Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149746.roa
File: AS149746.roa (raw, json)
Hash identifier: /3aM2B0nzE7ngsr9+H3yI+XoGfhkSzxeVuxWmCB/PN4=
Subject key identifier: 6B:F2:DF:9A:95:CA:30:46:A0:B4:E9:49:19:B9:11:FA:BD:44:94:C1
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 218C5C915EAD588808F147982DD07ACA6F84B233
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149746.roa
Signing time: Sun 03 May 2026 01:27:40 +0000
ROA not before: Sun 03 May 2026 01:22:40 +0000
ROA not after: Sun 02 May 2027 01:27:40 +0000
asID: 149746
IP address blocks: 43.252.156.0/24 maxlen: 24
43.252.157.0/24 maxlen: 24
43.252.158.0/24 maxlen: 24
43.252.159.0/24 maxlen: 24
49.128.178.0/24 maxlen: 24
103.17.245.0/24 maxlen: 24
103.17.246.0/24 maxlen: 24
103.17.247.0/24 maxlen: 24
103.189.62.0/24 maxlen: 24
103.189.63.0/24 maxlen: 24
103.247.121.0/24 maxlen: 24
103.255.242.0/24 maxlen: 24
111.68.28.0/24 maxlen: 24
112.78.38.0/24 maxlen: 24
116.254.115.0/24 maxlen: 24
119.2.48.0/24 maxlen: 24
119.2.49.0/24 maxlen: 24
119.2.51.0/24 maxlen: 24
202.46.152.0/22 maxlen: 24
202.46.152.0/24 maxlen: 24
202.46.153.0/24 maxlen: 24
202.46.154.0/24 maxlen: 24
202.46.155.0/24 maxlen: 24
2400:e660::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:8c:5c:91:5e:ad:58:88:08:f1:47:98:2d:d0:7a:ca:6f:84:b2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:22:40 2026 GMT
Not After : May 2 01:27:40 2027 GMT
Subject: CN=6BF2DF9A95CA3046A0B4E94919B911FABD4494C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:67:6f:1f:30:65:d9:84:90:c8:ad:69:d5:
31:03:82:5c:a2:53:8e:6e:ac:7c:c2:5c:78:6f:ec:
4a:4b:88:48:a3:09:42:f5:f0:da:6b:a0:bf:d5:50:
e0:06:97:32:b9:e9:22:b3:82:ac:43:3a:f8:c7:62:
b9:53:6a:48:06:50:ce:b1:cb:a6:23:83:38:d8:f1:
a8:1c:7a:56:e6:67:6f:a8:7d:b7:17:ca:9e:0e:ca:
8c:81:dd:c8:a6:58:4f:bb:a8:25:27:7e:c2:03:55:
8d:f5:42:42:52:d8:b3:ca:25:ad:f2:9a:4b:3d:32:
33:7b:c6:03:07:8b:ef:ad:8d:cd:2f:a4:83:18:8e:
fe:cb:88:48:07:cc:6d:85:8d:eb:61:6f:c0:e9:aa:
82:ae:09:28:5d:3c:22:97:94:d9:13:ad:e8:72:66:
34:c3:c1:b7:81:83:3f:aa:2c:a6:2c:0d:2b:29:e4:
2a:88:42:16:db:51:6d:16:83:c9:9a:a2:a2:49:c6:
b9:9e:e9:38:a4:cb:ca:f9:10:63:a6:e5:88:9c:de:
83:95:74:83:f4:61:40:d9:07:fd:fe:77:74:ce:0b:
9c:26:10:a8:74:59:eb:8c:d1:d1:51:fe:b4:9e:ef:
28:04:0c:ab:5b:7a:28:a8:12:85:c6:20:84:2d:16:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:DF:9A:95:CA:30:46:A0:B4:E9:49:19:B9:11:FA:BD:44:94:C1
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.156.0/22
