Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138089.roa
File: AS138089.roa (raw, json)
Hash identifier: 0bJn1rvUpaGmxauE+Zth4KgvAsCj/CMJ/I1dDvgpIWc=
Subject key identifier: CA:47:92:04:2A:88:F0:E7:C7:85:BE:E2:A7:3C:46:6C:7E:B3:CF:38
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 47AE09CDECA2FAB854E6E4FCD3DEB3239A77BB66
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138089.roa
Signing time: Wed 08 Jul 2026 02:39:36 +0000
ROA not before: Wed 08 Jul 2026 02:34:36 +0000
ROA not after: Wed 07 Jul 2027 02:39:36 +0000
asID: 138089
IP address blocks: 103.131.16.0/22 maxlen: 24
103.131.16.0/23 maxlen: 24
103.131.16.0/24 maxlen: 24
103.131.17.0/24 maxlen: 24
103.158.13.0/24 maxlen: 24
113.192.48.0/24 maxlen: 24
210.87.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ae:09:cd:ec:a2:fa:b8:54:e6:e4:fc:d3:de:b3:23:9a:77:bb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 8 02:34:36 2026 GMT
Not After : Jul 7 02:39:36 2027 GMT
Subject: CN=CA4792042A88F0E7C785BEE2A73C466C7EB3CF38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:7f:28:a5:85:05:d3:c0:4a:e7:e1:57:66:
ae:c4:43:0e:c7:f9:25:ee:27:56:8b:24:fa:84:d9:
1c:7b:20:8b:39:9e:61:b0:22:c5:bd:ba:bf:a5:02:
66:18:c0:f6:9c:02:e0:76:75:a0:86:01:08:e0:27:
7e:83:b6:aa:d7:0a:98:57:1a:1e:bb:e6:f9:aa:36:
e1:f5:74:d6:a6:44:af:fc:af:35:14:e8:b4:75:f1:
d6:8e:7d:3e:35:97:24:5a:f8:fa:f8:43:34:6d:28:
a3:25:4e:58:0e:25:87:4b:57:f5:2e:f6:59:bd:7e:
09:cc:1a:d2:c7:ab:2e:eb:f8:c8:d6:4a:21:bc:ea:
8e:34:8c:96:a1:34:60:4f:d1:ca:32:c1:db:3a:7f:
1f:b0:50:fe:83:ba:2e:e1:c5:83:e4:fe:d7:3c:90:
f3:6d:be:a4:75:a6:4e:cd:7e:87:9f:11:ae:89:f5:
07:9d:5c:f9:3f:18:06:05:ae:55:88:69:94:d4:dc:
62:e1:bb:da:5a:a5:89:38:e4:f1:5e:29:7c:4b:90:
aa:38:d6:d0:5c:cd:50:ef:8c:d5:26:6d:25:b6:14:
f0:bf:21:a2:61:15:fa:36:67:8a:22:f7:4e:c0:ce:
00:d2:ca:37:4a:41:d6:63:7e:26:14:b6:ae:31:a9:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:92:04:2A:88:F0:E7:C7:85:BE:E2:A7:3C:46:6C:7E:B3:CF:38
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.16.0/22
103.158.13.0/24
113.192.48.0/24
210.87.74.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4b:9c:9d:c2:c5:1b:d8:5f:3c:eb:a6:67:88:85:9d:02:41:
a8:6d:60:6c:0c:a2:e8:c1:e5:95:70:cc:0a:93:0f:6f:a1:d2:
86:14:df:df:ed:6d:53:be:a3:37:a5:30:52:cc:cf:dd:06:50:
c2:2f:a2:78:e4:2f:8a:1c:90:cf:f3:4d:0a:58:47:0b:d6:28:
9e:da:82:f3:d1:31:06:53:d1:67:44:bf:4b:3b:0d:f4:70:4b:
3b:04:9f:8b:29:35:d3:25:5d:00:c7:be:d8:2c:6a:7c:0f:86:
4d:ce:0c:c5:a3:ed:3e:59:4a:d2:35:a1:e2:4a:35:fc:55:73:
3b:a8:f3:5d:c8:bd:fb:3d:79:89:35:ad:c0:e2:5b:4e:5a:20:
ff:72:cd:aa:05:5e:bc:ac:30:e7:e1:ac:4f:8e:3c:fb:14:1a:
bc:b3:e7:0a:da:86:e0:de:3f:4b:c1:ea:59:6b:89:5d:54:6b:
46:86:0f:9b:30:e5:17:c4:ce:0b:2a:99:1b:e7:28:27:ba:6a:
1a:27:72:1d:ac:f5:3c:3c:74:74:89:c6:f0:95:a2:09:08:f6:
bc:b4:28:dd:06:3c:06:a5:06:90:bd:b5:0f:83:d3:67:f4:fb:
3a:1d:e9:f2:15:5b:da:4c:0a:ed:b5:54:6d:df:1e:7a:33:bd:
20:bd:93:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:06:05 2026 by rpki-client