Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141939.roa
File:                     AS141939.roa (raw, json)
Hash identifier:          4+Lp8KsruEK1CBlZ6f23YEaYo3Ta+Zr7y7iHy3Ls6kI=
Subject key identifier:   0B:28:3F:86:71:37:AA:5C:9C:20:11:43:C3:E5:CD:DB:9F:95:FF:80
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       7800926936CC769D6B92F0FBECA02DAF74F4A8C1
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141939.roa
Signing time:             Sat 02 May 2026 09:19:47 +0000
ROA not before:           Sat 02 May 2026 09:14:47 +0000
ROA not after:            Sat 01 May 2027 09:19:47 +0000
asID:                     141939
IP address blocks:        103.164.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:00:92:69:36:cc:76:9d:6b:92:f0:fb:ec:a0:2d:af:74:f4:a8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:14:47 2026 GMT
            Not After : May  1 09:19:47 2027 GMT
        Subject: CN=0B283F867137AA5C9C201143C3E5CDDB9F95FF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:ce:40:ea:f0:1a:b0:7c:74:f5:b4:6a:73:
                    0b:90:58:48:e6:d2:31:ce:03:fd:10:8e:41:41:76:
                    c0:cf:43:67:4c:90:fa:01:43:96:20:32:7f:5a:73:
                    90:18:10:bc:b7:30:2f:67:22:8b:1d:bf:c8:8c:9f:
                    4d:32:36:aa:0d:e5:7f:a8:bc:8f:24:a6:50:59:64:
                    71:49:c3:2c:84:0d:53:65:fd:ad:1e:bd:b3:aa:32:
                    6b:12:2a:af:ae:a3:1c:61:be:b6:87:1e:43:e6:b7:
                    85:f0:ad:3c:14:e6:3d:11:a2:3f:b9:73:36:ff:9c:
                    f6:3b:1f:0c:37:b6:43:12:dd:3c:c9:62:2b:37:a3:
                    06:50:5e:2b:7c:a8:dc:7c:1e:e7:4a:45:9f:85:fc:
                    94:08:e1:67:6b:d4:4f:58:bb:82:22:7f:fc:76:dd:
                    97:ca:a6:e0:9a:4c:d2:d6:b2:65:9f:12:6a:95:c9:
                    8b:6c:eb:37:a2:05:c6:ff:09:48:2a:9b:6f:9d:c7:
                    14:70:73:b9:09:2f:f0:ba:ea:84:3f:59:16:ff:b4:
                    36:22:67:c1:b7:75:68:b0:df:84:9a:29:54:74:bc:
                    df:78:8c:cf:84:9e:47:c9:08:44:af:3d:49:b9:9d:
                    38:b3:91:c6:75:41:61:bc:9c:09:15:9f:f6:d1:e5:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:28:3F:86:71:37:AA:5C:9C:20:11:43:C3:E5:CD:DB:9F:95:FF:80
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:41:48:75:46:5b:2a:ff:74:2f:66:29:9f:55:54:2c:d1:
         51:30:ea:f0:32:05:63:6f:93:ae:dd:cd:b6:26:05:f0:3e:65:
         b8:27:d1:17:1b:a6:b7:b3:29:64:ec:ad:27:f7:25:62:6f:c8:
         86:9e:2d:fa:3f:83:e0:25:fd:da:4b:2a:09:3c:2c:cd:8b:c3:
         6e:19:04:4b:6c:32:44:67:46:e1:ec:3e:cf:25:ba:44:6c:3b:
         8c:92:fb:db:b8:87:b6:35:95:52:40:17:08:ab:e2:8a:be:c0:
         76:f6:fa:85:75:3f:77:e8:a3:44:23:92:8b:40:73:27:1b:c7:
         10:30:ca:a5:4f:1e:e2:9e:2b:70:e1:da:26:29:75:13:28:f2:
         62:6e:d4:3d:a5:f3:50:e7:cf:98:64:a6:6f:16:dc:ab:6b:18:
         95:32:f6:3b:59:c9:2a:96:d5:5a:f9:ef:6f:c5:b8:e5:2b:c9:
         ab:6b:e3:ec:86:b6:e5:ff:ea:be:29:83:a2:31:85:99:3e:17:
         3d:e5:b2:4f:a8:ea:c3:76:c0:5f:28:ff:0f:14:87:f5:1c:c9:
         ff:51:3f:76:cf:b6:50:42:ad:84:9f:1c:3e:89:94:d9:14:25:
         34:31:4b:9e:7e:0d:03:84:94:d1:e5:ad:cc:f2:5d:bc:a2:30:
         51:40:df:57
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUeACSaTbMdp1rkvD77KAtr3T0qMEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ0N1oX
DTI3MDUwMTA5MTk0N1owMzExMC8GA1UEAxMoMEIyODNGODY3MTM3QUE1QzlDMjAx
MTQzQzNFNUNEREI5Rjk1RkY4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCizkDq8BqwfHT1tGpzC5BYSObSMc4D/RCOQUF2wM9DZ0yQ+gFDliAyf1pz
kBgQvLcwL2ciix2/yIyfTTI2qg3lf6i8jySmUFlkcUnDLIQNU2X9rR69s6oyaxIq
r66jHGG+toceQ+a3hfCtPBTmPRGiP7lzNv+c9jsfDDe2QxLdPMliKzejBlBeK3yo
3Hwe50pFn4X8lAjhZ2vUT1i7giJ//Hbdl8qm4JpM0tayZZ8SapXJi2zrN6IFxv8J
SCqbb53HFHBzuQkv8LrqhD9ZFv+0NiJnwbd1aLDfhJopVHS833iMz4SeR8kIRK89
SbmdOLORxnVBYbycCRWf9tHlH/8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQLKD+G
cTeqXJwgEUPD5c3bn5X/gDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBZ6TAMA0GCSqGSIb3DQEBCwUAA4IBAQB3rEFIdUZbKv90L2Ypn1VULNFR
MOrwMgVjb5Ou3c22JgXwPmW4J9EXG6a3sylk7K0n9yVib8iGni36P4PgJf3aSyoJ
PCzNi8NuGQRLbDJEZ0bh7D7PJbpEbDuMkvvbuIe2NZVSQBcIq+KKvsB29vqFdT93
6KNEI5KLQHMnG8cQMMqlTx7initw4domKXUTKPJibtQ9pfNQ58+YZKZvFtyraxiV
MvY7WckqltVa+e9vxbjlK8mra+Pshrbl/+q+KYOiMYWZPhc95bJPqOrDdsBfKP8P
FIf1HMn/UT92z7ZQQq2Enxw+iZTZFCU0MUuefg0DhJTR5a3M8l28ojBRQN9X
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:28 2026 by rpki-client