Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
File: AS45305.roa (raw, json)
Hash identifier: G5Xthz7JO0PBrtwhgQd9JjnjQ8Zr//PgrF1pioNEot0=
Subject key identifier: 1F:C4:B6:91:4D:D3:E4:8D:E4:33:1A:FD:F9:3F:65:8F:F0:5F:10:06
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4FD29FB0B12AF02BABAC3118B6F008E650BDBD96
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
Signing time: Sun 03 May 2026 08:11:36 +0000
ROA not before: Sun 03 May 2026 08:06:36 +0000
ROA not after: Sun 02 May 2027 08:11:36 +0000
asID: 45305
IP address blocks: 103.22.99.0/24 maxlen: 24
103.46.10.0/23 maxlen: 24
103.51.204.0/24 maxlen: 24
103.51.205.0/24 maxlen: 24
103.54.80.0/23 maxlen: 24
103.83.98.0/24 maxlen: 24
103.87.148.0/23 maxlen: 24
103.98.122.0/24 maxlen: 24
103.100.180.0/24 maxlen: 24
103.100.181.0/24 maxlen: 24
103.130.116.0/24 maxlen: 24
103.130.117.0/24 maxlen: 24
103.134.223.0/24 maxlen: 24
103.162.60.0/24 maxlen: 24
103.162.61.0/24 maxlen: 24
103.164.228.0/24 maxlen: 24
103.175.240.0/24 maxlen: 24
103.175.241.0/24 maxlen: 24
103.183.254.0/24 maxlen: 24
103.184.180.0/23 maxlen: 24
103.189.96.0/24 maxlen: 24
103.189.97.0/24 maxlen: 24
103.190.114.0/23 maxlen: 24
103.220.22.0/23 maxlen: 24
103.251.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d2:9f:b0:b1:2a:f0:2b:ab:ac:31:18:b6:f0:08:e6:50:bd:bd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 08:06:36 2026 GMT
Not After : May 2 08:11:36 2027 GMT
Subject: CN=1FC4B6914DD3E48DE4331AFDF93F658FF05F1006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:72:3e:95:3a:e4:47:9f:24:99:cf:6a:a2:
9c:10:8d:44:da:d1:32:5d:a5:40:e5:1d:36:8c:5b:
9b:b0:d0:d5:92:a9:9a:d9:98:ca:bb:c9:f1:69:84:
5b:62:a7:9f:a7:0a:e7:a3:fb:41:67:c9:f0:3b:b6:
15:4b:1d:43:e8:b3:4f:46:e5:74:23:f0:85:64:c5:
67:6c:9c:65:1b:c0:14:ed:e1:5a:0f:3f:50:bc:ae:
ef:39:29:a7:59:bf:b9:78:60:8b:d1:53:f2:cc:13:
7b:67:d8:ea:a5:28:2c:66:59:2d:c1:57:92:19:7b:
39:79:c4:c8:1e:92:08:56:05:36:e5:f7:fe:1e:50:
24:13:a9:36:dd:93:f3:00:5f:d7:0c:1d:6b:4c:ca:
e2:1c:3c:a3:22:f0:1b:e9:fb:c5:fe:fd:54:17:3c:
ac:fc:42:df:5c:77:4f:4e:d4:4f:79:6a:7a:71:3b:
55:71:42:e0:36:59:8b:2b:e7:ec:fa:47:40:41:1b:
f4:1c:a5:a8:18:49:59:9e:4b:f8:9c:80:68:5f:5a:
34:08:20:ea:00:1a:43:21:8f:70:85:40:7d:69:07:
57:5d:08:06:4c:72:21:49:68:f9:29:5f:92:89:c1:
4d:8a:3e:6f:fc:97:70:41:7d:2d:17:17:d7:07:b9:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:B6:91:4D:D3:E4:8D:E4:33:1A:FD:F9:3F:65:8F:F0:5F:10:06
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.99.0/24
103.46.10.0/23
103.51.204.0/23
103.54.80.0/23
103.83.98.0/24
103.87.148.0/23
103.98.122.0/24
103.100.180.0/23
103.130.116.0/23
103.134.223.0/24
103.162.60.0/23
103.164.228.0/24
103.175.240.0/23
103.183.254.0/24
103.184.180.0/23
103.189.96.0/23
103.190.114.0/23
103.220.22.0/23
103.251.153.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f4:55:d1:fa:d6:5e:27:1c:f2:ee:61:d6:24:31:83:f2:97:
3d:63:31:ca:72:e8:0e:f6:3b:75:5f:fe:03:a9:87:5e:0e:b7:
8b:5b:b2:0a:ad:63:18:c1:f4:40:a9:ce:5d:14:41:38:52:24:
0e:de:5d:7e:8b:26:06:69:99:95:3e:40:7e:9e:e7:29:ce:c6:
fc:dd:af:8c:ce:db:90:c1:8d:e3:9e:31:ea:15:6f:d9:6f:05:
ad:87:3f:ee:78:51:93:f1:fd:a7:72:2c:e6:18:c0:af:04:a5:
54:d6:d7:8d:19:98:7e:5a:52:49:64:18:41:56:63:bf:4b:96:
67:38:a1:ff:04:66:28:b0:b3:76:c4:82:8b:f3:70:f9:46:aa:
a6:e6:60:6c:bd:9f:ac:f6:b9:5c:f4:61:81:cc:13:dd:68:7c:
0d:5c:e0:73:23:2f:22:a2:6b:c4:a6:51:5e:b3:25:31:1c:e1:
ac:2d:e0:f9:2d:4e:9b:7c:0f:b5:2a:51:c0:1e:56:99:5a:6b:
cb:65:1c:65:ff:ce:35:fb:91:6a:e3:10:ee:11:30:19:1f:f8:
48:f7:8e:fd:3d:65:36:e7:b6:d9:d2:94:01:2f:e2:a9:70:7f:
d1:21:78:e3:cf:26:55:59:d5:d8:f6:e3:90:fd:2f:a3:53:b9:
a9:ec:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:24 2026 by rpki-client