Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142373.roa
File:                     AS142373.roa (raw, json)
Hash identifier:          IfdUeNYzBR1csRXWaMay6cFxBE2TbJjj+rpxtVpmdm8=
Subject key identifier:   9D:27:E6:B4:DA:82:25:1A:22:20:CC:CD:09:91:9B:B0:87:3E:26:41
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6FFB409ADD529E96FF5B045F6B9F8A6388A3D50C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142373.roa
Signing time:             Thu 19 Jun 2025 02:06:59 +0000
ROA not before:           Thu 19 Jun 2025 02:01:59 +0000
ROA not after:            Thu 18 Jun 2026 02:06:59 +0000
asID:                     142373
IP address blocks:        103.171.82.0/23 maxlen: 24
                          2401:c7a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fb:40:9a:dd:52:9e:96:ff:5b:04:5f:6b:9f:8a:63:88:a3:d5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 19 02:01:59 2025 GMT
            Not After : Jun 18 02:06:59 2026 GMT
        Subject: CN=9D27E6B4DA82251A2220CCCD09919BB0873E2641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:a6:c4:f1:f4:dc:f2:e2:ae:a3:51:d0:18:
                    65:2e:85:b1:95:65:c6:11:6e:59:5a:24:8d:ab:e6:
                    76:be:18:ec:5b:ee:18:8a:19:08:0e:ec:94:f4:7f:
                    de:7f:1d:7f:8f:00:53:c3:24:64:ef:d4:fc:29:5d:
                    bc:c9:0e:fe:8c:4b:27:1b:d8:7c:a3:aa:4e:ce:47:
                    0c:c1:9b:b0:02:f6:c5:d9:9b:88:6e:38:95:57:b7:
                    45:78:41:48:40:8d:1d:fd:9e:9c:b8:bd:c2:e2:e4:
                    fd:5a:3d:d5:ac:1c:87:8c:34:89:0f:18:af:11:03:
                    ba:18:af:ba:af:a5:0c:3a:82:97:a7:42:50:68:6e:
                    17:10:56:b9:13:8d:72:24:39:52:5b:87:05:01:0e:
                    81:97:69:4d:3d:87:56:91:3b:16:1c:37:f6:4a:58:
                    48:69:8d:1a:0c:cf:06:94:db:dc:51:bb:17:38:6b:
                    6e:1b:24:0e:52:c6:38:a0:51:60:d1:f6:64:2c:95:
                    ef:6f:4b:45:75:33:aa:f9:b3:ab:ad:ed:4b:47:af:
                    ad:9a:66:b4:70:a8:0b:a7:14:75:9c:9f:8f:42:90:
                    d6:f8:ac:d7:fd:67:21:e1:ea:20:20:b2:f4:8f:b5:
                    e0:ee:4f:e9:47:b6:29:bf:49:b4:28:ca:4a:be:e5:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:27:E6:B4:DA:82:25:1A:22:20:CC:CD:09:91:9B:B0:87:3E:26:41
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.82.0/23
                IPv6:
                  2401:c7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:01:3e:06:ac:02:5f:c9:8d:0b:f7:fa:44:81:9c:95:74:
         8d:48:c6:5c:7e:9d:d0:90:6f:89:fe:ce:50:dc:f6:3d:09:52:
         55:57:f1:10:69:a2:7c:0d:b2:79:1c:33:63:aa:b0:40:98:56:
         1b:ce:e9:2a:fb:d9:4d:d3:71:84:18:20:4c:c8:bf:bb:d0:79:
         8b:e2:7e:e7:a0:74:cc:7f:55:0c:bd:28:d4:93:11:4d:f5:ff:
         49:c8:0b:19:a7:31:10:26:6b:23:99:62:f1:7a:e7:7e:a7:14:
         10:d5:f4:f1:f4:d7:a9:55:8b:ea:b1:10:35:94:4e:02:f2:da:
         6e:b0:f2:0d:00:7a:8a:7e:da:fa:ae:ae:80:67:8a:ef:c6:b0:
         d3:d7:aa:64:43:0b:df:87:34:43:1e:04:93:e8:8d:37:99:6e:
         40:cf:a5:ed:86:f1:21:9e:4f:70:cd:12:2c:a0:90:c2:2e:7e:
         97:99:2c:0e:c1:24:f7:35:42:61:19:9d:d1:cb:28:30:0b:46:
         42:1a:99:81:fc:87:49:88:57:2e:26:81:31:d7:17:67:d5:4a:
         86:e4:42:a3:65:fa:3a:79:3c:01:49:6f:32:25:6f:cb:08:48:
         de:54:f2:8b:7b:f9:4f:be:7f:ce:9a:7c:02:f4:6c:cb:8e:b0:
         69:d3:0f:9e
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUb/tAmt1Snpb/WwRfa5+KY4ij1QwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxOTAyMDE1OVoX
DTI2MDYxODAyMDY1OVowMzExMC8GA1UEAxMoOUQyN0U2QjREQTgyMjUxQTIyMjBD
Q0NEMDk5MTlCQjA4NzNFMjY0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ4upsTx9Nzy4q6jUdAYZS6FsZVlxhFuWVokjavmdr4Y7FvuGIoZCA7slPR/
3n8df48AU8MkZO/U/CldvMkO/oxLJxvYfKOqTs5HDMGbsAL2xdmbiG44lVe3RXhB
SECNHf2enLi9wuLk/Vo91awch4w0iQ8YrxEDuhivuq+lDDqCl6dCUGhuFxBWuRON
ciQ5UluHBQEOgZdpTT2HVpE7Fhw39kpYSGmNGgzPBpTb3FG7FzhrbhskDlLGOKBR
YNH2ZCyV729LRXUzqvmzq63tS0evrZpmtHCoC6cUdZyfj0KQ1vis1/1nIeHqICCy
9I+14O5P6Ue2Kb9JtCjKSr7lqxkCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBSdJ+a0
2oIlGiIgzM0JkZuwhz4mQTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM3My5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWerUjANBAIAAjAHAwUAJAHHoDANBgkqhkiG9w0BAQsFAAOCAQEA
fXYBPgasAl/JjQv3+kSBnJV0jUjGXH6d0JBvif7OUNz2PQlSVVfxEGmifA2yeRwz
Y6qwQJhWG87pKvvZTdNxhBggTMi/u9B5i+J+56B0zH9VDL0o1JMRTfX/ScgLGacx
ECZrI5li8XrnfqcUENX08fTXqVWL6rEQNZROAvLabrDyDQB6in7a+q6ugGeK78aw
09eqZEML34c0Qx4Ek+iNN5luQM+l7YbxIZ5PcM0SLKCQwi5+l5ksDsEk9zVCYRmd
0csoMAtGQhqZgfyHSYhXLiaBMdcXZ9VKhuRCo2X6Onk8AUlvMiVvywhI3lTyi3v5
T75/zpp8AvRsy46wadMPng==
-----END CERTIFICATE-----
Generated at Sun Jun 29 12:20:43 2025 by rpki-client