Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141666.roa
File:                     AS141666.roa (raw, json)
Hash identifier:          wYLWukapPOVOiOOlyYoOYfDa2OTlJFfyOwwvrQiq9WU=
Subject key identifier:   62:91:E9:AB:77:76:23:00:5F:FB:9D:C8:44:D8:CC:41:64:2C:11:C3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       29F213B1C46B8300E5E1E915EB9FC4486BDA59A7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141666.roa
Signing time:             Wed 29 Oct 2025 03:00:00 +0000
ROA not before:           Wed 29 Oct 2025 02:55:00 +0000
ROA not after:            Wed 28 Oct 2026 03:00:00 +0000
asID:                     141666
IP address blocks:        103.162.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f2:13:b1:c4:6b:83:00:e5:e1:e9:15:eb:9f:c4:48:6b:da:59:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 29 02:55:00 2025 GMT
            Not After : Oct 28 03:00:00 2026 GMT
        Subject: CN=6291E9AB777623005FFB9DC844D8CC41642C11C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:47:a9:f6:5a:a5:32:50:75:65:bf:e2:4f:
                    6a:45:f9:b7:68:98:29:e3:92:0e:75:fc:b1:ad:0e:
                    63:06:ec:5a:0c:4a:34:fb:87:05:50:e3:16:a6:87:
                    1c:8b:4f:88:2e:1b:25:c4:16:20:2f:40:3e:e2:03:
                    ff:ee:ea:aa:0c:03:58:b3:e7:65:31:83:5f:8f:db:
                    6e:49:e4:bd:83:43:7e:fd:d7:4b:8b:90:90:c5:55:
                    f7:c9:8d:8b:86:fb:70:a1:f7:8e:3c:91:e2:01:db:
                    d9:96:b2:00:8f:d8:14:46:f9:57:e2:ac:24:0a:d5:
                    58:e4:60:23:af:f5:37:3a:33:ad:77:45:fe:1b:3b:
                    c4:f3:56:0e:eb:b4:a8:e9:9a:cc:f9:ab:fe:e6:42:
                    f3:29:ef:fe:57:b8:af:4c:bf:04:ec:a0:18:bb:51:
                    48:ea:ac:18:c7:98:16:a4:24:33:0b:d1:02:69:b6:
                    bd:f8:12:e1:29:93:4d:9c:bb:02:79:00:e5:48:66:
                    05:67:27:40:a9:b6:5d:99:a3:02:4c:80:97:41:ac:
                    f0:9b:48:be:71:69:52:27:65:f5:da:8f:57:90:9f:
                    6c:bd:bd:ae:70:79:53:dc:1e:ee:b3:7b:2c:9d:4c:
                    ca:2a:57:3c:d9:b0:4a:d6:1f:8a:3e:28:7c:77:af:
                    2f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:91:E9:AB:77:76:23:00:5F:FB:9D:C8:44:D8:CC:41:64:2C:11:C3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141666.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:3c:16:6f:49:58:ac:ca:1c:bd:1e:6a:82:09:56:b6:39:2d:
         2e:32:35:fe:60:62:d8:b5:7f:03:e7:27:d9:43:04:b8:02:03:
         37:07:2e:d0:3b:27:07:60:be:13:db:4e:e6:d5:ed:7c:12:5d:
         1f:ed:25:3f:1d:5e:ce:64:77:10:a3:eb:72:5b:87:bb:f0:ab:
         e6:1e:61:9f:6e:cd:ed:f0:eb:ac:80:18:5b:50:be:02:b0:0b:
         42:99:9a:85:78:c5:4b:25:7c:65:d0:17:79:97:e5:02:82:9e:
         fc:0d:5c:ff:cd:d4:a9:d0:47:b0:75:c3:5f:6b:31:36:dd:d3:
         71:60:3e:3b:64:f2:9f:ef:e6:41:67:5d:36:79:8b:01:1a:7f:
         b8:1f:0a:c1:31:78:1b:ac:0e:ad:74:72:57:79:06:19:17:3c:
         65:c9:5d:0e:7c:c9:f5:9b:1b:ee:1e:c2:6e:f5:a9:e1:24:8a:
         de:84:27:27:cf:1d:14:c7:89:11:1e:37:f2:bb:92:c4:85:e8:
         08:86:c1:d8:9c:30:8c:bd:fe:ac:e2:c8:e3:10:62:2e:2f:92:
         2d:23:0e:53:e4:b2:01:13:29:b6:45:82:50:45:17:bf:30:29:
         8f:8f:c1:36:68:f4:37:bf:73:82:80:fc:81:11:22:8f:39:49:
         ef:6b:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:33:28 2025 by rpki-client