Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141594.roa
File:                     AS141594.roa (raw, json)
Hash identifier:          Qe25k5zfeyPEjo6UYMdYRLY4JsSCUhP9GV7Eo8XHhC4=
Subject key identifier:   DB:38:09:FA:CC:6E:AD:35:30:3C:DA:66:24:40:7A:C5:89:5A:68:B3
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       166AB6DB5DC052D57057B8FF8BC6045229F8483D
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141594.roa
Signing time:             Sat 02 May 2026 09:19:53 +0000
ROA not before:           Sat 02 May 2026 09:14:53 +0000
ROA not after:            Sat 01 May 2027 09:19:53 +0000
asID:                     141594
IP address blocks:        103.160.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6a:b6:db:5d:c0:52:d5:70:57:b8:ff:8b:c6:04:52:29:f8:48:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:14:53 2026 GMT
            Not After : May  1 09:19:53 2027 GMT
        Subject: CN=DB3809FACC6EAD35303CDA6624407AC5895A68B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:4e:af:40:ae:c4:8f:77:51:ee:96:ba:03:
                    14:05:d7:54:ee:f6:35:4b:23:ec:14:74:3a:97:c0:
                    d8:28:72:c3:1f:d3:2f:1e:db:80:3c:ad:10:fd:c5:
                    18:f6:6f:37:fd:20:eb:a5:1e:59:49:de:45:0b:5d:
                    f0:01:72:48:c0:94:2a:79:fa:8b:d2:79:d1:fe:59:
                    6c:b9:63:49:c3:49:77:42:0b:a3:de:3a:7a:91:f6:
                    52:40:0d:2c:e7:0b:6b:d8:78:3b:49:29:3c:c6:49:
                    c1:6b:2b:d7:e9:6d:a6:bf:31:3e:a6:59:46:e3:58:
                    87:25:f2:02:99:dc:e3:a9:bd:f1:cd:f0:22:db:22:
                    64:e4:40:22:89:49:73:17:55:99:3a:7f:a8:bf:a6:
                    9b:11:a7:1c:91:f8:84:0a:64:0a:a9:6e:39:7d:cc:
                    09:02:80:15:b0:68:e5:d7:fc:26:0b:c4:ad:43:67:
                    fd:56:24:a4:55:46:57:8a:11:21:6d:ce:6d:9e:d1:
                    6e:ea:5b:21:ea:d7:f7:25:23:45:45:28:a5:7c:dc:
                    7b:32:1c:2f:60:e6:4a:5f:2f:0f:80:3a:8d:84:fa:
                    02:30:dd:8a:8d:24:ae:31:f6:cb:b1:ab:94:da:54:
                    a3:76:d1:f1:f6:54:2e:ec:6a:3a:86:af:c6:83:83:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:38:09:FA:CC:6E:AD:35:30:3C:DA:66:24:40:7A:C5:89:5A:68:B3
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141594.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:de:a5:45:1f:e9:79:dd:94:84:d8:18:41:42:db:45:28:75:
         c5:5d:67:c7:6b:72:7e:16:1d:0b:2a:61:1c:03:3a:c4:d1:ae:
         06:ad:27:4b:b3:2f:40:37:30:89:39:44:cd:78:61:ce:6c:05:
         e5:39:f0:48:d7:ba:43:37:bd:dd:19:c5:11:53:8b:40:e1:d9:
         1a:62:ec:61:b0:74:82:ba:7a:4e:93:03:2c:ee:80:25:a2:58:
         d0:ba:9e:4c:53:80:78:ad:6d:07:c9:98:d8:31:0d:2a:64:f9:
         62:85:84:f6:32:27:b8:77:65:2e:8d:60:de:e4:9f:3b:fb:9b:
         54:fc:92:68:32:9e:7a:f7:21:55:dc:84:5b:a3:a2:6a:64:1e:
         02:dd:d3:39:b7:2e:3d:4b:18:7e:70:c9:a1:0a:8f:f4:ff:e3:
         fd:5b:bc:10:d1:e3:53:58:19:17:88:f6:55:ab:a2:13:83:f7:
         6a:4d:10:e9:27:77:50:a6:de:df:97:98:a9:c7:f5:68:99:38:
         90:a0:54:47:e0:9d:29:78:a3:56:6b:75:f0:f7:d8:4b:df:3e:
         71:36:67:39:a8:4b:c4:91:c6:c6:23:21:2f:2b:79:c1:07:21:
         82:6e:b4:36:f6:d0:82:bc:0e:9a:f7:19:cf:21:a5:62:1b:ee:
         7f:0c:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:20 2026 by rpki-client