Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141126.roa
File: AS141126.roa (raw, json)
Hash identifier: TV+pWHjcn3Bi7kY3YCsN7yYT3pmNqREcLPiFJzlwKT8=
Subject key identifier: F2:25:4E:96:87:E7:5C:23:E8:3F:0D:0B:58:DD:28:A4:FD:38:DF:1A
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 21767EA5595FAAC3A361CA2576717C3AF82E7AE5
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141126.roa
Signing time: Thu 23 Jul 2026 02:47:49 +0000
ROA not before: Thu 23 Jul 2026 02:42:49 +0000
ROA not after: Thu 22 Jul 2027 02:47:49 +0000
asID: 141126
IP address blocks: 103.158.154.0/23 maxlen: 24
103.172.0.0/24 maxlen: 24
203.81.248.0/22 maxlen: 24
203.175.126.0/23 maxlen: 24
2001:df1:d040::/48 maxlen: 48
2001:df5:5980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:76:7e:a5:59:5f:aa:c3:a3:61:ca:25:76:71:7c:3a:f8:2e:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 23 02:42:49 2026 GMT
Not After : Jul 22 02:47:49 2027 GMT
Subject: CN=F2254E9687E75C23E83F0D0B58DD28A4FD38DF1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:37:ac:a6:a6:f5:6c:c7:b9:3a:f1:37:f2:
54:bb:fb:62:cf:68:0d:42:15:58:a0:83:0c:a2:80:
dd:6c:99:f9:1b:29:5c:9c:fd:3e:81:e0:84:f7:36:
06:f4:c9:a5:ac:e2:30:84:0a:70:ea:5c:ff:b6:d4:
91:0d:7a:07:29:92:c7:fb:f5:7b:d3:34:75:11:49:
23:c7:3c:6a:3e:d9:9e:e4:67:3c:93:d5:77:72:eb:
9d:6e:e6:ca:cb:05:1f:49:75:f1:b6:da:f3:fe:98:
f7:28:43:85:c5:2d:eb:6a:6b:ea:4f:76:2b:cf:ef:
82:55:6f:15:e6:0c:e5:c8:ba:f6:cd:8a:d7:aa:ea:
d1:ea:cf:ec:b5:14:2a:71:4d:16:30:0b:60:a2:80:
ef:61:1d:79:55:8b:2c:69:aa:e4:b3:37:7e:74:fa:
cd:b6:b5:c2:95:57:4e:2c:ab:c7:a7:29:dc:3b:9c:
a3:e7:a6:4a:be:cb:40:30:17:2b:7c:06:50:f9:18:
21:74:46:b5:99:bc:a8:98:88:48:5e:f0:f3:5b:9f:
4f:ea:b3:6a:4a:5d:ee:35:10:c6:95:65:18:64:10:
6d:f7:24:c8:f1:55:37:20:95:dd:80:10:a1:cf:39:
b5:6f:b0:a1:26:97:5a:63:47:9b:22:d8:8a:b3:e7:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:4E:96:87:E7:5C:23:E8:3F:0D:0B:58:DD:28:A4:FD:38:DF:1A
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141126.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.154.0/23
103.172.0.0/24
203.81.248.0/22
203.175.126.0/23
IPv6:
2001:df1:d040::/48
2001:df5:5980::/48
Signature Algorithm: sha256WithRSAEncryption
1b:92:8b:53:d9:76:d3:a1:f8:ee:66:df:86:8b:68:36:eb:13:
df:a3:55:92:cb:71:76:ba:b7:77:22:f6:d2:39:40:38:30:5d:
12:48:69:eb:fb:64:b8:79:fb:86:24:c9:57:d5:8a:94:5b:0c:
0a:a5:8c:eb:47:61:bf:39:46:3b:e8:08:de:ea:f1:89:cf:48:
50:1a:0b:bd:5a:c4:0e:78:5f:98:57:58:7f:ea:4d:b5:1c:b1:
4f:48:a0:21:af:84:4b:6c:a2:c1:72:21:9f:a3:2c:db:10:cd:
32:db:b9:db:b6:f3:c2:9e:0e:09:42:80:4a:ec:a9:e8:31:7a:
d9:d2:8f:95:93:4d:c6:3a:df:64:29:d5:87:af:f6:8d:71:da:
3d:5d:3d:a0:09:42:b6:2c:df:7a:fb:36:a3:d9:5e:f5:00:2e:
a0:08:30:7b:aa:a9:01:53:2c:9c:87:e0:69:76:34:56:ee:d4:
fc:01:05:c9:01:7d:ea:df:aa:e6:69:37:7f:e7:bb:9d:b1:16:
29:57:05:08:b5:c3:e5:cb:16:ea:f2:b1:6c:e1:12:c9:e0:8c:
e1:f6:78:74:f7:1e:26:c9:3a:0a:52:da:82:41:de:58:04:7f:
66:de:27:60:dd:3b:3d:65:92:f0:87:1c:3f:70:6b:36:42:5c:
e9:9b:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:05:29 2026 by rpki-client