Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141618.roa
File:                     AS141618.roa (raw, json)
Hash identifier:          N+HnOS1yGMiSgbEdQuvpxWdFIz35BNWMHiD6/U+38zI=
Subject key identifier:   65:22:30:DF:DF:94:47:AD:11:0E:E1:64:D0:48:18:63:9F:A4:6A:99
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       560E0C800C6A2BB7A4BF30B117911BB60CAC35C7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141618.roa
Signing time:             Wed 11 Feb 2026 08:00:00 +0000
ROA not before:           Wed 11 Feb 2026 07:55:00 +0000
ROA not after:            Wed 10 Feb 2027 08:00:00 +0000
asID:                     141618
IP address blocks:        2400:c260::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0e:0c:80:0c:6a:2b:b7:a4:bf:30:b1:17:91:1b:b6:0c:ac:35:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 11 07:55:00 2026 GMT
            Not After : Feb 10 08:00:00 2027 GMT
        Subject: CN=652230DFDF9447AD110EE164D04818639FA46A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:bf:fb:e9:98:e9:1f:77:25:31:8a:9e:9b:
                    f0:d2:8f:b4:79:23:da:41:6d:f1:ef:64:23:38:3e:
                    82:63:88:95:ab:e4:21:6b:18:98:4d:7a:15:e7:24:
                    ed:5c:04:b4:bd:a7:29:bd:7f:39:86:63:44:25:23:
                    2a:ee:33:d7:07:c2:d8:f0:5a:d5:8d:ed:a9:91:25:
                    97:24:b1:3d:bb:9f:39:15:ee:1a:f8:e0:4b:ca:61:
                    f6:16:f2:81:85:37:83:81:34:3d:9e:c7:53:9f:ea:
                    d7:25:b4:52:4a:09:38:7a:b5:3d:f6:d7:a4:d8:59:
                    54:de:03:08:c6:2c:0d:7f:84:d9:7a:4f:84:e9:46:
                    f3:64:aa:a8:4f:09:28:9f:74:ff:6d:c4:08:46:5b:
                    9f:3c:fa:a7:da:6f:c8:36:b1:59:44:56:8b:2d:25:
                    d2:58:43:75:dd:95:17:ec:44:bc:fc:b5:25:a9:13:
                    cb:26:02:9c:23:7c:a9:e5:e0:92:b7:9b:16:9c:c1:
                    e9:93:e1:2c:d2:a3:45:6a:b7:2b:ef:72:f2:34:ce:
                    af:36:00:b4:fb:50:6a:e5:2e:3d:6d:89:d1:88:fd:
                    db:80:45:4c:fc:c7:05:cf:e1:d0:14:bd:a4:7f:de:
                    e4:0a:6c:b6:70:5d:2d:e8:d7:5e:f6:e9:a2:7c:d0:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:30:DF:DF:94:47:AD:11:0E:E1:64:D0:48:18:63:9F:A4:6A:99
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c260::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:f8:b0:7d:39:65:a8:b0:93:69:67:2e:ef:7a:8f:c1:e2:20:
         c4:39:28:e5:cd:56:af:d0:f6:ce:42:08:14:75:ae:86:bd:c5:
         d9:89:6d:51:18:a2:0a:50:ca:b5:3c:4c:5c:9b:ea:5e:ba:0c:
         4c:73:f6:5f:b2:2a:43:7e:60:5b:a7:1d:03:41:91:cd:9a:40:
         14:64:b8:91:2b:0c:71:f7:8d:35:db:2c:3a:f3:fc:10:95:0f:
         23:11:15:85:63:ca:28:d8:bf:2d:82:74:0e:59:a8:c3:35:89:
         eb:be:14:87:33:ce:a9:3f:e7:8c:f8:f3:3e:5a:ab:36:5f:9b:
         31:3b:e5:bd:56:0d:4b:25:05:54:71:5f:3b:b1:2e:58:2a:46:
         32:fd:8b:5f:a3:9e:5b:9c:d4:4e:39:18:5b:4a:52:f7:5f:17:
         43:83:96:f7:de:73:33:b4:13:97:85:39:89:6f:bd:84:fc:21:
         38:2e:21:e4:0e:aa:4c:ed:d5:4a:80:90:b3:9c:a8:28:14:a6:
         d2:58:30:92:e3:d6:38:07:37:c1:78:63:ed:5e:1e:d2:a7:4e:
         2a:a7:02:80:3a:e8:6b:01:8b:57:e0:ea:29:6c:e9:c6:b4:91:
         5a:d5:0d:49:ea:e2:01:71:92:53:ab:5f:0d:c2:4a:15:fd:c4:
         cc:0a:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:25:08 2026 by rpki-client