Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38769.roa
File: AS38769.roa (raw, json)
Hash identifier: pOmOFRfK/Dn2Q36CdrkbOY/lXcLNena3Sgecbs26Z7A=
Subject key identifier: AE:DA:99:7A:2E:47:67:E9:83:E6:A5:01:71:81:96:0B:AA:EE:FD:E3
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 55B1B1D91D48B7FF96A2EE592D07BC79F6D9F656
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38769.roa
Signing time: Sun 03 May 2026 15:40:17 +0000
ROA not before: Sun 03 May 2026 15:35:17 +0000
ROA not after: Sun 02 May 2027 15:40:17 +0000
asID: 38769
IP address blocks: 43.230.28.0/24 maxlen: 24
43.230.29.0/24 maxlen: 24
43.241.148.0/22 maxlen: 22
103.17.52.0/24 maxlen: 24
103.17.53.0/24 maxlen: 24
103.17.54.0/24 maxlen: 24
103.17.55.0/24 maxlen: 24
114.110.16.0/24 maxlen: 24
114.110.17.0/24 maxlen: 24
114.110.18.0/24 maxlen: 24
114.110.19.0/24 maxlen: 24
114.110.21.0/24 maxlen: 24
114.110.22.0/24 maxlen: 24
114.110.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b1:b1:d9:1d:48:b7:ff:96:a2:ee:59:2d:07:bc:79:f6:d9:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 15:35:17 2026 GMT
Not After : May 2 15:40:17 2027 GMT
Subject: CN=AEDA997A2E4767E983E6A5017181960BAAEEFDE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:8c:ef:1f:8f:98:31:71:3f:c3:36:e6:9c:
a8:08:72:d5:81:0b:05:28:5a:a5:9e:2e:06:f1:5a:
f4:0e:61:2c:c8:8d:cd:b8:4f:3e:7b:69:fa:c5:43:
49:ac:dd:19:a2:fe:eb:a5:df:13:c3:ff:6c:01:94:
70:03:44:12:ae:31:7d:1e:51:95:b9:50:27:86:5c:
6b:d3:66:3b:07:da:55:81:69:a4:e2:0a:52:aa:e3:
89:e2:cc:24:4b:c1:f7:9c:2c:57:39:b8:9d:09:71:
89:87:9d:04:af:2c:ad:d6:f7:42:34:57:19:38:b1:
55:4a:b5:55:f7:7f:02:f3:2e:62:2e:1d:3f:b4:4c:
3b:d5:8e:8f:ea:9a:6b:3f:5f:e1:90:e0:bf:f1:1f:
40:a5:02:dc:38:71:90:a5:2c:2c:b2:01:1c:e9:f3:
23:5c:2d:1e:c1:be:d1:c4:f9:0f:00:36:79:34:0a:
f9:f8:42:d8:6b:00:dd:55:e0:4f:b6:6c:31:28:a3:
ff:4c:95:ba:f0:c7:8c:db:b2:6d:44:c3:da:49:b3:
39:f7:f6:90:32:4b:9b:16:9d:78:67:26:e6:eb:97:
45:88:23:93:98:4a:8b:6f:91:93:3d:e5:93:5d:da:
a6:e5:35:fc:d3:19:ed:f7:4c:74:ca:20:a3:b8:c3:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DA:99:7A:2E:47:67:E9:83:E6:A5:01:71:81:96:0B:AA:EE:FD:E3
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.28.0/23
43.241.148.0/22
103.17.52.0/22
114.110.16.0/22
114.110.21.0-114.110.23.255
Signature Algorithm: sha256WithRSAEncryption
06:b6:04:a1:ad:81:1c:ef:80:89:2b:d2:49:9e:e6:14:19:21:
21:24:c5:71:9a:aa:32:b1:2f:44:89:fc:8a:15:30:77:76:ee:
5f:35:ea:eb:01:52:9a:b5:06:b0:07:2d:62:24:02:da:54:aa:
a8:70:a2:6f:72:d4:b6:6a:78:4a:8e:61:91:11:1e:f6:64:ef:
03:f9:11:1d:86:9d:6c:e9:fd:b6:f4:3c:3f:05:24:89:e7:5e:
2d:75:b6:8f:64:78:92:79:9d:13:be:32:12:ad:82:fc:57:ef:
35:7e:ea:3a:8e:c8:c9:f0:dd:54:c5:79:0f:8b:06:33:96:ae:
72:00:d8:7d:5c:fe:50:0e:70:03:9d:04:b5:b1:c1:a0:2d:88:
cd:80:19:3e:b8:d3:3a:24:7f:20:fd:02:4b:c3:4a:d2:d0:9e:
ce:a5:8e:b5:38:0f:7f:af:63:28:29:01:e2:4a:16:84:00:c5:
44:70:ec:38:53:8f:08:ce:82:7e:1c:90:ec:ce:d9:d5:ef:a3:
6f:0f:9d:86:d6:e2:ca:5b:98:28:4e:2b:c6:61:40:59:c0:db:
fb:5d:23:23:2c:8b:60:c7:6e:a3:25:40:fb:1e:c4:e0:3c:63:
45:50:8e:49:12:69:dc:3b:40:4f:42:e4:6a:56:f6:2c:9b:19:
88:10:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:54 2026 by rpki-client