Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139448.roa
File:                     AS139448.roa (raw, json)
Hash identifier:          xviIl8kJ+jZR/1HLQGN7B7cnj6Cv13cT87jDe1En13s=
Subject key identifier:   BE:62:59:74:48:6B:D6:71:E3:47:06:C3:93:D0:10:42:33:21:16:BD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7C0005289B9153DC700008DDBDE6E683F765AE18
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139448.roa
Signing time:             Thu 09 Apr 2026 04:13:38 +0000
ROA not before:           Thu 09 Apr 2026 04:08:38 +0000
ROA not after:            Thu 08 Apr 2027 04:13:38 +0000
asID:                     139448
IP address blocks:        103.145.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 00:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:00:05:28:9b:91:53:dc:70:00:08:dd:bd:e6:e6:83:f7:65:ae:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr  9 04:08:38 2026 GMT
            Not After : Apr  8 04:13:38 2027 GMT
        Subject: CN=BE625974486BD671E34706C393D01042332116BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:3b:5f:b0:dd:b1:c0:78:03:d5:03:63:25:
                    88:b0:be:32:10:37:d6:1a:e1:fe:9d:aa:61:bc:31:
                    83:66:da:8c:d5:89:1e:99:7e:d2:87:5d:47:0e:f9:
                    6f:80:f2:80:88:6f:f8:9e:08:eb:92:87:76:82:88:
                    ab:d1:54:ad:b9:64:72:70:d4:05:59:39:30:50:13:
                    dd:31:74:39:a9:5e:9e:5b:e6:ee:48:14:2b:15:a1:
                    c7:3a:31:d8:f3:a2:c3:94:76:78:22:5f:d5:91:61:
                    58:fb:ee:eb:c1:01:1b:c8:2e:aa:d7:c1:b4:7c:6a:
                    46:63:1a:73:f3:d7:88:69:d3:57:76:61:bc:e6:ce:
                    79:b3:94:75:d8:be:2d:26:a1:ff:19:99:59:59:dc:
                    04:d8:26:9d:51:bc:63:b3:65:ea:50:5a:d2:a7:ff:
                    55:82:b8:75:b4:87:3d:3d:4d:10:1c:99:85:91:08:
                    26:e7:8b:4e:dd:84:48:77:7a:d4:1b:93:fe:3a:6d:
                    c5:0b:33:08:14:2f:7b:ab:a8:7c:ee:8d:d9:7f:be:
                    4b:78:a1:e9:9d:30:2e:50:e3:7a:f3:2e:0e:48:0f:
                    2e:94:3f:24:98:fc:1c:31:54:6e:70:13:54:e7:8f:
                    17:54:09:86:16:54:ae:28:24:46:f5:bd:e0:01:48:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:62:59:74:48:6B:D6:71:E3:47:06:C3:93:D0:10:42:33:21:16:BD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139448.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:0b:57:a2:b6:dc:d4:f8:d5:62:e5:50:da:48:15:12:64:
         10:d1:b7:10:f2:7f:f3:79:c3:1c:f9:f4:e1:4d:68:b8:ed:e1:
         a7:ce:d5:99:c6:80:e1:89:c4:ef:45:05:eb:cd:25:e7:26:56:
         3d:3e:3b:7e:66:89:2f:07:f1:83:fc:a5:47:70:63:e0:2f:45:
         07:77:f3:7b:81:dc:32:3f:02:ef:5d:86:50:92:d4:b5:91:e5:
         e3:da:bd:ab:0b:3b:69:dd:8c:65:8f:04:95:37:2e:09:21:4e:
         bd:95:e9:e8:ca:4f:db:d5:b0:af:59:1d:e6:fa:53:31:58:69:
         74:6f:82:53:74:f9:86:5a:17:92:51:e5:07:c9:cb:45:bb:94:
         b9:68:da:fa:75:9a:96:b6:d2:e1:1c:a8:66:c9:79:2a:26:66:
         19:91:3c:3f:71:a2:25:51:8c:8f:19:25:13:b7:78:b8:fe:36:
         50:52:6c:0d:3c:13:ea:ba:6b:84:54:fa:87:05:9d:38:a2:ac:
         3f:60:05:40:63:d7:0b:90:94:23:80:e4:e9:64:8f:f4:77:91:
         ff:c9:02:60:c6:e3:d1:52:f6:fe:40:6e:7e:fb:0f:f2:39:1a:
         b0:db:8a:aa:5f:95:7d:86:99:ce:0a:b4:39:72:2b:78:c2:40:
         ab:40:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:47 2026 by rpki-client