Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45325.roa
File: AS45325.roa (raw, json)
Hash identifier: ZJIRbxLAFiCDIuDp0qvO/M2iD6r3zS8bkJg/NQsfd3U=
Subject key identifier: B4:68:6C:BB:81:FB:A5:E0:18:AB:FA:A0:C9:93:A3:6F:CE:16:99:24
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 2D57E05876C0F8185C980A69113D7A669CD9CFD1
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45325.roa
Signing time: Mon 29 Jun 2026 07:56:08 +0000
ROA not before: Mon 29 Jun 2026 07:51:08 +0000
ROA not after: Mon 28 Jun 2027 07:56:08 +0000
asID: 45325
IP address blocks: 103.3.68.0/23 maxlen: 24
103.146.182.0/24 maxlen: 24
103.151.140.0/24 maxlen: 24
103.151.141.0/24 maxlen: 24
122.248.35.0/24 maxlen: 24
122.248.42.0/24 maxlen: 24
122.248.44.0/24 maxlen: 24
2001:df7:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:57:e0:58:76:c0:f8:18:5c:98:0a:69:11:3d:7a:66:9c:d9:cf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 29 07:51:08 2026 GMT
Not After : Jun 28 07:56:08 2027 GMT
Subject: CN=B4686CBB81FBA5E018ABFAA0C993A36FCE169924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:5b:dd:6b:4e:ad:be:78:14:e5:bc:ca:5a:
85:be:58:6c:64:a1:27:9c:33:39:4a:a3:7e:4c:ab:
08:7c:b0:fb:bd:a8:3b:76:9c:07:09:03:35:a2:84:
43:d1:e6:48:c4:43:52:33:42:71:df:90:f8:5c:c8:
56:9d:7d:1c:6e:4f:17:f7:2c:1b:67:c4:5a:75:ce:
9d:0b:7b:09:e0:da:8f:43:8f:92:a9:61:8a:a0:dc:
c6:b9:3d:fe:d4:b5:b4:97:f9:03:62:06:e6:03:7f:
c0:07:bd:32:02:e7:bd:13:ca:db:cd:a5:d9:26:60:
90:fe:b8:98:f7:7e:a9:d6:87:d1:98:a4:f1:b2:0f:
5e:94:b2:b5:e4:59:25:32:5c:93:40:93:e2:bf:80:
1a:53:28:92:01:8d:ee:45:8f:a5:c2:c4:20:bf:07:
cb:4b:08:b8:fe:8d:43:cc:54:11:65:36:0e:42:b2:
05:15:c6:9f:37:cb:fa:0e:df:ea:41:77:d4:dc:4b:
41:44:0e:eb:da:b4:5d:ed:3c:c7:9f:f8:3c:58:aa:
ca:70:5a:7a:60:28:97:4c:ce:b1:e5:89:25:71:f7:
89:52:a1:c6:2c:eb:c7:e4:07:b4:a7:c4:38:ba:e1:
9a:9e:0a:91:19:7a:0b:25:0d:d6:b2:24:2c:b8:e8:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:6C:BB:81:FB:A5:E0:18:AB:FA:A0:C9:93:A3:6F:CE:16:99:24
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.68.0/23
103.146.182.0/24
103.151.140.0/23
122.248.35.0/24
122.248.42.0/24
122.248.44.0/24
IPv6:
2001:df7:880::/48
Signature Algorithm: sha256WithRSAEncryption
15:13:5d:ac:6c:45:fa:e4:06:68:2e:9b:23:5a:96:82:39:f4:
32:49:26:81:84:ae:7a:1c:50:4e:b3:e4:4d:e5:74:aa:bc:56:
8d:bf:cd:2c:ad:63:60:47:c0:b4:77:c9:ed:c6:6d:53:57:0e:
02:70:de:a0:70:62:3a:cd:ca:c0:c6:ac:1b:b6:d1:c2:ad:1e:
8a:8b:8a:67:2b:71:84:e7:14:23:4f:83:c8:f8:81:3e:50:c1:
74:03:9e:88:8a:98:fb:31:f7:21:b9:5b:c4:c5:5b:93:d7:99:
17:14:a5:19:e9:48:90:c2:ad:96:21:0c:52:3f:b2:d3:b3:b5:
0e:83:21:cd:05:d2:3a:29:0c:e2:ef:9e:cd:1e:ad:f7:31:14:
1e:de:be:2e:f1:b6:5b:11:f4:a8:df:d0:24:50:06:a9:af:e6:
55:2d:b1:15:78:70:94:b4:cf:32:b2:55:c6:e3:39:57:8d:2a:
3d:71:58:f1:b6:63:f8:e9:ab:2f:1f:52:04:9b:db:0a:48:85:
28:76:55:1d:ed:3d:75:89:4f:97:92:e1:e0:f4:20:6b:e9:7a:
73:e1:65:33:48:3b:e0:dd:68:07:06:b6:4d:27:1e:83:5a:8d:
44:15:61:d8:3e:ef:f5:c2:c1:2e:fb:d9:91:34:65:3d:18:13:
66:29:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:51:12 2026 by rpki-client