Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa
File:                     AS141600.roa (raw, json)
Hash identifier:          vvMfVtU0O+MrFVhm9KWSlGa+13Iv52zy+Eir7QwVziw=
Subject key identifier:   46:45:ED:F2:E7:AE:17:3F:34:D5:F3:24:5C:65:D7:EA:3C:BC:11:16
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       262681C6687A2F6705488A84F1ECF0BEDE904884
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa
Signing time:             Thu 19 Feb 2026 07:00:00 +0000
ROA not before:           Thu 19 Feb 2026 06:55:00 +0000
ROA not after:            Thu 18 Feb 2027 07:00:00 +0000
asID:                     141600
IP address blocks:        2001:df3:af40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:26:81:c6:68:7a:2f:67:05:48:8a:84:f1:ec:f0:be:de:90:48:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 19 06:55:00 2026 GMT
            Not After : Feb 18 07:00:00 2027 GMT
        Subject: CN=4645EDF2E7AE173F34D5F3245C65D7EA3CBC1116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:d4:19:df:33:05:f9:98:92:40:50:c9:76:
                    97:0d:6e:1f:33:7b:f9:15:9f:c7:78:12:e8:d5:ec:
                    52:a4:0c:4f:b2:7c:db:13:18:d4:ca:a3:94:e4:f9:
                    32:d3:50:4c:e3:58:0f:76:ac:60:dd:18:89:53:0e:
                    c5:2f:a6:51:d0:7c:95:7b:52:c6:45:58:ba:5a:15:
                    e5:0e:96:5f:3a:57:04:6b:bf:ae:e6:f3:a1:a2:0a:
                    c0:f0:93:fe:8d:e3:2b:d2:e1:b7:f4:c5:c0:d8:75:
                    1b:de:57:58:ee:66:8a:92:a4:16:53:12:cb:96:11:
                    4d:8e:59:b6:93:03:63:0b:16:43:90:19:49:6f:f9:
                    56:ce:aa:0a:60:50:f0:36:96:78:88:25:52:42:38:
                    0c:cd:e8:9a:bf:99:06:cc:24:37:a7:3e:b6:7a:4e:
                    87:bb:c9:05:1a:38:7e:77:1b:61:76:a8:48:34:5f:
                    c2:54:3a:e6:6a:6a:c7:d7:53:ef:08:da:4c:c9:6f:
                    87:0b:f6:9f:35:5c:5b:42:63:41:05:75:be:ac:15:
                    2f:db:54:28:86:68:c7:ce:58:6d:88:38:6f:58:1b:
                    d2:a4:48:00:ba:66:65:36:67:3c:bf:17:d4:a5:0d:
                    01:d3:28:43:87:82:dc:e3:49:a3:44:91:89:ee:06:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:45:ED:F2:E7:AE:17:3F:34:D5:F3:24:5C:65:D7:EA:3C:BC:11:16
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:af40::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:87:dd:ed:c4:c7:d0:64:1e:5a:d7:64:47:4f:3b:17:a3:6d:
         32:bd:e3:e9:2e:66:bf:b4:11:2b:0e:59:c4:fd:0e:42:32:bb:
         75:72:a6:15:f5:f9:77:cb:8a:7a:bc:bf:6b:96:ab:ed:46:90:
         f6:5d:31:a9:ea:fd:df:60:dd:fd:dc:9f:b8:7a:f4:2f:a9:21:
         bd:b2:0a:c1:29:f8:99:49:0a:2c:ff:19:21:f2:8c:74:d3:d0:
         e3:c0:a6:6c:18:76:64:8b:68:fb:45:6a:75:01:ca:aa:37:f8:
         d3:54:77:0e:70:70:f3:10:b8:c2:00:6b:99:2d:d9:c6:a7:6f:
         e2:38:68:c4:08:4e:99:f1:3d:9b:13:0a:9e:c4:2c:55:45:4b:
         3f:55:cb:de:9c:82:3d:d5:7e:67:be:33:8f:e8:c8:4c:b6:4b:
         bb:26:78:4e:55:48:52:bf:d9:cd:32:58:b6:d1:7d:58:21:77:
         6b:d4:18:04:8a:2f:6e:4e:c7:3c:ce:aa:11:b2:fa:7a:f8:94:
         66:2e:9e:2a:04:b4:3b:52:a3:ca:23:00:aa:e7:0a:e7:e5:49:
         96:f3:f1:14:1f:21:b5:17:d3:4d:be:84:ed:f2:b3:83:08:5a:
         31:23:32:06:77:a3:c6:24:9b:66:98:30:d5:ce:95:5c:05:f2:
         a4:fc:35:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:39:49 2026 by rpki-client