Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141927.roa
File:                     AS141927.roa (raw, json)
Hash identifier:          ixCtq1riYUHonMrkOSKyeF174b71X9csJH9xXji8/mQ=
Subject key identifier:   E8:54:FD:4B:C1:7B:D7:DC:71:58:49:F4:F1:0A:61:01:42:D8:DD:3E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1DA6B0701BAB760FE5D84BFF551C0FE68B74142D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141927.roa
Signing time:             Mon 13 Apr 2026 02:56:18 +0000
ROA not before:           Mon 13 Apr 2026 02:51:18 +0000
ROA not after:            Mon 12 Apr 2027 02:56:18 +0000
asID:                     141927
IP address blocks:        103.164.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 00:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a6:b0:70:1b:ab:76:0f:e5:d8:4b:ff:55:1c:0f:e6:8b:74:14:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 13 02:51:18 2026 GMT
            Not After : Apr 12 02:56:18 2027 GMT
        Subject: CN=E854FD4BC17BD7DC715849F4F10A610142D8DD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:db:01:7f:66:96:d5:a1:18:a7:6e:44:2f:
                    26:11:99:a0:7a:7a:40:ec:c7:d8:f5:74:ef:2d:5f:
                    7e:22:90:89:f1:b2:ab:35:d4:b4:a7:d2:31:7a:0a:
                    ef:70:ef:a1:e5:64:56:11:39:d0:26:8e:d4:48:6d:
                    fd:34:ce:be:88:e6:89:da:bb:f5:a3:be:2a:ae:94:
                    55:5b:24:2c:d4:46:87:04:f8:11:20:0c:f8:20:7d:
                    ad:83:ea:97:c9:9c:e2:c2:39:04:3f:b4:58:49:4a:
                    c4:d8:61:80:12:1b:e6:3e:31:a7:50:9b:77:0d:27:
                    2a:cd:2b:83:57:c5:74:76:d4:ac:a5:03:ab:fd:8e:
                    a5:e8:ed:62:2d:b6:46:ee:33:52:00:d7:f6:12:0d:
                    de:c8:4e:b9:ea:d6:19:cc:6d:d7:f4:7b:ee:78:80:
                    bf:50:a2:87:5a:ca:9f:b5:fa:3f:de:ea:b6:75:a4:
                    c0:27:bc:88:0a:a7:1b:53:6f:b2:2f:98:0e:7f:94:
                    26:2f:d4:ea:c8:6f:a2:d0:c1:e9:5f:88:d3:7c:0c:
                    50:3a:92:ab:d5:47:82:8b:98:d9:92:50:e4:20:6c:
                    f6:e7:04:a5:54:66:87:40:8a:69:11:fe:ad:ad:eb:
                    3d:90:03:a3:e4:34:3e:59:2c:27:79:a8:8a:10:f4:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:FD:4B:C1:7B:D7:DC:71:58:49:F4:F1:0A:61:01:42:D8:DD:3E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141927.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:48:af:5c:47:a5:a2:63:64:51:00:90:3a:4e:c7:d3:65:ff:
         8b:d4:1c:28:05:af:b3:b6:e3:71:38:6f:71:7d:ab:8e:fe:3e:
         5c:fb:d7:45:11:1b:6a:3a:9c:2b:04:16:b1:a6:14:e2:65:8c:
         9d:f6:c4:b5:51:38:dd:7b:c0:fa:76:96:b3:70:41:0b:3b:f9:
         21:f1:53:a5:59:ef:53:cb:65:cb:5b:ed:62:26:3d:4d:9b:3a:
         b5:f4:f0:9b:fc:49:5c:41:a4:72:6d:41:51:8e:19:c5:e7:c5:
         50:4f:d2:62:b0:4d:b1:9d:52:70:5a:f9:fb:d9:18:27:d9:1c:
         aa:2e:e9:03:42:69:ad:33:70:d6:3a:43:a6:a6:d7:d8:5d:ce:
         69:0c:6c:9e:e8:b3:71:4b:ba:a8:26:29:c5:ee:d5:05:12:94:
         5f:58:00:10:14:85:34:30:18:18:4c:eb:d3:d9:2f:64:12:d2:
         56:17:3d:a9:6a:16:07:eb:32:1c:a9:eb:a4:ec:b3:92:78:6d:
         a2:96:09:3f:a1:3e:4e:3c:ce:f6:87:57:7c:e9:3c:c9:3d:b3:
         79:75:cc:50:6a:00:dd:75:b0:38:b0:5f:2c:50:ed:35:30:14:
         45:a7:ee:96:36:e3:f9:ac:1d:31:a7:16:b5:a8:74:4d:c7:88:
         47:fc:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:46 2026 by rpki-client