Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23679.roa
File: AS23679.roa (raw, json)
Hash identifier: jv2rorfiedOIt6y0+UzWg49OlRJlIrKq8z0Zun5TDbs=
Subject key identifier: AC:0C:6D:7A:93:23:70:C5:30:0F:0B:02:E3:33:BD:38:7C:4B:74:DB
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 2FF190C4694E7172B88945A086AB5CAEF9892171
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23679.roa
Signing time: Wed 15 Jul 2026 03:44:05 +0000
ROA not before: Wed 15 Jul 2026 03:39:05 +0000
ROA not after: Wed 14 Jul 2027 03:44:05 +0000
asID: 23679
IP address blocks: 27.121.112.0/23 maxlen: 24
43.230.128.0/22 maxlen: 24
45.249.217.0/24 maxlen: 24
103.31.46.0/24 maxlen: 24
103.114.76.0/24 maxlen: 24
103.114.77.0/24 maxlen: 24
103.114.78.0/24 maxlen: 24
103.157.136.0/23 maxlen: 24
103.196.116.0/24 maxlen: 24
110.232.65.0/24 maxlen: 24
110.232.68.0/23 maxlen: 24
110.232.70.0/24 maxlen: 24
110.232.91.0/24 maxlen: 24
124.158.116.0/23 maxlen: 24
125.253.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f1:90:c4:69:4e:71:72:b8:89:45:a0:86:ab:5c:ae:f9:89:21:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 15 03:39:05 2026 GMT
Not After : Jul 14 03:44:05 2027 GMT
Subject: CN=AC0C6D7A932370C5300F0B02E333BD387C4B74DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:37:b3:8a:76:63:07:ed:95:3c:40:9b:48:
64:dc:1b:6f:d9:7a:a0:2d:b1:64:ce:b9:e8:2e:fb:
5b:ad:cd:64:82:bf:f7:d9:09:8e:22:10:c7:12:c1:
73:93:ab:57:df:fe:7f:ef:1d:7e:ec:7c:a6:be:f2:
99:50:e2:4a:28:48:b7:b3:07:34:cd:c6:fa:b4:7a:
0d:33:79:41:85:4f:72:bf:6c:d1:9f:5d:da:21:4d:
55:5f:8b:d8:a8:7e:a4:fa:3d:95:5a:13:25:41:f2:
5b:2e:0d:5b:d4:0a:95:0f:aa:d1:9f:5e:c7:a2:d5:
8f:3e:cc:b3:d9:06:d9:13:2c:4c:ea:b7:db:f9:36:
9e:ed:32:cc:c1:cb:b9:ab:b0:7f:31:ee:20:b6:84:
b2:51:7e:fa:42:a6:94:fb:37:45:3c:69:ba:1b:ef:
b4:6d:b7:eb:bc:86:68:a7:7a:f3:24:10:75:3b:fc:
b3:61:83:8b:f3:1b:3c:32:14:16:23:b5:66:9e:8c:
9c:c4:2c:f9:88:b5:85:6d:c6:db:15:fe:b7:77:84:
85:b7:8c:02:9a:1c:62:f1:6c:d6:4b:6b:b7:09:55:
b9:55:21:78:46:e0:c0:09:99:56:34:24:f9:bd:de:
fc:70:11:55:98:bb:bb:06:b4:81:67:49:af:86:60:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:6D:7A:93:23:70:C5:30:0F:0B:02:E3:33:BD:38:7C:4B:74:DB
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.121.112.0/23
43.230.128.0/22
45.249.217.0/24
103.31.46.0/24
103.114.76.0-103.114.78.255
103.157.136.0/23
103.196.116.0/24
110.232.65.0/24
110.232.68.0-110.232.70.255
110.232.91.0/24
124.158.116.0/23
125.253.140.0/22
Signature Algorithm: sha256WithRSAEncryption
42:56:a9:45:0d:72:6f:9d:34:73:1e:9c:d4:b9:39:e3:7e:07:
72:35:60:92:ba:a0:bc:ae:9d:bb:ea:4b:5f:32:47:c3:3e:d6:
66:26:e9:3d:31:9c:01:57:c6:ec:98:28:4e:24:16:e0:cb:b2:
57:79:82:d2:97:27:0e:66:c4:88:b2:8b:8f:02:46:a7:81:43:
23:77:47:3a:e8:28:d4:e3:64:9a:79:aa:d2:18:03:00:a2:d4:
29:bb:bf:97:f3:43:bc:5a:f9:d5:99:f8:7f:cd:0a:13:c7:c5:
7a:b1:76:ba:32:94:4a:e4:88:73:7c:c0:96:c5:20:f1:4d:04:
42:59:82:e2:0b:34:34:2e:15:af:c0:51:2e:27:4c:49:fe:c4:
1a:07:97:be:c9:94:db:80:ea:39:13:35:c9:47:18:d3:a1:3d:
79:d6:50:de:5c:f1:43:e3:0b:a9:fc:c6:61:2c:de:e8:b6:56:
6b:8f:9b:31:c4:7c:8e:10:19:b2:2c:90:02:d3:05:0f:ae:ec:
0d:74:e4:ce:b5:55:58:39:59:05:ff:98:3f:f0:f0:e2:25:a4:
f9:76:61:97:59:89:17:e4:54:c5:48:13:6b:b0:a8:b3:24:da:
fc:b0:66:80:79:4f:77:96:57:25:66:1a:f2:d0:d5:72:de:1f:
f8:a7:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:49:38 2026 by rpki-client