Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141050.roa
File:                     AS141050.roa (raw, json)
Hash identifier:          Mn1H2OdRNwzCjcPhWD8N21o7BiiBZ3KwoURyDWZ3+uE=
Subject key identifier:   F9:57:59:1B:51:E6:70:B6:00:62:D8:5D:9D:CF:53:0B:7A:AB:B0:AE
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       4791B186F7FADAF795535F629EA6B7CA545AB147
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141050.roa
Signing time:             Sat 02 May 2026 21:13:52 +0000
ROA not before:           Sat 02 May 2026 21:08:52 +0000
ROA not after:            Sat 01 May 2027 21:13:52 +0000
asID:                     141050
IP address blocks:        103.155.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:91:b1:86:f7:fa:da:f7:95:53:5f:62:9e:a6:b7:ca:54:5a:b1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 21:08:52 2026 GMT
            Not After : May  1 21:13:52 2027 GMT
        Subject: CN=F957591B51E670B60062D85D9DCF530B7AABB0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:5a:48:87:2d:df:eb:6b:96:f7:63:81:85:
                    1b:1d:84:55:f1:77:e8:af:e4:96:c1:f1:ae:12:5a:
                    63:30:9e:39:e7:56:7e:1d:8d:38:39:17:d7:dd:41:
                    87:03:7d:63:b1:3e:0f:f9:17:b8:c6:d4:58:50:fe:
                    6c:22:22:c1:82:61:24:5f:22:d7:b5:cf:9c:2b:24:
                    f7:2a:df:76:52:ef:72:22:cb:26:d6:da:e1:23:45:
                    81:dd:7a:45:aa:8a:07:cc:d9:78:86:c1:34:f7:95:
                    33:3c:91:40:34:8b:37:14:f1:94:44:f3:a6:cd:26:
                    28:49:08:5e:ec:ae:a0:65:46:99:ae:6b:c4:2d:c8:
                    96:50:b2:da:86:9f:57:2e:5c:33:d5:5b:51:0b:bd:
                    9e:dd:7e:8d:2c:fe:45:df:b2:47:c2:21:ef:23:68:
                    99:57:02:64:31:d1:51:5c:af:61:be:28:86:ab:3d:
                    8c:90:d5:37:fc:8e:17:1c:0e:0e:2a:65:66:e7:93:
                    7d:ea:e1:c7:d3:99:f8:21:c3:d6:dd:d4:20:cc:c3:
                    c1:d0:aa:d6:9a:50:d2:82:c9:c4:1b:ac:dc:62:15:
                    99:86:ac:77:0e:20:ad:2d:6d:00:df:0f:cf:07:ab:
                    bb:a4:c4:74:bc:4c:ed:6c:56:1d:1c:c8:59:c1:1f:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:57:59:1B:51:E6:70:B6:00:62:D8:5D:9D:CF:53:0B:7A:AB:B0:AE
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141050.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:76:b3:63:41:c6:11:89:d2:b2:5a:49:c7:50:d4:2e:c5:3b:
         24:7a:a7:fb:27:25:f8:13:41:be:1f:1b:92:92:42:13:32:f4:
         7d:43:c5:e5:2f:f3:22:21:78:c3:cc:29:4c:ce:1f:6b:6a:09:
         b4:66:4d:a9:14:ee:4d:e2:98:c6:7f:87:95:23:e7:0b:34:4d:
         06:2f:3a:9f:b3:f8:61:ea:f8:f2:36:a2:a6:99:96:72:db:32:
         2b:f5:ed:14:3c:70:26:bf:9c:0b:83:03:df:99:ce:61:bd:6d:
         98:17:9f:cd:f1:6e:c9:fd:26:b6:d3:31:e5:b0:c0:8f:b4:99:
         ad:0c:ca:4d:96:49:63:ea:23:8b:64:03:5c:90:69:47:13:3e:
         17:2d:ab:f0:fc:90:1f:9d:2d:8c:bc:5d:53:36:0b:21:f4:5a:
         e7:89:6d:82:c0:26:bc:97:37:04:10:f4:e2:54:83:f8:c7:22:
         16:09:5c:19:c7:3e:cc:93:2e:b7:b5:a1:d5:80:2a:c7:31:32:
         85:8b:fb:15:8e:06:85:75:3c:04:49:4f:39:8a:65:f4:93:50:
         11:7b:5f:ff:95:05:ef:30:4f:b7:7f:55:b5:5d:d9:cf:ee:83:
         d1:75:52:f3:49:e7:cb:d8:ce:5d:38:69:c7:b2:f7:09:20:6d:
         86:8c:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:10 2026 by rpki-client