Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS24521.roa
File: AS24521.roa (raw, json)
Hash identifier: 8+0Ue/OuifAMhJU0YuRRScYBPaSKVzGSk08kr6fVYKU=
Subject key identifier: 59:18:3E:4A:36:C0:0F:B7:3B:CA:C0:30:6E:55:DF:94:46:8F:2B:72
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 43F5DA008D48424E5484A8876C3C63ABF634C6FF
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24521.roa
Signing time: Sun 03 May 2026 02:10:49 +0000
ROA not before: Sun 03 May 2026 02:05:49 +0000
ROA not after: Sun 02 May 2027 02:10:49 +0000
asID: 24521
IP address blocks: 103.147.255.0/24 maxlen: 24
112.109.16.0/21 maxlen: 24
119.82.240.0/21 maxlen: 24
123.255.200.0/21 maxlen: 24
175.184.224.0/21 maxlen: 24
175.184.236.0/22 maxlen: 24
203.89.24.0/21 maxlen: 24
2403:ba00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f5:da:00:8d:48:42:4e:54:84:a8:87:6c:3c:63:ab:f6:34:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 02:05:49 2026 GMT
Not After : May 2 02:10:49 2027 GMT
Subject: CN=59183E4A36C00FB73BCAC0306E55DF94468F2B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:20:a9:ce:58:a2:cd:e1:fc:6f:6b:5a:93:
74:e1:d0:b7:44:b1:12:64:38:90:96:87:f6:47:2b:
85:20:fd:6c:7a:0e:12:89:00:f0:2b:78:a4:be:06:
21:8a:c2:e5:d7:8f:c1:ab:d0:bb:9d:f7:79:e0:eb:
97:6b:92:52:53:b0:1a:3b:3b:a5:b0:b9:e2:59:30:
f5:91:f4:66:5b:35:a7:3a:b9:ba:45:8f:47:12:49:
d8:4d:8a:4d:e8:b4:29:05:b2:b3:35:e2:4f:a8:95:
4a:5c:38:d4:c1:ae:6b:9f:6b:bf:52:67:8d:a2:d7:
e8:4a:74:20:09:a4:37:9e:0f:42:2d:c3:ae:77:fc:
4d:5b:c4:55:de:4c:db:0c:c3:eb:ff:7e:ff:1b:49:
d6:c8:a0:97:72:83:56:c8:eb:5e:aa:19:9d:7c:b7:
09:be:62:dc:96:67:36:b8:ac:60:53:fd:53:6d:34:
f4:5e:d3:89:2e:19:2b:16:e0:cd:22:60:c8:ee:6c:
16:55:fa:0b:db:5c:5b:76:d0:21:50:b7:ce:da:23:
51:63:8c:08:48:13:e7:70:1c:1a:19:13:ab:9e:f8:
19:ca:c6:85:03:70:d6:1c:db:74:2e:8c:85:d7:56:
b4:a0:1c:de:d2:d1:47:10:96:90:42:07:4a:f1:1c:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:3E:4A:36:C0:0F:B7:3B:CA:C0:30:6E:55:DF:94:46:8F:2B:72
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.255.0/24
112.109.16.0/21
119.82.240.0/21
123.255.200.0/21
175.184.224.0/21
175.184.236.0/22
203.89.24.0/21
IPv6:
2403:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
31:47:0b:4a:c6:03:7f:bd:0d:91:f7:e9:67:af:93:63:5c:01:
5e:b6:ba:8d:8d:23:89:06:a4:34:5e:05:f2:2e:a1:59:dc:c8:
c1:42:68:10:89:f1:4c:8a:a0:2e:3c:da:9a:83:8e:ad:a9:be:
43:4d:4f:64:64:1b:6a:2e:06:30:28:b5:c1:34:82:96:3b:f4:
1c:6c:75:ba:02:64:8a:a9:76:d1:f6:29:e5:89:bb:5e:49:ee:
a0:3e:8f:76:b3:2e:fd:98:42:01:99:ab:aa:20:03:cd:4d:ce:
a9:58:66:4d:96:ff:31:16:b8:9e:2b:5c:77:24:44:af:f4:fe:
cf:7d:16:07:be:92:57:a3:57:dc:58:92:7a:94:37:d2:0c:5a:
b6:41:80:99:b6:84:8c:a9:7b:e0:e6:c9:a3:b9:a0:e8:1c:90:
1a:eb:52:5a:64:a4:c7:69:22:2b:d5:0e:02:3e:6b:e9:46:2d:
30:de:48:e1:ac:0b:8e:e1:22:2c:39:68:63:51:bb:55:a4:c2:
49:16:92:65:75:f0:77:5a:fa:13:c0:44:e6:b7:0e:82:d1:5f:
3c:3e:85:32:40:bf:54:76:10:26:0d:bf:cd:3d:3a:46:11:c3:
23:67:d5:43:35:36:da:1a:43:47:e8:d4:02:98:04:79:e5:4a:
a7:9b:30:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:55:54 2026 by rpki-client