Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa
File:                     AS139932.roa (raw, json)
Hash identifier:          R9CFl3urKVoZmK40sxoak2jCMUWUaCpNA1+plL7zEK8=
Subject key identifier:   61:6C:F4:40:5A:51:5D:E1:A0:BA:5E:CA:89:85:70:75:34:6E:37:58
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4C3B075A925C50CF7BF7BE65708D4D52975EA631
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa
Signing time:             Fri 26 Sep 2025 04:00:00 +0000
ROA not before:           Fri 26 Sep 2025 03:55:00 +0000
ROA not after:            Fri 25 Sep 2026 04:00:00 +0000
asID:                     139932
IP address blocks:        103.146.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 17:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3b:07:5a:92:5c:50:cf:7b:f7:be:65:70:8d:4d:52:97:5e:a6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 26 03:55:00 2025 GMT
            Not After : Sep 25 04:00:00 2026 GMT
        Subject: CN=616CF4405A515DE1A0BA5ECA89857075346E3758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:fc:73:f9:42:76:2f:71:7e:82:da:3e:8d:
                    cc:f5:fd:51:91:d6:02:99:f2:fc:6f:d0:6a:2b:a0:
                    e8:c2:ff:19:b6:fa:69:10:68:bf:30:1b:81:b8:c1:
                    14:1f:b0:ee:7e:da:08:3f:16:d5:c7:3c:ae:28:89:
                    07:11:b3:66:8f:9d:ba:73:b2:8c:db:2a:14:4b:07:
                    37:95:02:25:c8:0b:28:95:1e:bb:a9:48:1f:d3:08:
                    3b:a5:6b:75:a2:a3:6c:73:54:f4:11:6c:4d:76:c3:
                    ab:d9:af:36:7f:42:27:2d:2b:27:59:08:0d:03:d5:
                    3d:54:9f:00:61:8f:8c:bc:39:b9:12:81:0f:8e:db:
                    ce:84:81:45:e1:c9:bb:c0:f1:35:60:fd:a4:e2:f1:
                    cf:04:21:33:67:e7:8b:3c:3d:97:a3:3b:a2:3a:22:
                    4a:f1:66:a4:f6:7a:69:48:43:c3:b8:d8:5d:31:07:
                    0b:da:cc:04:46:4f:c8:57:a9:3a:c4:28:86:19:18:
                    99:b0:ef:1a:67:41:77:2c:bc:82:e1:ae:7f:84:4e:
                    dd:ee:ab:da:62:0b:0f:e9:83:14:db:61:9a:8a:57:
                    d1:17:6c:99:f9:34:09:02:a7:fe:85:84:62:72:38:
                    2a:d6:f2:3b:dd:7e:50:ac:92:1a:6c:52:6f:a1:72:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6C:F4:40:5A:51:5D:E1:A0:BA:5E:CA:89:85:70:75:34:6E:37:58
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:70:9f:40:28:39:93:d5:a4:92:d0:77:c7:ee:86:60:f3:
         84:f5:ec:a2:0e:36:6f:71:84:e2:2e:fe:90:24:3a:77:40:dd:
         4d:27:75:a0:d8:1d:22:14:44:6a:a2:f2:b6:10:88:58:01:87:
         90:b2:88:f8:18:2c:d9:9a:b8:c7:fd:a0:35:65:1c:bf:d1:4b:
         1b:7a:29:d7:73:a0:b7:14:cc:b8:49:ab:72:a6:27:bb:8c:ea:
         3d:ae:11:79:27:98:be:da:ff:73:58:e0:a5:6a:1c:47:96:e9:
         ff:c6:b3:02:c8:64:fb:03:95:b4:56:0c:95:16:f2:36:d6:11:
         74:96:91:c8:78:9e:9e:23:e5:9a:aa:2e:df:29:1a:5f:52:69:
         2c:4b:0f:60:01:11:41:f9:8f:af:e5:18:c9:fc:eb:11:f6:74:
         2d:af:38:18:be:2b:88:99:21:52:6f:a0:b5:26:c4:d3:36:e7:
         e2:4c:92:70:c3:ff:9c:25:70:43:97:58:8c:2e:28:b1:a5:d8:
         a0:9e:20:56:95:14:fa:69:97:cf:f0:7c:dc:88:50:78:ac:b5:
         b2:42:0e:86:66:7c:36:1f:d5:9d:1b:79:5b:e1:e4:0f:dd:e3:
         66:7f:da:b6:cf:a8:46:e8:3f:e3:63:6d:f2:a8:fb:42:ac:25:
         30:2a:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:03:31 2025 by rpki-client