Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141135.roa
File:                     AS141135.roa (raw, json)
Hash identifier:          lw80v5wqW2KdattFq/q86U8NBINuX6ZGSN0DT8CMtpY=
Subject key identifier:   5D:C2:81:E4:5B:DA:9B:23:60:54:F3:06:0C:9C:9F:6E:BC:A2:8F:D2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       184BCAB3D60422EE493863727336ABB91DA2475F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141135.roa
Signing time:             Mon 13 Apr 2026 03:03:25 +0000
ROA not before:           Mon 13 Apr 2026 02:58:25 +0000
ROA not after:            Mon 12 Apr 2027 03:03:25 +0000
asID:                     141135
IP address blocks:        103.158.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 00:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4b:ca:b3:d6:04:22:ee:49:38:63:72:73:36:ab:b9:1d:a2:47:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 13 02:58:25 2026 GMT
            Not After : Apr 12 03:03:25 2027 GMT
        Subject: CN=5DC281E45BDA9B236054F3060C9C9F6EBCA28FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:9c:02:3b:36:83:17:0b:f9:1d:8c:5c:11:
                    eb:6d:fd:d6:35:da:e3:8c:03:a8:53:8e:bc:e0:a2:
                    af:ac:5a:e9:08:28:e8:11:5e:f9:43:38:54:16:aa:
                    8b:b7:19:dd:fe:33:3e:b2:d8:84:62:58:f3:22:79:
                    b3:da:44:02:b4:e8:5d:cb:9a:f3:83:9e:9a:49:e6:
                    21:d4:26:e4:3b:cd:0a:bd:d3:14:ca:8c:b1:24:92:
                    f4:cf:1e:cd:89:6e:63:a8:06:c8:7b:ea:60:2e:7a:
                    56:ec:c6:51:c6:3e:c4:64:e3:31:cc:c3:7d:99:d5:
                    39:eb:20:49:c1:20:c9:30:81:26:6e:67:34:ea:dd:
                    8e:5a:85:d8:e3:09:cd:8d:c2:f2:0a:77:13:69:f8:
                    97:75:d8:de:ef:55:52:60:cd:ff:d0:53:d1:72:12:
                    89:c2:3e:b4:37:3a:d7:4a:37:b7:3b:17:69:de:f5:
                    01:35:75:c2:4f:06:6b:be:d0:db:87:5e:26:17:2c:
                    a2:a2:98:7b:6d:62:43:8f:44:40:86:2e:eb:3b:ab:
                    ae:b0:2c:18:42:25:64:97:53:f9:94:1f:18:f0:22:
                    ef:a8:d2:ef:70:9a:bb:96:00:1d:7f:74:3f:a7:05:
                    7e:da:aa:61:9a:57:2d:e9:9b:bf:23:1a:8c:95:75:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C2:81:E4:5B:DA:9B:23:60:54:F3:06:0C:9C:9F:6E:BC:A2:8F:D2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:85:ba:fd:d2:9d:90:80:7d:5d:fc:7c:b5:54:85:b2:4c:
         14:74:90:21:47:4f:bb:76:88:f7:96:00:4c:36:73:59:11:33:
         c7:22:12:88:d5:89:37:37:e7:87:3e:6a:f0:a5:16:7f:65:e7:
         0d:03:34:15:f4:a1:e5:1e:9a:ab:99:83:62:15:c8:8e:49:39:
         53:8a:b2:b0:f0:28:d3:81:bf:db:5a:64:ab:ae:dd:08:39:39:
         29:5c:0d:89:b3:34:d8:88:61:81:31:22:15:be:07:81:99:e4:
         7c:b9:15:80:9b:35:18:20:1d:46:7d:f5:0a:05:db:1b:10:3d:
         81:8c:a5:65:15:3d:38:8e:ca:31:9f:1a:a0:b1:8f:c5:b7:cc:
         4c:31:53:7f:13:83:b5:9a:f3:81:6b:b4:cf:8e:21:00:f0:24:
         14:02:d1:09:cf:02:04:d8:0d:29:55:95:c6:1d:21:db:dc:1d:
         3e:45:6d:e0:c5:a3:bc:ee:66:c6:17:f2:98:81:43:53:3a:7a:
         d0:c9:11:24:08:c7:0b:e2:5a:b4:54:23:8a:9f:6e:dc:f9:28:
         bd:52:ef:e7:d0:c8:f0:61:68:71:00:9f:55:2e:dd:ae:39:cd:
         b0:5a:a3:8c:14:db:99:65:3f:d6:9f:5f:d7:01:c8:b4:52:48:
         4d:a5:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:47 2026 by rpki-client