49.128.178.0/24
103.17.245.0-103.17.247.255
103.189.62.0/23
103.247.121.0/24
103.255.242.0/24
111.68.28.0/24
112.78.38.0/24
116.254.115.0/24
119.2.48.0/23
119.2.51.0/24
202.46.152.0/22
IPv6:
2400:e660::/32
Signature Algorithm: sha256WithRSAEncryption
0c:eb:e9:6f:66:bd:85:80:c1:be:69:59:e4:38:69:1a:2f:d8:
68:ab:1a:b1:9b:c9:1d:12:0e:89:6e:90:46:a9:ec:10:07:05:
6b:04:38:da:b7:d2:28:2f:4b:7f:1c:73:d2:86:e2:b1:d7:9d:
ab:08:a8:a0:9c:a0:79:82:3f:76:8e:62:5a:3a:f7:a0:fc:75:
85:d8:5e:42:3b:02:bb:ec:00:3e:ef:52:15:fe:7d:22:fa:07:
ae:69:eb:2e:74:ee:94:3f:fe:2c:bd:32:e7:a9:c6:ca:29:0c:
cc:56:81:88:9f:08:58:82:46:36:b2:98:5b:4f:b4:5e:4a:5b:
d5:1a:f8:c2:5f:1c:4f:5b:b1:4e:a5:ac:53:f3:8b:ed:c3:f8:
7f:4f:13:92:2d:c6:1d:0c:0c:ba:df:8b:c7:21:f9:7f:25:2e:
66:be:a0:81:0a:fe:fc:7e:4c:b9:2b:89:8c:2d:2e:c3:ce:66:
b6:c9:99:4c:00:6e:0c:d4:09:64:54:0b:59:e1:0f:28:0f:1f:
8a:e0:b4:67:dd:ee:13:4d:57:ad:7b:0c:f3:51:fd:15:f1:af:
0c:b2:7a:46:bc:17:45:bd:72:a5:28:92:3f:46:54:27:d0:3d:
5d:5c:00:17:5b:66:b5:6f:ba:db:11:f4:5b:e4:95:ed:a5:86:
c7:d8:38:bd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIYxckV6tWIgI8UeYLdB6ym+EsjMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjI0MFoX
DTI3MDUwMjAxMjc0MFowMzExMC8GA1UEAxMoNkJGMkRGOUE5NUNBMzA0NkEwQjRF
OTQ5MTlCOTExRkFCRDQ0OTRDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANOVZ28fMGXZhJDIrWnVMQOCXKJTjm6sfMJceG/sSkuISKMJQvXw2mugv9VQ
4AaXMrnpIrOCrEM6+MdiuVNqSAZQzrHLpiODONjxqBx6VuZnb6h9txfKng7KjIHd
yKZYT7uoJSd+wgNVjfVCQlLYs8olrfKaSz0yM3vGAweL762NzS+kgxiO/suISAfM
bYWN62FvwOmqgq4JKF08IpeU2ROt6HJmNMPBt4GDP6ospiwNKynkKohCFttRbRaD
yZqioknGuZ7pOKTLyvkQY6bliJzeg5V0g/RhQNkH/f53dM4LnCYQqHRZ64zR0VH+
tJ7vKAQMq1t6KKgShcYghC0WFh0CAwEAAaOCAiUwggIhMB0GA1UdDgQWBBRr8t+a
lcowRqC06UkZuRH6vUSUwTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ5NzQ2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIA
ATBQAwQCK/ycAwQAMYCyMAwDBABnEfUDBANnEfADBAFnvT4DBABn93kDBABn//ID
BABvRBwDBABwTiYDBAB0/nMDBAF3AjADBAB3AjMDBALKLpgwDQQCAAIwBwMFACQA
5mAwDQYJKoZIhvcNAQELBQADggEBAAzr6W9mvYWAwb5pWeQ4aRov2GirGrGbyR0S
DolukEap7BAHBWsEONq30igvS38cc9KG4rHXnasIqKCcoHmCP3aOYlo696D8dYXY
XkI7ArvsAD7vUhX+fSL6B65p6y507pQ//iy9MuepxsopDMxWgYifCFiCRjaymFtP
tF5KW9Ua+MJfHE9bsU6lrFPzi+3D+H9PE5Itxh0MDLrfi8ch+X8lLma+oIEK/vx+
TLkriYwtLsPOZrbJmUwAbgzUCWRUC1nhDygPH4rgtGfd7hNNV617DPNR/RXxrwyy
eka8F0W9cqUokj9GVCfQPV1cABdbZrVvutsR9Fvkle2lhsfYOL0=
-----END CERTIFICATE-----
Generated at Tue May 12 22:42:25 2026 by rpki-client