Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139982.roa
File:                     AS139982.roa (raw, json)
Hash identifier:          grHlC5RE8oucoc2t5n2fqoa4194HvWXZUaiKGlpUQ2k=
Subject key identifier:   09:84:F3:60:BE:B0:57:97:F4:B8:22:56:25:60:6E:20:AE:9A:D0:B1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       45C43BDF50D05264747C0B5917FE650057CF4A67
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139982.roa
Signing time:             Mon 23 Jun 2025 03:32:08 +0000
ROA not before:           Mon 23 Jun 2025 03:27:08 +0000
ROA not after:            Mon 22 Jun 2026 03:32:08 +0000
asID:                     139982
IP address blocks:        103.134.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c4:3b:df:50:d0:52:64:74:7c:0b:59:17:fe:65:00:57:cf:4a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 23 03:27:08 2025 GMT
            Not After : Jun 22 03:32:08 2026 GMT
        Subject: CN=0984F360BEB05797F4B8225625606E20AE9AD0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:71:ee:a7:46:24:01:96:87:d1:5d:8a:d2:
                    24:8f:65:eb:2d:9f:88:79:7e:ba:10:82:a1:c5:b8:
                    62:6c:a9:79:56:f6:80:f1:aa:9f:33:d7:cc:12:45:
                    87:47:05:50:f8:9b:32:52:cb:19:05:dd:10:ea:79:
                    8c:89:c0:67:69:4b:26:01:60:be:33:24:4d:e9:cd:
                    e5:c7:16:6c:07:03:cb:83:4d:53:ce:a2:f1:09:bf:
                    0f:8f:32:8a:84:56:cb:21:e1:47:c4:0c:c1:82:98:
                    d7:17:13:8c:d3:28:40:dd:64:d2:7d:46:07:b3:ee:
                    df:c9:95:53:69:5d:6d:ed:b0:38:7c:b6:03:f4:31:
                    9a:da:c1:ab:0e:b2:0a:0c:13:9f:2f:0d:fc:8d:1c:
                    de:52:46:96:a7:c9:4a:d0:7c:67:24:a7:ec:39:dc:
                    7d:fe:7c:cc:f6:f8:f1:42:f4:cb:b2:67:ec:d1:aa:
                    2c:10:9c:f2:ef:44:e8:27:77:af:b9:6e:7d:5d:c3:
                    d5:27:24:2a:3a:fc:77:51:90:a3:58:18:18:a6:99:
                    f6:02:92:a6:22:bf:08:e0:86:41:db:81:82:81:3e:
                    ce:44:49:4e:f6:43:89:1b:ff:83:90:d6:2e:8b:fd:
                    fe:91:94:27:48:1f:a0:c0:ef:2d:14:e6:e5:86:d4:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:84:F3:60:BE:B0:57:97:F4:B8:22:56:25:60:6E:20:AE:9A:D0:B1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139982.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:dd:b9:04:cb:e9:e5:bc:4f:96:4c:02:6c:07:82:e9:48:
         35:6e:7d:01:19:f7:df:e7:8e:c2:46:83:a6:f6:4b:2f:d9:c6:
         a7:a9:98:aa:f1:e8:bc:6a:70:f6:fd:a5:5a:2f:07:60:11:51:
         3f:93:8f:d4:e9:24:6d:1d:ed:03:8d:3d:34:fa:56:37:64:32:
         70:7d:c7:24:d6:12:4e:19:99:b4:7c:ef:8e:59:16:89:31:fa:
         44:7a:77:79:7f:36:f3:37:25:6d:2b:13:57:fa:e3:b0:8d:01:
         97:49:6a:de:df:4d:62:98:75:90:53:30:38:24:f9:15:53:00:
         37:b6:26:15:c0:f1:d1:b0:e4:6a:29:01:d2:37:b9:83:0f:a4:
         ac:06:0a:46:52:cc:4e:a3:1e:ae:a8:61:1d:6c:06:51:09:dd:
         bb:8e:c1:bb:a5:f1:e2:9f:a3:87:e2:fa:53:98:64:5f:0c:e0:
         88:bd:2e:61:12:ff:4b:dd:e1:93:c8:62:a5:46:9d:9d:ac:4e:
         27:3c:8f:54:3c:c2:97:01:6b:d1:36:a4:04:f4:0b:10:c3:6f:
         03:f5:61:f3:b6:22:e2:23:2d:13:20:12:18:73:93:14:56:81:
         a7:d2:f9:16:02:30:ba:fc:ef:0d:66:7a:b7:d7:ae:18:d0:72:
         0b:01:84:b8
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIURcQ731DQUmR0fAtZF/5lAFfPSmcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyMzAzMjcwOFoX
DTI2MDYyMjAzMzIwOFowMzExMC8GA1UEAxMoMDk4NEYzNjBCRUIwNTc5N0Y0Qjgy
MjU2MjU2MDZFMjBBRTlBRDBCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALJjce6nRiQBlofRXYrSJI9l6y2fiHl+uhCCocW4YmypeVb2gPGqnzPXzBJF
h0cFUPibMlLLGQXdEOp5jInAZ2lLJgFgvjMkTenN5ccWbAcDy4NNU86i8Qm/D48y
ioRWyyHhR8QMwYKY1xcTjNMoQN1k0n1GB7Pu38mVU2ldbe2wOHy2A/QxmtrBqw6y
CgwTny8N/I0c3lJGlqfJStB8ZySn7Dncff58zPb48UL0y7Jn7NGqLBCc8u9E6Cd3
r7lufV3D1SckKjr8d1GQo1gYGKaZ9gKSpiK/COCGQduBgoE+zkRJTvZDiRv/g5DW
Lov9/pGUJ0gfoMDvLRTm5YbUY50CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQJhPNg
vrBXl/S4IlYlYG4grprQsTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk4Mi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmeGvDANBgkqhkiG9w0BAQsFAAOCAQEAHTLduQTL6eW8T5ZMAmwH
gulINW59ARn33+eOwkaDpvZLL9nGp6mYqvHovGpw9v2lWi8HYBFRP5OP1OkkbR3t
A409NPpWN2QycH3HJNYSThmZtHzvjlkWiTH6RHp3eX828zclbSsTV/rjsI0Bl0lq
3t9NYph1kFMwOCT5FVMAN7YmFcDx0bDkaikB0je5gw+krAYKRlLMTqMerqhhHWwG
UQndu47Bu6Xx4p+jh+L6U5hkXwzgiL0uYRL/S93hk8hipUadnaxOJzyPVDzClwFr
0TakBPQLEMNvA/Vh87Yi4iMtEyASGHOTFFaBp9L5FgIwuvzvDWZ6t9euGNByCwGE
uA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 12:11:36 2025 by rpki-client