Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
File: AS45727.roa (raw, json)
Hash identifier: Zyn3RFOUesj/Ml4BwKn4+QVVoHhHhZ+dDS0zCcGILLs=
Subject key identifier: CE:07:82:2C:E6:57:9C:42:77:04:8D:86:2A:B7:5D:F7:C3:91:11:6E
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 04B13EC7C44BE050DFF06A3D0141FDF9BB162B3A
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
Signing time: Tue 03 Mar 2026 13:54:02 +0000
ROA not before: Tue 03 Mar 2026 13:49:02 +0000
ROA not after: Tue 02 Mar 2027 13:54:02 +0000
asID: 45727
IP address blocks: 103.10.66.0/24 maxlen: 24
114.142.172.0/24 maxlen: 24
114.142.173.0/24 maxlen: 24
116.206.10.0/24 maxlen: 24
116.206.11.0/24 maxlen: 24
116.206.12.0/24 maxlen: 24
116.206.13.0/24 maxlen: 24
116.206.14.0/24 maxlen: 24
116.206.15.0/24 maxlen: 24
116.206.28.0/24 maxlen: 24
116.206.29.0/24 maxlen: 24
116.206.34.0/24 maxlen: 24
180.214.232.0/24 maxlen: 24
180.214.233.0/24 maxlen: 24
180.214.234.0/24 maxlen: 24
202.67.40.0/24 maxlen: 24
202.67.41.0/24 maxlen: 24
202.67.42.0/24 maxlen: 24
202.67.43.0/24 maxlen: 24
223.255.225.0/24 maxlen: 24
223.255.229.0/24 maxlen: 24
223.255.230.0/24 maxlen: 24
2400:8b00:100::/44 maxlen: 44
2400:8b00:110::/44 maxlen: 44
2400:8b00:120::/44 maxlen: 44
2400:8b00:130::/44 maxlen: 44
2400:8b00:200::/44 maxlen: 44
2400:8b00:210::/44 maxlen: 44
2400:8b00:220::/44 maxlen: 44
2400:8b00:230::/44 maxlen: 44
2400:8b00:500::/44 maxlen: 44
2400:8b00:510::/44 maxlen: 44
2400:8b00:520::/44 maxlen: 44
2400:8b00:530::/44 maxlen: 44
2400:8b00:800::/44 maxlen: 44
2400:8b00:810::/44 maxlen: 44
2400:8b00:820::/44 maxlen: 44
2400:8b00:830::/44 maxlen: 44
2400:8b00:d90::/44 maxlen: 44
2400:8b00:da0::/44 maxlen: 44
2400:8b00:db0::/44 maxlen: 44
2400:8b00:1000::/44 maxlen: 44
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 20:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b1:3e:c7:c4:4b:e0:50:df:f0:6a:3d:01:41:fd:f9:bb:16:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Mar 3 13:49:02 2026 GMT
Not After : Mar 2 13:54:02 2027 GMT
Subject: CN=CE07822CE6579C4277048D862AB75DF7C391116E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:00:14:73:7a:4c:d5:6a:af:44:b9:88:6b:99:
89:db:a2:78:a6:6f:e2:74:16:e5:c8:74:8a:0a:ae:
d4:9c:77:53:91:1d:b2:a8:78:cf:fc:5e:59:8d:b7:
20:c2:91:de:bb:ea:d3:54:14:91:de:38:49:57:a7:
ab:5b:4d:ef:21:4a:b0:47:ed:e8:1c:42:29:45:b7:
10:f6:cd:90:f3:bf:49:a7:97:95:a4:0e:d3:7a:3d:
01:95:78:6b:8a:d3:68:4f:20:73:1c:2a:86:29:12:
6e:01:ca:e4:e9:5e:d1:7c:a0:1d:55:73:42:a5:e4:
f0:40:6e:74:b0:1a:5b:3a:05:5d:bc:62:4e:07:bb:
4e:a8:b8:c6:08:e8:34:6a:c0:f2:67:e0:f3:3f:51:
47:c8:a9:c0:fb:61:80:af:75:02:a6:55:e0:14:17:
e5:f9:c1:d5:2c:75:88:0b:8d:26:5d:98:bd:0e:25:
11:6a:c5:fb:1c:d7:54:9e:20:e7:a7:2b:c6:ee:d8:
f7:4d:79:fa:1b:2f:c0:77:77:ce:3e:95:e2:62:2d:
8d:78:43:cd:a2:91:20:59:5c:63:1d:c1:0d:dd:79:
22:7f:65:97:2e:dc:60:7a:00:20:8f:08:84:06:34:
c4:7d:dd:e1:40:42:6e:e1:c7:2d:d3:df:0a:b8:f1:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:07:82:2C:E6:57:9C:42:77:04:8D:86:2A:B7:5D:F7:C3:91:11:6E
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.66.0/24
114.142.172.0/23
116.206.10.0-116.206.15.255
116.206.28.0/23
116.206.34.0/24
180.214.232.0-180.214.234.255
202.67.40.0/22
223.255.225.0/24
223.255.229.0-223.255.230.255
IPv6:
2400:8b00:100::/42
2400:8b00:200::/42
2400:8b00:500::/42
2400:8b00:800::/42
2400:8b00:d90::-2400:8b00:dbf:ffff:ffff:ffff:ffff:ffff
2400:8b00:1000::/44
Signature Algorithm: sha256WithRSAEncryption
73:01:5b:fa:a9:a0:04:85:eb:78:2b:c2:87:15:8c:0e:63:1e:
f8:19:f1:ae:c4:a3:fb:e1:33:ae:27:8b:79:e2:f3:18:e8:ff:
2d:6a:2c:a9:bc:4c:3f:7d:98:da:87:e9:52:ed:2f:8d:a9:59:
43:6f:28:c9:90:1c:ff:cb:f1:83:64:17:d8:db:fc:41:66:0d:
a9:a9:65:4f:8e:2a:d5:d9:1a:41:2e:0d:a6:62:a9:d5:88:36:
72:3e:d9:ba:1e:e4:1f:d3:bb:27:e8:14:c8:a8:ac:a0:fa:92:
3d:16:2f:f1:ef:2f:02:10:5a:0e:03:d3:64:b1:e1:d8:68:3e:
85:cb:7e:1c:fe:57:fb:a4:f9:1e:1f:e2:d7:c2:b1:5d:2f:5c:
65:a9:d6:c5:81:13:5a:2e:b7:8d:8b:99:2d:be:b5:c7:63:a7:
8a:a1:b3:ee:50:04:d1:7a:92:2b:c9:0b:74:80:ac:53:cc:af:
2a:b5:ee:2b:3c:81:75:83:86:4d:03:39:dc:e8:72:88:e7:da:
3d:45:56:16:d6:f4:d1:d8:a0:a4:1b:d6:f3:ab:02:6a:e5:7d:
ac:37:d5:c7:58:fe:27:ad:16:4c:38:bd:b6:31:a7:dd:ae:3a:
0c:2c:5f:20:bf:4d:5d:b0:f8:e9:47:8a:b1:50:10:12:d5:45:
6d:1e:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:46:42 2026 by rpki-client