Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142316.roa
File:                     AS142316.roa (raw, json)
Hash identifier:          7uzgWKsgm53gQsocyHM7Hvyclv62iU1Q/V4i7XP9QMg=
Subject key identifier:   37:65:B1:36:FE:23:69:8F:2E:CC:2B:FC:98:2F:8C:90:91:82:38:B6
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       76DCC14051EF199A2523A7D4B931693554F69358
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142316.roa
Signing time:             Sat 02 May 2026 09:20:16 +0000
ROA not before:           Sat 02 May 2026 09:15:16 +0000
ROA not after:            Sat 01 May 2027 09:20:16 +0000
asID:                     142316
IP address blocks:        103.168.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:dc:c1:40:51:ef:19:9a:25:23:a7:d4:b9:31:69:35:54:f6:93:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 09:15:16 2026 GMT
            Not After : May  1 09:20:16 2027 GMT
        Subject: CN=3765B136FE23698F2ECC2BFC982F8C90918238B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:3b:55:a0:f9:6b:8b:e9:d3:e2:42:a7:4b:
                    4b:eb:d2:2c:bf:c1:10:7c:f1:cb:56:86:dc:87:c3:
                    60:1d:ed:96:69:03:5b:80:8f:24:6f:81:30:70:2d:
                    87:6f:78:bb:fc:4d:89:39:8d:96:6a:40:ee:46:e0:
                    6a:b4:e7:88:23:6c:f8:0f:eb:5c:69:67:47:4b:09:
                    e3:cc:c7:a7:79:42:22:c4:fe:06:ff:31:42:bf:90:
                    ef:e2:0e:3b:c7:22:f3:78:0c:b2:e3:6a:9f:9f:ee:
                    56:bf:a1:16:f5:74:c1:89:36:b6:44:0b:5a:20:99:
                    c7:82:04:da:01:cd:3a:63:0c:9f:b6:00:df:90:a2:
                    2e:b7:b9:bd:80:d6:e9:68:63:72:1c:57:50:b2:f6:
                    1e:b8:58:a5:4b:8e:dc:aa:68:8d:8b:fa:0c:6a:19:
                    04:22:73:d0:b0:97:da:c6:57:40:c1:cb:a7:ed:51:
                    e3:dc:a6:5c:b2:55:3e:5a:8e:27:cc:d5:6e:87:f7:
                    d3:ce:e3:b5:35:b2:34:5d:58:2c:9a:e5:81:6b:48:
                    35:01:c2:bd:ce:e9:7a:1b:88:9e:d1:1a:d6:dc:a2:
                    60:1e:72:eb:75:c1:e4:16:f1:da:07:32:2b:b1:f8:
                    0d:80:17:ec:ed:ae:03:2e:14:e8:64:7b:3d:18:d2:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:B1:36:FE:23:69:8F:2E:CC:2B:FC:98:2F:8C:90:91:82:38:B6
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142316.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:16:b2:5f:09:7a:01:16:4f:7a:38:b8:58:34:bf:d5:fa:ea:
         9b:f1:7f:b5:a7:e8:21:41:96:10:8b:24:6f:d6:63:4a:56:d9:
         fa:17:83:c6:f0:b2:4a:9e:b7:4c:f0:41:54:dd:bc:d3:69:2b:
         0c:b4:fa:18:07:62:99:99:ae:89:36:67:ad:55:63:2b:56:64:
         d8:ee:2c:84:8c:1d:73:c8:0d:dc:a1:df:71:70:53:80:64:ed:
         2f:34:b7:a1:99:bb:ef:12:14:ec:a1:aa:7c:bb:54:0a:8a:77:
         8f:8b:75:48:65:98:89:09:8e:f5:3a:cb:69:d0:d7:e2:2f:b0:
         84:db:77:38:48:c8:82:fe:de:fb:77:11:a1:09:49:f1:05:c4:
         41:63:fb:bd:4a:82:82:7b:f1:ab:48:04:59:26:10:4c:31:48:
         3b:19:7e:b7:b6:da:41:db:e7:b9:5a:5d:b9:62:bf:fc:59:6f:
         9f:49:e3:0c:e6:18:80:b5:3c:2b:2b:36:c2:de:7d:ce:2c:72:
         d7:57:b0:ae:23:a8:c2:16:a9:bf:3f:c1:bc:af:33:02:2e:f7:
         b4:50:2a:25:6c:6a:4c:e2:e6:58:87:05:1f:73:c9:cb:e7:61:
         05:3a:fa:43:9d:37:ec:26:2d:a7:8d:18:4c:53:19:f2:71:17:
         b9:73:3c:7e
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUdtzBQFHvGZolI6fUuTFpNVT2k1gwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUxNloX
DTI3MDUwMTA5MjAxNlowMzExMC8GA1UEAxMoMzc2NUIxMzZGRTIzNjk4RjJFQ0My
QkZDOTgyRjhDOTA5MTgyMzhCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALVSO1Wg+WuL6dPiQqdLS+vSLL/BEHzxy1aG3IfDYB3tlmkDW4CPJG+BMHAt
h294u/xNiTmNlmpA7kbgarTniCNs+A/rXGlnR0sJ48zHp3lCIsT+Bv8xQr+Q7+IO
O8ci83gMsuNqn5/uVr+hFvV0wYk2tkQLWiCZx4IE2gHNOmMMn7YA35CiLre5vYDW
6WhjchxXULL2HrhYpUuO3KpojYv6DGoZBCJz0LCX2sZXQMHLp+1R49ymXLJVPlqO
J8zVbof3087jtTWyNF1YLJrlgWtINQHCvc7pehuIntEa1tyiYB5y63XB5Bbx2gcy
K7H4DYAX7O2uAy4U6GR7PRjS5isCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ3ZbE2
/iNpjy7MK/yYL4yQkYI4tjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzE2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ6ijMA0GCSqGSIb3DQEBCwUAA4IBAQCVFrJfCXoBFk96OLhYNL/V+uqb
8X+1p+ghQZYQiyRv1mNKVtn6F4PG8LJKnrdM8EFU3bzTaSsMtPoYB2KZma6JNmet
VWMrVmTY7iyEjB1zyA3cod9xcFOAZO0vNLehmbvvEhTsoap8u1QKinePi3VIZZiJ
CY71Ostp0NfiL7CE23c4SMiC/t77dxGhCUnxBcRBY/u9SoKCe/GrSARZJhBMMUg7
GX63ttpB2+e5Wl25Yr/8WW+fSeMM5hiAtTwrKzbC3n3OLHLXV7CuI6jCFqm/P8G8
rzMCLve0UColbGpM4uZYhwUfc8nL52EFOvpDnTfsJi2njRhMUxnycRe5czx+
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:04 2026 by rpki-client