Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139363.roa
File:                     AS139363.roa (raw, json)
Hash identifier:          Qwvr010jt3e+uvEurIuKF1I7YCCF9gezQN5ds/CMpR0=
Subject key identifier:   ED:58:32:E9:63:57:07:AD:EF:CB:A2:CC:C5:E0:6E:22:96:FD:F2:81
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       52787BA3DC4CE574A1B0F4F7E8CCAB3758C104A1
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139363.roa
Signing time:             Sun 03 May 2026 05:55:06 +0000
ROA not before:           Sun 03 May 2026 05:50:06 +0000
ROA not after:            Sun 02 May 2027 05:55:06 +0000
asID:                     139363
IP address blocks:        103.141.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:78:7b:a3:dc:4c:e5:74:a1:b0:f4:f7:e8:cc:ab:37:58:c1:04:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 05:50:06 2026 GMT
            Not After : May  2 05:55:06 2027 GMT
        Subject: CN=ED5832E9635707ADEFCBA2CCC5E06E2296FDF281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:82:45:5a:78:f0:32:c2:4c:16:b7:97:46:
                    40:a1:3c:2b:1c:dd:a9:b7:e5:76:00:10:c2:af:fe:
                    1e:b3:c1:7d:ad:6c:1a:04:26:3f:a5:7e:a7:76:bd:
                    ac:ed:ec:74:e5:18:0c:11:26:47:7c:0e:14:a9:a1:
                    f3:f0:fa:c1:ff:5b:2b:bd:96:b9:f8:f7:8f:16:7c:
                    9d:7a:d4:b3:08:32:5f:48:ae:59:54:5e:1a:64:3f:
                    de:d1:ff:38:37:0d:f6:ca:b3:ec:47:77:63:0f:db:
                    5d:fb:8d:52:d5:0a:bd:b8:4c:09:8d:76:c0:b2:b0:
                    ac:61:3a:27:4e:5e:cd:2c:6c:3b:24:cf:7f:3b:36:
                    b3:5d:d6:90:1b:d2:42:4b:d7:f4:de:71:ba:25:55:
                    ae:c5:67:98:21:0c:0e:b8:12:90:34:39:96:77:14:
                    d0:40:8b:27:02:f0:30:15:22:d5:70:9b:14:35:58:
                    43:03:3b:c1:45:77:0a:0f:97:9e:3f:de:0d:cf:cd:
                    0f:6e:a2:2c:df:47:44:e8:12:cf:e7:8d:37:76:8c:
                    6d:b1:bc:fe:75:a1:46:d7:91:c9:13:d5:6c:ed:cf:
                    3f:54:c5:68:9c:71:7b:49:f6:fd:69:2e:8e:86:77:
                    c6:eb:ad:20:e2:b9:dd:13:c6:20:6d:d4:1d:d5:f3:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:58:32:E9:63:57:07:AD:EF:CB:A2:CC:C5:E0:6E:22:96:FD:F2:81
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139363.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:df:6e:2f:22:2a:04:dd:f8:0b:8e:4a:4f:e4:2e:58:37:3a:
         70:c0:54:03:e1:b0:06:77:2f:d6:9e:a3:54:3f:18:8c:22:c4:
         e4:53:f5:6c:64:28:05:10:de:88:ec:ca:96:1d:9d:c1:d7:9d:
         70:96:84:27:87:7b:0f:a2:2f:61:7b:f9:b9:b0:a4:a3:8d:5d:
         a4:9a:26:41:02:e9:bf:97:ba:da:fe:d0:47:a5:72:a5:94:0d:
         dd:b8:63:ed:6e:6f:b4:50:9c:5a:4a:1a:7b:64:a2:60:58:e7:
         b9:52:ea:eb:35:1b:01:50:10:ed:7c:4e:99:08:2e:f8:93:a9:
         26:1d:c8:49:c2:83:4e:4c:13:ce:74:3f:6d:88:13:13:82:67:
         73:d7:a6:e5:88:09:5f:40:09:4e:0d:66:8a:ba:49:4c:e5:fd:
         7d:81:2b:ec:f0:dd:00:16:2b:10:b1:51:45:13:36:87:90:fd:
         b1:9e:51:f9:bb:78:a3:e3:bf:a9:b7:b1:ea:08:04:9f:99:a7:
         b4:76:d8:b7:55:8e:a0:f1:f5:88:64:77:8d:2f:cd:31:70:39:
         68:2f:c7:c5:d5:c2:42:b3:55:6d:7d:d4:8a:5d:6f:c6:d4:60:
         24:df:12:ba:88:70:12:14:ce:63:78:22:9e:d9:01:0e:6b:32:
         77:e6:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:02:56 2026 by rpki-client