Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
File: AS136052.roa (raw, json)
Hash identifier: TfmpT2seplaILWMhroZgyCHrBXQsKG+MZu9D3EwELG4=
Subject key identifier: 8B:CD:3A:10:99:18:4C:94:B3:A6:53:D3:F6:B8:C3:20:22:6D:A4:2E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 171C01383D2EF533F250083DFAF9FFC760C8B2F4
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
Signing time: Mon 13 Jul 2026 02:25:19 +0000
ROA not before: Mon 13 Jul 2026 02:20:19 +0000
ROA not after: Mon 12 Jul 2027 02:25:19 +0000
asID: 136052
IP address blocks: 27.112.78.0/23 maxlen: 24
27.112.78.0/24 maxlen: 24
103.15.226.0/24 maxlen: 24
103.23.198.0/23 maxlen: 24
103.28.52.0/23 maxlen: 23
103.28.52.0/23 maxlen: 24
103.31.38.0/23 maxlen: 24
103.49.238.0/23 maxlen: 24
103.52.114.0/23 maxlen: 24
103.54.170.0/24 maxlen: 24
103.55.36.0/23 maxlen: 24
103.55.36.0/24 maxlen: 24
103.55.37.0/24 maxlen: 24
103.55.38.0/23 maxlen: 24
103.55.38.0/24 maxlen: 24
103.55.39.0/24 maxlen: 24
103.59.94.0/23 maxlen: 23
103.59.94.0/23 maxlen: 24
103.63.24.0/23 maxlen: 24
103.67.78.0/23 maxlen: 23
103.67.78.0/23 maxlen: 24
103.76.120.0/23 maxlen: 23
103.76.120.0/23 maxlen: 24
103.82.92.0/23 maxlen: 24
103.117.56.0/23 maxlen: 24
103.123.62.0/23 maxlen: 23
103.123.62.0/23 maxlen: 24
103.139.192.0/23 maxlen: 24
103.146.202.0/23 maxlen: 23
103.171.18.0/24 maxlen: 24
103.171.84.0/23 maxlen: 24
103.171.84.0/24 maxlen: 24
103.171.85.0/24 maxlen: 24
103.172.204.0/23 maxlen: 24
103.174.114.0/23 maxlen: 24
103.176.76.0/24 maxlen: 24
103.176.78.0/23 maxlen: 24
103.179.56.0/23 maxlen: 24
103.179.254.0/23 maxlen: 24
103.181.142.0/23 maxlen: 24
103.183.74.0/23 maxlen: 24
103.186.0.0/23 maxlen: 23
103.191.92.0/23 maxlen: 24
103.193.176.0/23 maxlen: 24
103.193.178.0/23 maxlen: 24
103.214.112.0/24 maxlen: 24
103.214.113.0/24 maxlen: 24
103.217.144.0/23 maxlen: 24
103.217.226.0/23 maxlen: 24
103.226.138.0/23 maxlen: 24
103.236.201.0/24 maxlen: 24
103.242.10.0/23 maxlen: 24
103.250.208.0/23 maxlen: 24
116.193.190.0/23 maxlen: 24
203.145.34.0/23 maxlen: 23
203.145.34.0/23 maxlen: 24
203.145.35.0/24 maxlen: 24
210.79.190.0/24 maxlen: 24
210.79.191.0/24 maxlen: 24
2001:df7:7400::/48 maxlen: 48
2401:8160::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1c:01:38:3d:2e:f5:33:f2:50:08:3d:fa:f9:ff:c7:60:c8:b2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 13 02:20:19 2026 GMT
Not After : Jul 12 02:25:19 2027 GMT
Subject: CN=8BCD3A1099184C94B3A653D3F6B8C320226DA42E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:bf:ea:9e:46:e2:c3:8e:4a:cf:4b:33:91:
