Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149359.roa
File: AS149359.roa (raw, json)
Hash identifier: sEn5hG1tjs1VOwv0B3fOYoSqGLlGW9MqUccSquMM4mA=
Subject key identifier: DF:DD:6D:8E:D4:31:BD:15:73:56:C4:5E:FF:EE:C8:85:E8:03:61:DC
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5E5A6EEED2A62868BC1988F0DED3373E024421C2
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149359.roa
Signing time: Tue 22 Sep 2026 10:34:18 +0000
ROA not before: Tue 22 Sep 2026 10:29:18 +0000
ROA not after: Tue 21 Sep 2027 10:34:18 +0000
asID: 149359
IP address blocks: 49.0.26.0/23 maxlen: 24
103.19.78.0/23 maxlen: 24
103.169.0.0/23 maxlen: 24
103.176.107.0/24 maxlen: 24
103.180.118.0/23 maxlen: 24
103.215.71.0/24 maxlen: 24
2401:5ee0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5a:6e:ee:d2:a6:28:68:bc:19:88:f0:de:d3:37:3e:02:44:21:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Sep 22 10:29:18 2026 GMT
Not After : Sep 21 10:34:18 2027 GMT
Subject: CN=DFDD6D8ED431BD157356C45EFFEEC885E80361DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:d5:23:7e:ba:3d:de:b1:1d:82:ca:8a:34:
96:fb:74:a1:a5:07:9f:62:b5:d2:f6:7d:a7:ec:e0:
67:3a:45:db:41:c0:e5:f3:d8:81:b5:79:ba:8f:a8:
83:16:8d:1a:59:16:81:09:07:e8:39:2d:4d:db:cf:
1c:20:5c:46:74:5e:6c:e4:ab:8c:a7:f9:b7:62:ae:
d8:01:31:1c:5e:c3:7f:a9:b5:9e:4d:f3:4a:7e:7e:
50:fb:68:3e:59:d9:a1:38:4a:d0:1e:7b:bf:b0:48:
65:a2:76:15:62:97:3b:25:ab:3f:63:0a:2a:d2:10:
24:3f:7d:32:42:b3:a7:8e:69:5b:69:73:86:e7:b4:
06:b4:b5:6c:e3:8e:f7:24:2b:ca:ad:4b:56:b3:57:
25:3d:c1:42:a0:cc:18:26:59:a5:6e:eb:9d:d3:9d:
56:df:26:6e:a4:0c:45:71:bf:c8:8a:48:8d:61:14:
26:d3:d8:08:6c:a8:9a:4e:6d:eb:22:bb:30:e3:22:
98:89:d1:e3:ae:d9:ff:30:ce:f5:17:69:ec:fe:e1:
8e:86:f9:4d:79:77:9b:61:71:34:d7:7c:47:9c:ac:
76:e7:a4:e7:6f:c3:d6:ea:e7:8c:1b:6c:03:22:f5:
fd:46:b3:bc:b2:43:3b:9c:bc:4a:7c:eb:84:cf:64:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:6D:8E:D4:31:BD:15:73:56:C4:5E:FF:EE:C8:85:E8:03:61:DC
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.0.26.0/23
103.19.78.0/23
103.169.0.0/23
103.176.107.0/24
103.180.118.0/23
103.215.71.0/24
IPv6:
2401:5ee0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:c9:98:ae:5d:61:ad:20:63:2d:61:8d:35:7e:75:b9:95:5c:
a9:07:9a:96:ef:e5:ee:ed:07:12:c4:0f:ed:2d:21:82:93:a6:
96:ec:e9:0c:15:9d:3b:6b:b0:0e:07:92:6d:0f:db:57:eb:c5:
fe:85:02:79:23:5a:ff:c3:3d:75:e1:b5:17:0b:02:d7:96:4e:
d0:a2:57:d0:3a:3c:13:a5:c3:b3:0f:32:97:66:58:26:b7:21:
0f:f6:03:af:6d:2e:f0:5b:61:a8:41:bf:a4:a7:09:66:3d:a8:
30:95:4c:4a:ae:af:d7:ed:ba:11:42:81:9e:71:64:af:ed:f2:
96:a4:3f:25:d3:94:16:eb:a9:9e:ef:1d:1d:33:96:d7:26:13:
97:47:70:04:11:32:6d:01:75:8e:03:16:79:54:9a:39:64:d7:
63:4b:81:de:7c:3f:5b:fe:aa:8d:0b:c8:76:76:40:b9:46:72:
b7:59:28:36:3d:d9:bb:4d:12:e7:e5:6d:3d:27:f0:98:9b:5b:
79:7b:5a:73:bb:4c:66:ea:49:ab:34:43:c5:e1:72:1f:8b:9f:
87:0b:98:f8:6e:21:ca:21:d0:4b:66:ac:07:ef:3e:a4:c2:c4:
59:a1:cd:f8:ee:9b:21:6b:81:98:ca:1e:e0:95:b2:48:f2:ce:
bc:7b:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:45:19 2026 by rpki-client