Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141893.roa
File:                     AS141893.roa (raw, json)
Hash identifier:          +u2DHFDW+WWxSrAk+VS3+ixLlGJmkvcB9XjWYfBUjR4=
Subject key identifier:   54:79:EB:FC:65:C2:F6:65:7B:F6:28:B4:70:21:94:57:07:A4:CD:3C
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       3728FE0E30A6580AAE8B5111D75C1B981FB97F8E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141893.roa
Signing time:             Sat 02 May 2026 08:37:12 +0000
ROA not before:           Sat 02 May 2026 08:32:12 +0000
ROA not after:            Sat 01 May 2027 08:37:12 +0000
asID:                     141893
IP address blocks:        103.162.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:28:fe:0e:30:a6:58:0a:ae:8b:51:11:d7:5c:1b:98:1f:b9:7f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 08:32:12 2026 GMT
            Not After : May  1 08:37:12 2027 GMT
        Subject: CN=5479EBFC65C2F6657BF628B47021945707A4CD3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:14:33:12:32:32:32:f2:a7:f2:87:64:03:
                    be:fb:b4:05:7d:d9:d5:57:a8:0d:a3:49:51:f1:a9:
                    2c:5e:fd:7e:c5:45:2b:e9:04:5b:76:33:3e:17:0f:
                    31:ba:65:8d:75:fe:ed:7f:18:ea:65:3e:95:e9:04:
                    5c:a6:64:3d:91:06:91:fd:4b:a4:ab:a9:4d:0d:fe:
                    d3:6f:3d:41:b3:45:fc:8c:c5:ff:d5:d8:7e:db:0b:
                    18:8b:73:61:57:85:e8:11:b6:a6:72:75:57:5b:de:
                    06:f0:ea:83:7a:68:10:80:5c:c7:fe:1e:73:a9:a4:
                    4c:a8:48:c6:5d:f4:94:38:a1:8d:53:39:a9:54:b4:
                    f8:c6:f9:3d:45:4f:f4:14:96:e5:26:4a:4e:56:7f:
                    43:49:96:06:f3:2f:4d:66:07:ce:08:1c:c3:ea:68:
                    66:f4:2a:6d:66:7d:bc:77:23:72:44:a3:c7:54:36:
                    0b:e9:b8:68:97:43:20:e8:4f:a3:39:39:d7:a3:f0:
                    d2:cc:26:81:d5:1f:82:16:7a:0f:ad:17:91:5f:8f:
                    b7:2f:a2:2c:0e:83:dd:96:07:eb:d2:03:a8:ae:2b:
                    50:9f:83:91:a3:33:13:1d:ce:cf:cc:33:c2:35:35:
                    27:7a:23:20:5a:a4:53:35:43:10:87:19:3e:27:0a:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:79:EB:FC:65:C2:F6:65:7B:F6:28:B4:70:21:94:57:07:A4:CD:3C
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141893.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:59:01:90:11:6d:3d:97:13:4a:e5:69:87:70:d2:ff:94:59:
         14:2b:c6:ea:81:de:d9:80:a0:4b:7a:c1:69:a8:a3:8d:bd:74:
         e2:7d:b1:72:7d:f6:69:a6:95:73:23:78:13:86:cc:2f:09:d4:
         3d:96:87:2c:9f:f1:5a:2a:f8:e6:38:f4:bc:ff:d5:bb:4a:20:
         99:bf:91:53:cb:27:1c:43:a3:f7:21:6c:ac:1c:14:8e:9d:de:
         e1:96:35:44:f4:fe:8b:65:b7:ac:b5:52:b9:41:5f:41:0c:57:
         df:af:3e:e1:c8:f7:28:3a:e1:ac:30:21:d5:2f:5b:82:bd:ad:
         7c:0f:59:ab:de:dc:3b:56:bd:79:76:ac:2d:7d:38:a5:a8:71:
         ac:23:28:e5:b0:23:0a:c9:8d:10:14:3b:62:36:bb:d1:31:4a:
         05:29:eb:ee:4c:95:a0:be:73:41:a3:b4:58:c8:c7:1b:83:79:
         4b:41:bc:d8:ed:50:04:22:73:6a:a4:0c:df:8b:b5:18:de:a2:
         62:bb:d4:43:4c:61:ca:ab:57:2f:de:2a:0b:ed:19:de:4f:79:
         c7:4d:f0:1a:3e:b5:6b:d6:6c:a0:b3:64:1c:6a:b3:0f:fe:90:
         24:18:84:9e:61:98:e8:c5:bc:f9:e0:1b:8c:88:a6:ae:37:93:
         b3:27:f1:99
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUNyj+DjCmWAqui1ER11wbmB+5f44wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIxMloX
DTI3MDUwMTA4MzcxMlowMzExMC8GA1UEAxMoNTQ3OUVCRkM2NUMyRjY2NTdCRjYy
OEI0NzAyMTk0NTcwN0E0Q0QzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7TFDMSMjIy8qfyh2QDvvu0BX3Z1VeoDaNJUfGpLF79fsVFK+kEW3YzPhcP
MbpljXX+7X8Y6mU+lekEXKZkPZEGkf1LpKupTQ3+0289QbNF/IzF/9XYftsLGItz
YVeF6BG2pnJ1V1veBvDqg3poEIBcx/4ec6mkTKhIxl30lDihjVM5qVS0+Mb5PUVP
9BSW5SZKTlZ/Q0mWBvMvTWYHzggcw+poZvQqbWZ9vHcjckSjx1Q2C+m4aJdDIOhP
ozk516Pw0swmgdUfghZ6D60XkV+Pty+iLA6D3ZYH69IDqK4rUJ+DkaMzEx3Oz8wz
wjU1J3ojIFqkUzVDEIcZPicKHHkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRUeev8
ZcL2ZXv2KLRwIZRXB6TNPDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxODkzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBZ6JyMA0GCSqGSIb3DQEBCwUAA4IBAQAkWQGQEW09lxNK5WmHcNL/lFkU
K8bqgd7ZgKBLesFpqKONvXTifbFyffZpppVzI3gThswvCdQ9locsn/FaKvjmOPS8
/9W7SiCZv5FTyyccQ6P3IWysHBSOnd7hljVE9P6LZbestVK5QV9BDFffrz7hyPco
OuGsMCHVL1uCva18D1mr3tw7Vr15dqwtfTilqHGsIyjlsCMKyY0QFDtiNrvRMUoF
KevuTJWgvnNBo7RYyMcbg3lLQbzY7VAEInNqpAzfi7UY3qJiu9RDTGHKq1cv3ioL
7RneT3nHTfAaPrVr1mygs2QcarMP/pAkGISeYZjoxbz54BuMiKauN5OzJ/GZ
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:05 2026 by rpki-client