Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS4761.roa
File: AS4761.roa (raw, json)
Hash identifier: FwnDWnTjDyrDfbRUWbKL3097uZUo5jGAUEF3y7LkizY=
Subject key identifier: CA:4D:EC:0F:97:CF:71:DA:0F:4B:44:F2:86:C6:B8:70:8E:53:C9:B0
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0CC092DF28CCF92582DFA4ED5A6386097FB6F54E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS4761.roa
Signing time: Mon 22 Jun 2026 02:36:20 +0000
ROA not before: Mon 22 Jun 2026 02:31:20 +0000
ROA not after: Mon 21 Jun 2027 02:36:20 +0000
asID: 4761
IP address blocks: 114.142.172.0/24 maxlen: 24
114.142.173.0/24 maxlen: 24
116.206.14.0/24 maxlen: 24
116.206.15.0/24 maxlen: 24
202.67.42.0/24 maxlen: 24
202.67.43.0/24 maxlen: 24
223.255.225.0/24 maxlen: 24
2400:8b00:500::/44 maxlen: 48
2400:8b00:510::/44 maxlen: 48
2400:8b00:520::/44 maxlen: 48
2400:8b00:530::/44 maxlen: 48
2400:8b00:d90::/44 maxlen: 48
2400:8b00:da0::/44 maxlen: 48
2400:8b00:db0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c0:92:df:28:cc:f9:25:82:df:a4:ed:5a:63:86:09:7f:b6:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 22 02:31:20 2026 GMT
Not After : Jun 21 02:36:20 2027 GMT
Subject: CN=CA4DEC0F97CF71DA0F4B44F286C6B8708E53C9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:d8:77:18:9d:35:75:0e:17:a1:b0:77:a1:
d4:2d:7e:2d:b9:fe:30:06:57:76:f4:ec:ec:9a:70:
9c:f9:9c:9e:bc:70:bb:5d:3c:7d:9c:b3:c1:a4:32:
48:75:1b:18:2b:3d:43:78:00:d2:43:9c:f2:58:46:
7d:f5:f4:23:de:0c:17:8c:d5:c7:af:67:36:76:f6:
6e:c5:5c:c5:a6:ea:42:f2:7e:7d:8c:59:32:c6:17:
0d:fc:8a:65:53:a0:b6:8b:e1:70:94:53:e3:99:d9:
41:a2:5f:b4:cd:06:e6:74:ad:2e:3c:da:d0:ad:ea:
93:15:43:32:bc:e9:93:1b:a4:7d:e1:31:8c:e4:38:
4c:5d:65:48:64:64:a5:3d:a2:96:d1:66:43:ff:0b:
17:9d:e7:3c:08:5b:94:4c:a5:35:3f:cb:c7:77:8d:
76:c6:ef:d6:68:19:99:86:27:2a:14:fb:84:ba:a6:
1f:9e:7a:6d:e9:7a:52:2f:6f:22:2c:a9:a6:38:a8:
0b:5d:21:e2:4f:22:cb:95:4b:33:0d:2e:cd:01:53:
a4:bb:43:b4:af:b9:3e:d6:40:96:2d:a7:91:ef:02:
e8:72:de:b2:e0:23:97:fc:f1:c6:87:bc:c6:8b:93:
da:c5:b6:1d:44:7f:c4:80:be:39:04:6a:33:d0:8e:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4D:EC:0F:97:CF:71:DA:0F:4B:44:F2:86:C6:B8:70:8E:53:C9:B0
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS4761.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.172.0/23
116.206.14.0/23
202.67.42.0/23
223.255.225.0/24
IPv6:
2400:8b00:500::/42
2400:8b00:d90::-2400:8b00:dbf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:1b:cf:30:c8:ef:26:63:18:aa:ca:b5:e9:04:ca:55:01:77:
b9:8f:2f:67:55:ba:e0:06:44:7c:41:0d:1e:88:a2:b3:ce:2c:
fa:66:f4:3b:ad:e1:19:e1:a6:2d:0b:d1:b4:a2:b1:91:59:97:
11:b7:cc:5f:a1:aa:42:3c:41:e1:8a:c9:2d:ad:5b:50:b7:d9:
40:1a:f1:39:64:c8:e0:1a:60:da:3a:87:4a:ab:02:f0:38:d5:
1d:ed:4a:50:62:74:19:e8:8f:58:ab:33:00:92:35:12:24:7e:
3c:32:37:0d:e1:b3:ed:5f:a2:d3:ca:ad:7d:f5:f0:69:35:95:
b1:cc:44:68:d5:b5:8a:90:c2:a3:1a:3b:c7:87:9e:0f:6b:11:
a1:2d:a0:81:62:38:eb:9b:f6:ff:67:bc:24:57:9c:46:70:bc:
c2:e0:61:e6:4b:b4:f4:bc:cf:92:45:3b:17:25:54:05:3e:07:
80:a3:cb:d5:16:6d:26:90:f8:00:60:fe:54:6b:fc:c5:ca:65:
38:ad:c2:6d:98:0f:8a:26:13:63:88:c3:c0:16:b2:ce:78:f3:
39:a4:94:cb:a4:87:2a:9d:50:e8:bf:2e:02:e1:b2:96:8e:6f:
03:4b:06:4b:d3:97:37:ea:84:a3:f3:50:e1:4b:c4:27:58:96:
4e:5b:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:13 2026 by rpki-client