ee:26:75:b2:37:66:a7:54:a9:29:ed:cb:5c:37:41:
3f:0d:c9:b2:4b:84:bc:83:c5:00:67:a3:c1:fc:30:
3b:e1:7e:db:90:0a:7e:4b:59:b6:5e:05:69:89:ff:
20:99:25:65:67:f5:04:bc:76:ff:40:4e:47:3e:80:
16:1a:76:1a:95:ba:a4:c3:87:68:df:28:5e:89:71:
35:50:3d:b7:2d:e8:d5:d8:e4:f4:6f:48:38:51:7e:
e0:fd:23:c0:74:e3:f2:ea:b6:8a:dc:c3:f1:b0:34:
c2:2b:e7:b9:4d:cc:cd:2e:dd:62:2a:5d:7c:83:77:
a8:ad:b2:19:a9:b9:fb:d8:5e:ad:5d:66:11:9c:8a:
6f:56:f0:9e:0a:44:10:09:cc:97:4c:4e:47:1a:bf:
f1:00:45:fa:5d:b8:9d:37:32:96:fa:75:34:eb:6d:
ef:71:1a:14:d3:59:32:3a:f3:35:f3:d6:47:da:d2:
81:36:7f:18:ff:c6:f9:48:bf:e7:72:15:41:72:f6:
42:14:b0:7a:4a:2d:4d:8b:6d:a8:7d:ed:bf:4a:08:
bf:db:07:7e:e5:2e:c3:50:0f:1f:7a:28:c9:43:ab:
63:9d:e1:da:cc:2f:73:5e:20:2d:61:88:b9:50:4a:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CD:3A:10:99:18:4C:94:B3:A6:53:D3:F6:B8:C3:20:22:6D:A4:2E
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.78.0/23
103.15.226.0/24
103.23.198.0/23
103.28.52.0/23
103.31.38.0/23
103.49.238.0/23
103.52.114.0/23
103.54.170.0/24
103.55.36.0/22
103.59.94.0/23
103.63.24.0/23
103.67.78.0/23
103.76.120.0/23
103.82.92.0/23
103.117.56.0/23
103.123.62.0/23
103.139.192.0/23
103.146.202.0/23
103.171.18.0/24
103.171.84.0/23
103.172.204.0/23
103.174.114.0/23
103.176.76.0/24
103.176.78.0/23
103.179.56.0/23
103.179.254.0/23
103.181.142.0/23
103.183.74.0/23
103.186.0.0/23
103.191.92.0/23
103.193.176.0/22
103.214.112.0/23
103.217.144.0/23
103.217.226.0/23
103.226.138.0/23
103.236.201.0/24
103.242.10.0/23
103.250.208.0/23
116.193.190.0/23
203.145.34.0/23
210.79.190.0/23
IPv6:
2001:df7:7400::/48
2401:8160::/32
Signature Algorithm: sha256WithRSAEncryption
51:9d:ea:5e:1e:5a:d1:0e:3a:5c:e7:89:76:bb:70:c2:3f:62:
20:6c:1b:ac:86:18:53:84:37:3d:f5:3c:ba:98:66:67:bb:64:
4a:c9:fb:be:2c:0a:35:a8:da:31:9f:7a:bd:1a:c5:8c:c6:52:
70:99:d9:07:3b:94:51:a1:ab:a8:d4:c1:f0:29:82:dd:c3:2c:
92:67:7c:f7:e0:dc:3f:5a:38:da:db:31:d7:8d:e7:5a:31:6e:
2b:94:a1:41:2c:06:76:ec:91:06:8c:5f:bf:7e:3c:4e:9c:f7:
0c:5d:ec:cc:00:c8:51:05:85:02:ba:78:b3:ae:8c:84:aa:06:
33:07:88:6e:58:e6:cb:71:d2:b2:1a:24:b6:49:5b:96:23:62:
d8:eb:65:29:6b:3c:9b:02:1a:53:5d:9b:f9:65:c8:20:bb:cb:
4f:0a:04:ee:04:47:46:89:96:64:f6:1a:74:c5:5d:63:03:d7:
11:a3:48:0b:66:c6:fb:e9:fb:d3:05:8d:cf:9c:b5:4d:17:43:
2a:88:ff:0a:4d:0a:7f:e6:7e:d2:23:b0:65:01:fd:37:d4:9f:
9b:2a:67:49:de:b6:80:73:e4:31:e9:4c:da:64:a2:a3:de:d7:
da:c2:af:0e:a1:6b:ce:f8:7b:e0:c6:45:c9:4c:bc:2d:c0:d3:
35:51:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:50:13 2026 by rpki-client