Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133817.roa
File: AS133817.roa (raw, json)
Hash identifier: CuPq/RBd/4xVwNmpp0W+4VTpk47ER8VJc0o1JDfcKFw=
Subject key identifier: 5B:D9:C8:20:A5:B2:7D:61:96:97:59:27:1F:99:7B:6E:02:BC:94:9F
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6B1EBF77DAB29F60B2380ACE95AD34D6A04910A9
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133817.roa
Signing time: Sun 03 May 2026 01:33:21 +0000
ROA not before: Sun 03 May 2026 01:28:21 +0000
ROA not after: Sun 02 May 2027 01:33:21 +0000
asID: 133817
IP address blocks: 103.53.76.0/22 maxlen: 22
103.53.76.0/22 maxlen: 24
103.85.95.0/24 maxlen: 24
103.105.196.0/23 maxlen: 24
103.144.4.0/24 maxlen: 24
103.149.203.0/24 maxlen: 24
103.162.68.0/24 maxlen: 24
103.173.232.0/24 maxlen: 24
103.186.12.0/24 maxlen: 24
103.187.214.0/23 maxlen: 24
180.131.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1e:bf:77:da:b2:9f:60:b2:38:0a:ce:95:ad:34:d6:a0:49:10:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:28:21 2026 GMT
Not After : May 2 01:33:21 2027 GMT
Subject: CN=5BD9C820A5B27D61969759271F997B6E02BC949F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:87:f3:7e:af:7a:af:34:fe:be:97:f5:f1:
a0:1c:a6:91:51:c0:17:6d:12:5c:bd:ff:2d:a8:68:
b0:61:a6:f7:81:50:cd:c4:2e:c7:c2:9a:69:98:4c:
9c:dd:0b:13:83:30:66:a8:9b:7b:47:ac:2e:62:46:
26:07:ab:34:e9:cd:44:3a:23:fd:04:3b:b1:21:c4:
88:25:de:63:01:a9:ad:8c:90:7e:b9:85:a0:5c:97:
f2:5e:c9:45:25:53:3e:fd:10:16:29:82:f0:96:8c:
d0:14:c5:f6:8e:13:38:57:1f:d3:f2:c8:4c:22:c3:
32:06:5b:7e:f0:dc:97:5f:c4:e7:f3:2f:8d:ab:13:
a2:5b:3c:28:d1:a8:b5:ae:d0:c9:0a:f1:de:d3:a4:
dc:ff:52:81:30:eb:99:33:cf:77:da:f9:f0:2a:94:
c0:07:67:7a:77:4e:e5:25:5a:b8:4f:42:4b:73:c4:
de:67:35:9a:3e:62:f1:6d:b9:c3:ff:3d:71:fe:92:
47:d1:d6:f4:59:ea:8b:68:23:94:0b:5a:eb:70:0c:
4d:54:7e:4d:b0:19:cc:93:c0:3f:fd:7c:f5:ed:fb:
fc:b1:0f:38:07:0f:7a:14:64:64:fa:d1:d4:ca:bd:
49:db:dc:e4:45:6f:8c:e5:d8:85:49:be:55:e7:92:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:C8:20:A5:B2:7D:61:96:97:59:27:1F:99:7B:6E:02:BC:94:9F
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.53.76.0/22
103.85.95.0/24
103.105.196.0/23
103.144.4.0/24
103.149.203.0/24
103.162.68.0/24
103.173.232.0/24
103.186.12.0/24
103.187.214.0/23
180.131.128.0/24
Signature Algorithm: sha256WithRSAEncryption
58:42:b3:cf:5d:63:cb:88:22:fa:c5:46:0c:a6:32:4e:dd:11:
74:8d:91:81:b0:52:cd:38:61:e6:1d:4e:4d:bd:c1:75:54:5d:
f0:e6:f9:2f:d2:f8:60:35:a5:6a:d8:b7:19:46:59:58:6a:f2:
ed:c3:d1:c8:db:89:92:b0:89:f1:11:1b:f2:30:07:02:ac:78:
3f:25:44:8e:43:f6:71:1a:12:a9:35:01:7f:11:c4:c2:99:3c:
a0:7c:1a:76:b6:f1:83:65:73:40:ec:20:f5:9f:48:d0:4a:d0:
42:79:a5:a7:bb:ca:bc:1b:c7:25:2b:5f:08:9f:7e:77:3c:1f:
dd:b7:f0:33:07:57:4b:22:6c:94:1e:98:0e:d5:d9:fb:e6:1f:
5d:cd:eb:d9:5b:3c:56:62:b7:42:eb:08:e6:f7:d3:d6:d9:76:
e8:b0:cc:e2:91:f7:52:3e:1f:b4:31:0e:ed:3f:00:74:0b:6e:
a6:71:86:29:25:e3:d9:4c:d4:6c:c6:2b:45:ef:cf:05:cc:21:
5e:c7:77:2c:0b:de:88:f8:7e:0d:a1:ac:7b:62:d5:22:29:a7:
41:23:41:f7:1e:40:35:df:be:c4:97:95:59:2d:3b:9d:36:a6:
b2:3c:d3:ff:5a:dc:7a:45:ee:58:4e:0a:43:62:7d:81:00:9a:
fe:d1:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:55:45 2026 by rpki-client