2026 21:30:08 +0000
ROA not after:            Sat 01 May 2027 21:35:08 +0000
asID:                     140460
IP address blocks:        2406:41c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 03:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:49:80:9c:12:27:dd:45:93:d9:c6:53:8b:b5:aa:4a:93:bd:a3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 21:30:08 2026 GMT
            Not After : May  1 21:35:08 2027 GMT
        Subject: CN=90244966D62508631ED1EAD45D8A7CC199482678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:14:25:4d:70:92:fe:be:18:e8:fc:10:3c:
                    63:76:ee:f9:df:6e:1b:b7:e9:65:bf:44:aa:52:f7:
                    3c:26:ba:e2:81:fc:97:39:0e:4a:c7:77:4c:22:6f:
                    05:c9:31:36:b9:37:9d:06:56:fe:a4:39:fa:ab:34:
                    9a:a4:06:66:92:3c:30:0c:96:82:2c:b8:23:52:f1:
                    4e:99:0f:fd:1b:33:a0:c7:a6:dd:d8:92:38:7d:ca:
                    31:cc:fd:8c:5d:6e:bc:bd:d3:dc:61:8e:1c:e5:5e:
                    39:6a:a0:d0:56:39:db:69:8c:98:81:0b:43:d6:75:
                    9e:d3:fd:f5:a8:d9:d8:67:3a:b2:ce:2c:14:f8:2c:
                    09:b5:5b:67:ef:db:79:73:27:61:8b:2a:05:5c:36:
                    8d:90:32:c4:f8:f4:b1:af:c0:4a:2f:d5:78:cf:fb:
                    3d:fc:08:f8:4c:d5:a8:93:d5:5a:5f:74:9b:46:46:
                    cf:91:13:0b:7f:52:6b:ae:01:b7:0f:66:b0:b8:bb:
                    05:59:37:56:f0:e2:54:3b:f1:33:c0:1b:80:7c:0c:
                    8f:f5:26:9e:52:8a:4e:e9:90:c2:3e:e2:b0:0e:43:
                    ab:b8:90:56:36:0f:b5:50:6c:80:74:66:d5:13:27:
                    47:0a:68:3c:6e:39:e6:4c:96:6b:9b:60:7d:87:ef:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:24:49:66:D6:25:08:63:1E:D1:EA:D4:5D:8A:7C:C1:99:48:26:78
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140460.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:41c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:0b:24:b4:47:1a:36:18:28:ee:8f:41:14:98:7a:65:bf:54:
         a5:9b:3a:4d:34:97:48:46:bc:99:42:55:0a:f2:18:1a:f6:2b:
         a9:da:59:f3:d9:c4:5f:50:f2:6c:51:7c:cd:70:52:65:e6:af:
         15:be:7f:2c:d7:c7:2e:2b:40:3a:ec:ba:ad:c2:0f:dd:55:c1:
         22:84:19:77:38:2b:57:db:bc:2a:68:c6:a1:5a:68:24:61:00:
         a0:3b:ac:ff:bf:bf:ec:ae:8a:af:83:80:42:79:c9:a0:2c:72:
         cd:10:eb:14:48:0f:93:6d:4d:dc:57:88:53:69:af:a2:88:85:
         ac:05:0e:8e:e2:b0:d5:73:71:c4:87:3c:9b:81:f2:6e:08:0b:
         b9:a4:f4:fe:08:4f:d0:48:6e:1c:13:23:c3:bc:f3:f6:c9:f5:
         fc:97:a2:e1:b6:e4:a7:a2:1f:d6:ea:ea:9c:f8:69:2e:69:39:
         1d:b0:93:7f:40:15:50:04:70:ad:9f:08:b2:fa:60:00:5f:f8:
         53:ce:88:67:74:53:88:3d:a1:cc:c6:4c:9a:1c:aa:bb:72:f1:
         cd:7f:95:03:e3:41:54:3c:b9:aa:ce:71:e6:5b:d3:11:5e:0d:
         39:a1:b0:4a:5d:9e:cd:11:c2:86:a9:a8:ff:11:03:a3:cd:51:
         82:c2:fa:3c
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUYUmAnBIn3UWT2cZTi7WqSpO9o5QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzAwOFoX
DTI3MDUwMTIxMzUwOFowMzExMC8GA1UEAxMoOTAyNDQ5NjZENjI1MDg2MzFFRDFF
QUQ0NUQ4QTdDQzE5OTQ4MjY3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmYFCVNcJL+vhjo/BA8Y3bu+d9uG7fpZb9EqlL3PCa64oH8lzkOSsd3TCJv
BckxNrk3nQZW/qQ5+qs0mqQGZpI8MAyWgiy4I1LxTpkP/RszoMem3diSOH3KMcz9
jF1uvL3T3GGOHOVeOWqg0FY522mMmIELQ9Z1ntP99ajZ2Gc6ss4sFPgsCbVbZ+/b
eXMnYYsqBVw2jZAyxPj0sa/ASi/VeM/7PfwI+EzVqJPVWl90m0ZGz5ETC39Sa64B
tw9msLi7BVk3VvDiVDvxM8AbgHwMj/UmnlKKTumQwj7isA5Dq7iQVjYPtVBsgHRm
1RMnRwpoPG455kyWa5tgfYfvvkcCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBSQJElm
1iUIYx7R6tRdinzBmUgmeDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwNDYwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA
AjAHAwUAJAZBwDANBgkqhkiG9w0BAQsFAAOCAQEAigsktEcaNhgo7o9BFJh6Zb9U
pZs6TTSXSEa8mUJVCvIYGvYrqdpZ89nEX1DybFF8zXBSZeavFb5/LNfHLitAOuy6
rcIP3VXBIoQZdzgrV9u8KmjGoVpoJGEAoDus/7+/7K6Kr4OAQnnJoCxyzRDrFEgP
k21N3FeIU2mvooiFrAUOjuKw1XNxxIc8m4HybggLuaT0/ghP0EhuHBMjw7zz9sn1
/Jei4bbkp6If1urqnPhpLmk5HbCTf0AVUARwrZ8IsvpgAF/4U86IZ3RTiD2hzMZM
mhyqu3LxzX+VA+NBVDy5qs5x5lvTEV4NOaGwSl2ezRHChqmo/xEDo81RgsL6PA==
-----END CERTIFICATE-----
Generated at Sun May 3 01:44:39 2026 by rpki-client