Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa
File: AS23947.roa (raw, json)
Hash identifier: Uzus9BHJsmVP70tVgXVctO2YWUE/f311qFXpP+FqQmM=
Subject key identifier: 9C:C0:9D:9D:C8:E3:7F:20:89:B6:83:AC:92:45:24:EE:CA:44:C3:18
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 39B03008AC242D6873B95396B4A3897198060579
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa
Signing time: Fri 13 Nov 2026 02:28:49 +0000
ROA not before: Fri 13 Nov 2026 02:23:49 +0000
ROA not after: Fri 12 Nov 2027 02:28:49 +0000
asID: 23947
IP address blocks: 27.50.16.0/20 maxlen: 24
103.111.144.0/24 maxlen: 24
103.129.216.0/22 maxlen: 24
103.154.136.0/24 maxlen: 24
202.150.64.0/19 maxlen: 24
2400:dc00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 17:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b0:30:08:ac:24:2d:68:73:b9:53:96:b4:a3:89:71:98:06:05:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Nov 13 02:23:49 2026 GMT
Not After : Nov 12 02:28:49 2027 GMT
Subject: CN=9CC09D9DC8E37F2089B683AC924524EECA44C318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:ac:e3:df:d9:7e:5a:68:ef:61:28:30:c8:
d9:2b:5f:ed:d6:03:5c:41:08:44:b8:ab:c7:af:5f:
9c:df:50:b1:02:fe:90:fa:79:2e:d7:8d:d2:85:ff:
b2:a7:40:62:03:ac:a5:1b:7a:67:05:0f:e3:4e:a7:
78:5e:df:9c:4d:18:ff:60:6b:b6:10:4e:b7:c4:4c:
1f:6d:8b:df:8f:ef:e6:02:c5:cf:55:b6:58:49:07:
35:0e:ee:fa:3f:4b:84:81:2f:8b:ab:9f:3e:af:55:
ba:78:76:bf:74:f6:20:a7:34:08:fb:40:6d:10:30:
62:12:af:f9:83:73:06:63:d2:1e:2b:3b:5c:22:80:
a2:77:fb:5c:56:31:4e:be:67:20:1c:41:2c:86:15:
de:1a:9b:91:d9:c1:84:a1:a3:fe:c6:25:9e:ae:ab:
f4:a5:44:95:ef:e7:b3:83:7c:bd:f2:9c:e4:c9:10:
58:90:5d:61:63:b4:b1:47:73:0b:d3:73:04:e5:82:
53:3d:55:f2:15:a2:f9:74:74:90:76:d7:e4:e3:f7:
00:aa:b8:47:70:6b:58:5b:be:e9:ba:15:6d:95:2f:
35:30:18:62:20:e6:b5:a3:6e:da:91:e5:e9:b4:25:
43:70:04:94:b1:b1:c7:7d:89:09:27:2d:2e:cf:58:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C0:9D:9D:C8:E3:7F:20:89:B6:83:AC:92:45:24:EE:CA:44:C3:18
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.50.16.0/20
103.111.144.0/24
103.129.216.0/22
103.154.136.0/24
202.150.64.0/19
IPv6:
2400:dc00::/32
Signature Algorithm: sha256WithRSAEncryption
95:c9:40:4e:9c:7a:b5:bc:be:fe:ea:c4:f4:90:ec:c0:8f:2e:
61:bb:1e:71:82:e7:45:43:bb:bb:78:52:b1:30:07:2a:67:d7:
ad:98:a0:84:fb:33:58:c1:21:01:fd:2d:91:6f:5d:75:08:19:
88:58:6c:42:a8:f3:8d:16:37:72:ca:17:0b:92:c6:aa:05:f8:
e8:d3:0e:40:6f:e1:e1:e7:df:b6:10:96:8d:80:be:13:df:ff:
b4:a5:19:b2:ad:26:86:8a:f7:6b:40:ea:bf:24:c2:e5:eb:4c:
27:91:24:34:4e:26:b9:a6:4d:62:3f:82:ab:08:e7:f1:e2:18:
8a:db:fa:c6:98:01:cf:90:1a:a2:d2:81:c0:dd:95:fa:c2:bb:
88:31:fe:d1:6f:50:98:3d:e0:e1:6a:b5:3c:e4:f8:21:8f:b5:
28:bd:86:1c:33:35:d8:62:df:f5:96:17:ba:ac:1a:8d:8f:07:
1f:2f:1c:7a:f9:42:79:6f:fa:e2:42:e0:fe:3b:b1:9a:58:fc:
ee:f1:73:d2:99:7b:75:9a:f6:dc:97:36:d6:85:0a:ca:99:77:
67:3f:7c:8e:27:1a:f2:34:22:2c:01:9e:1d:09:29:b2:85:e0:
ed:80:a2:47:7c:d3:b0:5a:4c:4f:45:77:23:fc:c6:95:77:19:
a8:71:cd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:13:07 2026 by rpki-client