Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: L8qf6krMR8v3e0LZIXy99Pfz67Hwpu2OznCh+RiXe14=
Subject key identifier: 96:81:0D:1B:DF:01:67:36:AC:D4:7E:FB:46:F3:25:57:E5:87:9C:B3
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 4E828BE0C7E0FDD20215B1AAFF9EB06A9380A174
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS0.roa
Signing time: Thu 02 Jul 2026 08:13:50 +0000
ROA not before: Thu 02 Jul 2026 08:08:50 +0000
ROA not after: Thu 01 Jul 2027 08:13:50 +0000
asID: 0
IP address blocks: 157.10.212.0/23 maxlen: 24
157.15.68.0/24 maxlen: 24
157.15.170.0/23 maxlen: 24
157.20.167.0/24 maxlen: 24
157.20.232.0/24 maxlen: 24
157.66.54.0/23 maxlen: 24
157.66.126.0/23 maxlen: 24
160.25.45.0/24 maxlen: 24
160.25.126.0/23 maxlen: 24
160.25.176.0/23 maxlen: 24
160.25.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:82:8b:e0:c7:e0:fd:d2:02:15:b1:aa:ff:9e:b0:6a:93:80:a1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Jul 2 08:08:50 2026 GMT
Not After : Jul 1 08:13:50 2027 GMT
Subject: CN=96810D1BDF016736ACD47EFB46F32557E5879CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:55:ec:ca:c4:8e:13:d2:2c:72:84:7d:a6:
5f:0e:9c:e1:4b:2e:b0:60:85:a3:f5:c1:2e:b3:11:
e1:7a:db:36:a2:5c:c2:7a:f2:a4:2c:b3:4c:8c:f1:
b1:a5:6e:f2:4c:89:26:cb:56:17:ca:d0:63:9c:1d:
78:25:22:ce:7e:a7:29:89:2c:dc:ed:41:cb:dd:55:
1d:4a:9f:ea:5a:38:41:3c:49:5d:f9:f7:51:a6:80:
5e:e4:27:92:eb:82:3a:5f:f5:2e:94:54:c5:e4:bd:
44:a4:34:1a:16:04:e0:68:61:d4:5a:6e:ee:f8:18:
43:54:45:c0:8a:e2:55:44:3a:fa:14:b5:60:5b:32:
35:ec:da:cf:5f:fb:1b:de:9a:3c:46:d3:75:b1:01:
90:a9:a7:e7:69:d7:f4:ac:e6:4e:29:27:a9:6d:f0:
60:e1:84:28:89:b6:0e:bd:d4:a0:a7:07:9b:8d:52:
30:c9:0b:2d:f3:41:1a:d7:77:85:34:6f:9a:ba:53:
84:ce:da:49:f6:9c:ca:51:4a:3d:55:b6:28:ed:1a:
a4:2f:0b:a7:cf:95:18:92:ca:ed:01:d4:43:2e:25:
9b:b9:ae:ad:66:cd:3e:43:7e:38:de:fd:38:2f:96:
5c:4d:97:51:61:6e:70:66:4c:6b:de:d5:6d:7f:71:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:0D:1B:DF:01:67:36:AC:D4:7E:FB:46:F3:25:57:E5:87:9C:B3
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.212.0/23
157.15.68.0/24
157.15.170.0/23
157.20.167.0/24
157.20.232.0/24
157.66.54.0/23
157.66.126.0/23
160.25.45.0/24
160.25.126.0/23
160.25.176.0/23
160.25.246.0/23
Signature Algorithm: sha256WithRSAEncryption
95:e3:40:98:11:72:a7:2e:ce:04:61:fa:95:52:84:a5:3f:5e:
24:f0:00:b7:49:f4:82:d8:3e:93:3d:75:89:40:54:f7:ac:b2:
b0:f9:0b:cf:4d:2c:31:87:1f:6a:77:51:63:8a:ae:71:ca:a9:
6e:82:2e:60:48:7c:8b:0c:e8:ca:96:6e:eb:10:dc:19:a6:2e:
9a:c2:e5:47:62:79:1c:f9:6f:ab:ed:b7:56:1f:96:85:b1:c5:
b8:e0:32:ec:50:bc:a0:5c:30:bd:c8:43:9a:0d:9e:a5:01:14:
b3:74:12:56:43:0b:e9:56:33:3a:23:05:a7:a4:c8:90:eb:46:
94:a2:6d:a5:ab:29:70:d0:db:ab:5a:b5:41:94:e1:27:c8:a9:
76:cf:6a:5d:00:ea:17:d1:81:58:69:8f:ea:15:a9:58:1d:04:
37:33:57:c3:77:63:0d:1c:31:f5:c4:69:0d:6e:48:f2:51:b8:
67:cf:20:57:b2:a1:d9:a8:87:3d:81:a1:13:40:c2:6b:b8:2a:
9d:d1:72:ce:26:b0:57:36:6d:6a:f4:18:8e:fb:67:72:51:f2:
95:56:da:3e:2a:e7:ec:9b:f5:b2:3d:29:ce:8b:66:a2:68:7e:
de:a8:d4:7c:ec:f0:d2:e8:28:a5:06:97:27:ac:be:f4:9d:c3:
85:21:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:33 2026 by rpki-client