Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa
File:                     AS141350.roa (raw, json)
Hash identifier:          m7YFpkhEuNvXaA9aPvAlKpiVCp3CTC7FcgTVjSAyrgk=
Subject key identifier:   6C:66:DA:C1:AD:3B:A6:02:D9:46:0C:22:38:09:71:81:6C:8C:A4:8D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4297A501740B313158C5F2F8879E638644C0C6C9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa
Signing time:             Tue 03 Feb 2026 02:00:00 +0000
ROA not before:           Tue 03 Feb 2026 01:55:00 +0000
ROA not after:            Tue 02 Feb 2027 02:00:00 +0000
asID:                     141350
IP address blocks:        2001:df4:f1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:97:a5:01:74:0b:31:31:58:c5:f2:f8:87:9e:63:86:44:c0:c6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  3 01:55:00 2026 GMT
            Not After : Feb  2 02:00:00 2027 GMT
        Subject: CN=6C66DAC1AD3BA602D9460C22380971816C8CA48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:8f:ac:31:40:72:cc:ba:a1:c6:fa:62:2a:
                    8a:ab:72:05:cc:52:d5:2b:d2:f9:bf:8b:06:bc:31:
                    6f:83:89:6e:a6:45:62:93:98:38:18:f8:d7:e6:60:
                    ea:4a:6b:cb:6d:65:2f:eb:e9:9e:c3:5f:3c:26:34:
                    28:d8:a8:82:fc:98:9b:a3:b4:aa:af:d9:30:25:53:
                    ac:bd:c6:2f:4a:d1:35:96:9d:c3:e5:74:94:78:ab:
                    ec:ae:ce:35:09:38:16:37:a9:b5:39:1d:d3:a5:19:
                    6c:35:84:63:75:25:9f:96:4a:b8:36:e8:db:2e:bf:
                    a1:15:c9:4b:54:7b:99:1f:e4:e5:a1:81:a3:76:5f:
                    fc:d9:81:34:ce:97:ec:71:47:0f:b3:68:04:f7:4b:
                    31:bf:15:bb:46:16:09:82:f3:9a:a8:f7:39:c6:0d:
                    22:aa:8c:88:96:ce:59:25:d7:cd:27:dd:05:0c:d7:
                    84:0c:aa:68:aa:59:e1:f2:af:f7:a5:3e:ef:84:84:
                    1a:16:df:1d:96:13:b3:a6:03:2d:aa:65:ef:bd:d1:
                    ab:d2:6f:a3:8d:d3:e4:4d:75:f8:78:a7:6e:62:1e:
                    52:9a:f0:11:27:e5:ec:89:20:aa:18:38:79:ad:99:
                    f0:7b:f7:30:dc:dc:96:00:a6:a9:c2:ac:7a:3d:25:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:66:DA:C1:AD:3B:A6:02:D9:46:0C:22:38:09:71:81:6C:8C:A4:8D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:f1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:7c:e4:41:14:5e:3a:12:5c:65:68:be:ca:12:ca:2d:ce:a8:
         17:72:44:2b:84:6c:1d:cc:ba:c3:60:12:65:e3:5c:3e:25:e9:
         2e:08:94:22:31:87:9d:85:a0:51:e7:b2:db:04:d9:c2:c9:2b:
         e0:32:d3:eb:f3:a7:0e:ee:90:5d:f1:ad:c0:91:12:ad:46:da:
         73:f0:84:82:50:a9:ce:37:88:e0:0d:6d:74:66:fb:1e:c0:87:
         45:43:24:d3:06:a2:ca:31:da:58:c2:66:a9:6f:f5:a6:94:2a:
         12:d2:5f:d5:79:70:07:0b:87:23:c3:c0:b0:61:ec:70:38:50:
         e3:7e:3f:c2:f4:1c:eb:9f:bc:18:93:51:f9:ac:9b:57:e4:ba:
         e4:73:a2:55:3a:4c:69:8e:06:31:c1:f3:a6:68:4f:ab:02:da:
         4b:90:8e:41:f9:7e:3d:37:6b:66:75:10:31:71:8a:05:0b:d6:
         d7:fa:b0:5d:c4:09:11:96:a2:66:81:d3:c8:68:a8:6d:8d:b3:
         86:d0:7f:ff:83:82:c6:0b:5a:c5:29:fe:64:39:8c:49:3a:9d:
         e1:26:28:f9:d8:a7:55:70:d9:fc:34:77:be:8f:06:c3:a9:9a:
         c3:a1:ac:17:b4:00:22:f9:26:bb:2e:3f:27:89:90:11:37:b7:
         e2:83:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:00:24 2026 by rpki-client