Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141674.roa
File: AS141674.roa (raw, json)
Hash identifier: vJB1eGdy+ZMwPet14AWgXcKFM7OOB4ExdZ9szizYxdo=
Subject key identifier: 05:9B:AC:08:DE:CE:D8:EF:0B:32:5D:BC:C4:FB:0A:4A:69:2F:91:81
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 36A5F372D82E231FFB99A44BF064225D8CBE5623
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141674.roa
Signing time: Sun 03 May 2026 03:43:29 +0000
ROA not before: Sun 03 May 2026 03:38:29 +0000
ROA not after: Sun 02 May 2027 03:43:29 +0000
asID: 141674
IP address blocks: 103.163.80.0/23 maxlen: 24
103.171.244.0/23 maxlen: 24
103.177.106.0/23 maxlen: 24
2001:df2:38c0::/48 maxlen: 48
2001:df2:78c0::/48 maxlen: 48
2001:df2:8440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a5:f3:72:d8:2e:23:1f:fb:99:a4:4b:f0:64:22:5d:8c:be:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 03:38:29 2026 GMT
Not After : May 2 03:43:29 2027 GMT
Subject: CN=059BAC08DECED8EF0B325DBCC4FB0A4A692F9181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:1f:55:4a:b0:5f:98:cf:64:2d:f5:42:87:
cf:51:b3:6a:29:e9:e2:d0:c3:44:ec:6e:c9:c7:93:
39:f2:24:ed:bf:51:47:ae:2a:ef:1b:27:e1:1c:8d:
1c:b3:a3:a8:43:b7:00:a4:92:85:16:b3:db:75:96:
dd:15:bd:dc:2f:a4:0a:d3:75:76:e1:6b:3e:ed:79:
d9:3c:64:30:f4:03:22:13:e6:81:6a:af:f6:45:b3:
a8:d2:64:3a:0d:07:34:47:f3:ab:3c:19:c6:7a:cc:
7f:08:94:df:c7:c9:a5:5c:6c:fb:7b:21:b9:bb:6f:
22:dc:80:d1:aa:ba:15:10:da:ae:60:4a:67:57:46:
3a:44:f4:16:2a:e6:e2:34:55:b5:37:cb:ec:3f:fe:
bc:73:1b:8f:d7:aa:67:47:50:24:07:81:a1:69:85:
42:55:56:96:94:22:59:d9:58:6f:93:25:16:c4:af:
f3:0f:cb:e2:40:ae:66:4b:4c:8f:65:70:1c:80:d5:
ce:51:bc:f7:53:7b:38:86:89:51:21:ed:d5:a7:f1:
c1:85:ac:85:5e:f1:a5:73:b5:29:d2:e3:a7:ea:16:
5d:64:1c:f4:c9:a7:96:ef:64:53:5f:d7:29:4a:70:
30:f2:7d:5f:d2:62:e4:e9:ab:72:7a:47:70:9a:fe:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:AC:08:DE:CE:D8:EF:0B:32:5D:BC:C4:FB:0A:4A:69:2F:91:81
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141674.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.80.0/23
103.171.244.0/23
103.177.106.0/23
IPv6:
2001:df2:38c0::/48
2001:df2:78c0::/48
2001:df2:8440::/48
Signature Algorithm: sha256WithRSAEncryption
3f:65:0b:09:58:68:68:5c:be:9b:a5:d0:61:bc:35:f2:54:f2:
da:ee:e9:20:12:27:17:95:69:3f:38:ec:f7:87:86:cb:5f:2f:
2e:80:b3:1d:89:8b:db:52:73:03:36:b1:c7:ef:09:b3:d6:b5:
3d:b5:56:ca:8d:20:11:ef:14:ff:a7:b5:d5:fe:8d:d1:31:4e:
d3:04:ae:f9:08:21:1a:ed:f8:8b:8b:0c:bd:13:66:70:0a:10:
d5:f2:1b:0e:60:a2:36:c0:b5:5e:18:99:d2:0b:93:f9:76:48:
ef:02:f3:16:4d:6c:26:be:0f:76:24:a0:b6:09:1a:0d:98:c9:
9e:e8:c5:06:52:b7:5f:1c:3b:8c:1c:5f:5a:1f:c3:5a:3f:98:
e8:a1:1b:3a:35:b4:25:d0:6c:b9:8a:28:e8:41:2d:38:42:7d:
35:8f:c6:11:05:ee:d7:f6:87:7a:53:91:ff:75:a1:9c:5c:79:
aa:68:50:83:63:ac:56:ee:57:03:81:e1:d2:0e:13:78:b7:70:
10:28:7d:6f:20:ee:fd:6a:51:fb:f5:66:86:e5:3c:a8:3d:fb:
08:ec:e6:bb:e7:f7:4f:e5:0f:b9:85:66:1c:49:e4:a8:24:44:
00:52:14:43:99:e6:1b:c0:c6:f4:03:52:6b:c6:ef:88:3d:ca:
e8:08:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:55:44 2026 by rpki-client