Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141922.roa
File:                     AS141922.roa (raw, json)
Hash identifier:          9rdaFoIvvgd1l4Mp9FkJc+hI1SjEePamfjxiCuw0Xsk=
Subject key identifier:   28:47:80:4A:C5:95:2B:83:A0:13:6B:B9:57:E3:E2:E9:05:4B:7F:02
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       5FFBDE67BC17BCA07078B5BB98C8C7FD33BC4EE5
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141922.roa
Signing time:             Sat 02 May 2026 09:25:32 +0000
ROA not before:           Sat 02 May 2026 09:20:32 +0000
ROA not after:            Sat 01 May 2027 09:25:32 +0000
asID:                     141922
IP address blocks:        180.94.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fb:de:67:bc:17:bc:a0:70:78:b5:bb:98:c8:c7:fd:33:bc:4e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:20:32 2026 GMT
            Not After : May  1 09:25:32 2027 GMT
        Subject: CN=2847804AC5952B83A0136BB957E3E2E9054B7F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:74:41:a8:7a:6b:c2:4e:22:d9:d2:5b:39:
                    57:51:af:42:67:12:66:cf:0d:27:b3:5d:11:1b:3f:
                    0b:dd:45:ba:da:d4:9a:87:5c:39:6a:76:8c:8e:a5:
                    a7:41:34:f7:15:b4:16:5e:ad:b3:a2:cf:ff:0a:3d:
                    8a:18:dc:86:9e:15:21:13:8a:40:8b:c6:6a:29:f9:
                    aa:3d:69:59:d3:20:54:f2:c7:e8:94:0a:05:ac:07:
                    1b:83:e6:18:5f:52:35:ad:03:53:01:47:b4:d1:d0:
                    32:28:1c:e7:04:56:22:55:97:84:fe:61:4b:ba:43:
                    ba:8b:db:a9:cf:79:ec:7e:a8:3c:9e:f4:27:98:ca:
                    78:e9:f0:5f:da:2d:1b:8f:83:75:ba:28:1e:65:86:
                    78:43:60:86:80:c6:24:0e:66:9b:49:7b:b6:85:b2:
                    2c:30:e9:c7:b1:4f:2c:6e:e3:6a:b1:ca:fe:02:97:
                    f0:e4:1b:de:c8:cf:2b:df:71:74:c0:2f:d7:b2:ba:
                    32:c2:ca:52:1a:16:cf:4c:3a:63:ba:0a:1e:d2:1c:
                    48:04:cb:dc:08:d2:91:93:e6:3b:78:3d:5c:53:53:
                    d4:29:05:dc:04:38:85:ae:de:ed:dd:53:05:55:b6:
                    42:80:76:b0:9d:bd:24:23:41:d6:3c:d3:65:82:18:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:80:4A:C5:95:2B:83:A0:13:6B:B9:57:E3:E2:E9:05:4B:7F:02
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141922.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:d0:ed:1d:dc:2b:49:41:63:00:d9:63:c9:ca:01:cf:ae:
         70:d2:45:37:71:07:c2:1d:01:9b:7b:69:e8:27:4f:43:7e:45:
         ad:35:40:99:8c:33:72:b1:3c:2d:12:2e:ce:65:63:51:07:38:
         9b:23:2a:20:5d:ae:fa:dc:e4:cd:55:28:08:de:01:46:5f:12:
         cd:7a:2f:72:93:12:d9:88:b4:2a:3b:3b:d9:cc:8d:6f:25:6d:
         f3:3e:4a:61:25:66:d8:ba:ab:1f:c8:11:c4:bc:52:1e:01:72:
         87:f8:37:bb:9b:29:6b:27:6c:84:53:1a:e1:df:47:e9:7d:13:
         9a:64:1b:96:ec:c9:b4:56:ee:11:59:f2:e8:c0:14:a7:e2:62:
         89:5a:b6:9b:8d:51:75:1f:90:f9:aa:19:21:3b:d0:e4:49:96:
         98:ac:de:8c:c5:73:7c:27:64:c8:2a:f5:0a:65:73:ae:a8:07:
         1d:18:04:f1:2c:24:53:ca:3c:31:4e:9e:a6:e5:62:1f:4e:09:
         30:db:72:30:fe:a1:75:be:cb:e8:67:5f:07:f1:ff:c1:7d:9b:
         a1:17:42:14:80:d0:c4:1f:41:0a:8c:5b:09:da:94:2e:41:0d:
         59:1c:83:01:4e:7c:52:41:40:6e:e4:9a:07:ad:d0:fe:07:aa:
         1b:50:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:22 2026 by rpki-client