Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS17451.roa
File: AS17451.roa (raw, json)
Hash identifier: StnmiW2NFtcBLakyjLbE1nBsz4j9K3XGmHgG3MQ8Hd0=
Subject key identifier: BC:85:EE:3B:60:63:99:07:C0:65:B4:27:44:C9:3F:C1:96:9B:C7:F4
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 2820989FC6C8BA2227DA77CFF4A1D0F38D927599
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17451.roa
Signing time: Mon 20 Jul 2026 03:20:27 +0000
ROA not before: Mon 20 Jul 2026 03:15:27 +0000
ROA not after: Mon 19 Jul 2027 03:20:27 +0000
asID: 17451
IP address blocks: 2404:8000:79::/48 maxlen: 48
2404:8000:103c::/48 maxlen: 48
2404:8000:103d::/48 maxlen: 48
2404:8000:103e::/48 maxlen: 48
2404:8000:103f::/48 maxlen: 48
2404:8000:1058::/48 maxlen: 48
2404:8000:1059::/48 maxlen: 48
2404:8000:105c::/48 maxlen: 48
2404:8000:105d::/48 maxlen: 48
2404:8000:105e::/48 maxlen: 48
2404:8000:105f::/48 maxlen: 48
2404:8000:1064::/48 maxlen: 48
2404:8000:1065::/48 maxlen: 48
2404:8000:1067::/48 maxlen: 48
2404:8000:1068::/48 maxlen: 48
2404:8000:1071::/48 maxlen: 48
2404:8000:1072::/48 maxlen: 48
2404:8000:1073::/48 maxlen: 48
2404:8000:1430::/44 maxlen: 48
2404:8000:1440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:20:98:9f:c6:c8:ba:22:27:da:77:cf:f4:a1:d0:f3:8d:92:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 20 03:15:27 2026 GMT
Not After : Jul 19 03:20:27 2027 GMT
Subject: CN=BC85EE3B60639907C065B42744C93FC1969BC7F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:75:25:32:74:32:30:7a:3b:7e:ad:d4:07:
12:be:8b:6c:ba:4a:f8:57:66:09:1c:71:4a:3d:82:
fc:fe:1b:f1:4b:5e:46:28:83:b1:56:c7:43:21:ec:
62:f6:52:a1:33:c0:55:bd:b1:5e:b9:0d:4b:05:5e:
c4:c9:a1:95:54:ea:94:a1:f5:f5:fc:a0:98:4f:6c:
94:b7:b2:9d:79:21:ff:d9:2a:b6:cd:62:46:42:aa:
9f:6d:39:03:b6:95:72:fa:0f:21:38:67:95:02:35:
9f:83:59:c0:ef:fc:75:95:91:46:01:9e:dd:3c:18:
ed:b6:d1:65:64:28:de:e0:49:22:c7:0a:ab:8e:7b:
33:cf:79:18:d9:73:94:c2:bf:eb:89:24:4b:41:15:
e1:a3:60:4d:50:d5:ae:f2:c6:9a:b8:30:2f:a8:2f:
df:ad:bb:dd:38:9f:ff:ca:14:6d:da:c6:aa:9b:ad:
22:7f:59:2f:ac:7f:d6:72:89:c9:e3:e1:60:c3:10:
41:90:2a:29:63:e9:e7:8b:6a:e9:81:64:ac:12:91:
0c:33:2c:e3:42:4a:99:c4:b3:27:dd:82:51:7c:12:
70:92:5d:65:bb:27:c9:f1:b3:30:f0:7d:3c:f1:0d:
57:8a:fd:23:45:0f:5b:49:f0:17:90:f8:2d:a8:25:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:85:EE:3B:60:63:99:07:C0:65:B4:27:44:C9:3F:C1:96:9B:C7:F4
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:8000:79::/48
2404:8000:103c::/46
2404:8000:1058::/47
2404:8000:105c::/46
2404:8000:1064::/47
2404:8000:1067::-2404:8000:1068:ffff:ffff:ffff:ffff:ffff
2404:8000:1071::-2404:8000:1073:ffff:ffff:ffff:ffff:ffff
2404:8000:1430::-2404:8000:144f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:14:f0:bd:86:0f:2f:f1:a7:ee:f0:1f:63:f9:13:39:e3:ab:
c7:55:11:0b:d2:51:db:81:12:00:f7:3d:af:55:dc:42:cd:f2:
06:1f:6a:7f:af:ae:04:55:c1:37:8b:31:65:5e:eb:a0:0d:7d:
64:2c:45:63:55:70:96:d8:2d:54:da:1d:15:22:5c:3e:a4:68:
47:17:33:be:c8:8a:dc:4d:54:70:b0:32:b5:53:a5:d4:26:0c:
c2:0a:67:6e:68:fc:73:d7:1b:9f:cc:cd:9a:8d:68:36:69:20:
af:ec:ef:36:8f:4c:45:c3:c0:df:3e:2b:e6:fb:67:0a:ad:67:
86:b4:6b:c8:0e:d7:c3:2e:05:43:b3:7f:fb:2b:38:31:79:51:
ea:61:ca:69:2a:4a:21:30:9d:1d:7c:c0:2b:10:60:17:66:40:
80:ff:f3:34:00:2c:61:48:6e:e6:84:09:da:86:16:cb:9f:44:
75:00:61:df:27:2a:cd:b9:df:72:2f:ce:1f:fb:42:11:d8:df:
0b:d6:42:de:ae:6b:df:0e:71:92:a6:9c:f3:92:65:fc:f0:c0:
89:6e:c8:d5:e2:6f:ab:28:0e:5a:f0:82:49:12:02:55:3c:99:
2d:2b:3f:8b:6f:45:67:40:8a:73:10:dc:b1:2e:3b:ac:11:4a:
da:d6:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:26 2026 by rpki-client