Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141659.roa
File:                     AS141659.roa (raw, json)
Hash identifier:          +yY/OyXfBNlCeGORoNtklF/Wq49ENjXIVN7itGwY45o=
Subject key identifier:   63:27:FF:A5:5F:11:93:50:00:3A:C8:47:11:03:16:A9:98:3C:4A:D9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5370EB10B8683A2CB076D6811F278547ECDB4C35
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141659.roa
Signing time:             Tue 22 Jul 2025 04:00:00 +0000
ROA not before:           Tue 22 Jul 2025 03:55:00 +0000
ROA not after:            Tue 21 Jul 2026 04:00:00 +0000
asID:                     141659
IP address blocks:        103.160.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 13:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:70:eb:10:b8:68:3a:2c:b0:76:d6:81:1f:27:85:47:ec:db:4c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 22 03:55:00 2025 GMT
            Not After : Jul 21 04:00:00 2026 GMT
        Subject: CN=6327FFA55F119350003AC847110316A9983C4AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:80:38:64:d6:60:1e:7c:d0:88:79:bb:fa:
                    c3:0d:ac:59:4d:63:ac:75:df:92:eb:73:52:61:a3:
                    b2:ae:e1:0c:b7:1f:9c:26:63:ed:68:0a:ca:53:61:
                    c9:e3:57:25:6c:07:e8:68:42:55:52:90:c7:61:ff:
                    49:3d:2c:86:4f:7f:18:a4:4e:5d:a6:5d:a4:2e:9d:
                    22:f0:0b:ef:ec:b5:19:97:0b:21:2b:f9:41:35:bf:
                    a4:0b:b1:e2:24:38:c6:c9:e5:d1:be:46:d3:85:03:
                    9e:7d:89:6e:8a:c7:db:d8:08:ca:16:80:1a:98:74:
                    4c:2f:6a:d9:08:00:0c:a6:ab:61:96:8c:78:2f:ea:
                    35:11:93:ac:93:a4:67:7f:c7:35:2b:ee:f1:29:c8:
                    58:71:26:b1:32:ef:cf:a1:c6:8e:7d:0e:d8:89:76:
                    22:0e:cf:c7:88:70:a6:bb:4c:4b:c5:ed:64:f8:42:
                    f6:69:8b:00:56:f0:9b:e3:c4:a9:dc:f2:5b:fd:ab:
                    05:fa:97:67:22:10:bb:60:93:c4:b3:f6:89:1b:eb:
                    d9:52:f0:7a:77:67:e1:12:d1:2b:f8:e3:74:83:0c:
                    c8:dd:91:b6:49:83:d8:7a:1b:d5:f5:cb:51:3c:37:
                    f0:86:59:da:0e:0b:54:c3:5a:59:65:73:58:b9:e8:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:FF:A5:5F:11:93:50:00:3A:C8:47:11:03:16:A9:98:3C:4A:D9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141659.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:8b:74:c7:c6:29:6a:9e:d6:a3:03:9a:d9:37:ef:40:c4:c0:
         90:8e:b0:a7:28:cb:c3:9f:4a:9f:77:e4:ab:5c:f9:c9:b7:5a:
         5f:00:02:3f:3a:46:6b:d0:eb:e5:cd:d1:4d:25:16:59:2b:f2:
         ed:fb:f3:f7:03:4f:4d:d9:9c:ae:84:f9:5a:89:04:b4:00:c0:
         27:50:a6:33:a5:83:d7:a5:e7:f9:94:78:16:dc:9c:9b:3b:59:
         a2:43:5c:33:31:f5:a5:62:f2:60:64:13:de:77:6f:a0:61:a0:
         eb:17:da:9b:d7:73:d7:5a:97:cc:31:13:19:b3:17:db:db:df:
         48:27:a9:bf:99:f1:05:c7:19:52:39:c1:bc:12:30:25:c7:85:
         2a:60:e7:65:a8:84:ea:c1:08:94:87:b0:03:4e:c2:94:0e:12:
         63:97:4b:e6:6c:b3:d9:e7:76:52:88:ea:fd:86:c0:06:e6:54:
         3c:c1:e2:46:5f:36:d2:f1:00:d0:cc:3d:58:08:05:f6:d3:6b:
         1c:2c:01:c4:e3:a2:52:86:cd:3a:fa:93:62:b0:dc:02:be:35:
         d2:a9:88:e6:40:3c:4a:04:8d:3e:fc:87:74:8c:a7:4d:de:97:
         20:66:c7:27:0f:ee:3f:a4:80:95:30:21:92:16:c7:14:60:8b:
         84:f8:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:31 2025 by rpki-client