Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58369.roa
File: AS58369.roa (raw, json)
Hash identifier: GEcVyLP0/gBY4d1tC4lMhD1Siq1N1OpiaLFVgR3nSK8=
Subject key identifier: 22:00:1C:B8:69:81:52:39:C1:0E:40:89:F9:4B:E0:6D:8D:CF:C5:2E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 119AD3F4968513FA220F20A25C1AF13FD91C4A6E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58369.roa
Signing time: Tue 23 Jun 2026 02:22:58 +0000
ROA not before: Tue 23 Jun 2026 02:17:58 +0000
ROA not after: Tue 22 Jun 2027 02:22:58 +0000
asID: 58369
IP address blocks: 103.18.46.0/23 maxlen: 24
103.41.250.0/23 maxlen: 24
103.75.64.0/23 maxlen: 24
103.130.182.0/23 maxlen: 24
103.132.200.0/23 maxlen: 24
103.139.166.0/23 maxlen: 24
103.144.21.0/24 maxlen: 24
103.144.126.0/23 maxlen: 24
103.144.212.0/23 maxlen: 24
103.148.232.0/23 maxlen: 24
103.151.14.0/23 maxlen: 24
103.153.186.0/23 maxlen: 24
103.156.216.0/23 maxlen: 24
103.157.82.0/23 maxlen: 24
103.159.220.0/23 maxlen: 24
103.165.244.0/23 maxlen: 24
103.166.210.0/23 maxlen: 24
103.167.12.0/23 maxlen: 24
103.167.108.0/24 maxlen: 24
103.167.109.0/24 maxlen: 24
103.168.168.0/23 maxlen: 24
103.172.248.0/23 maxlen: 24
103.173.76.0/23 maxlen: 24
103.177.104.0/23 maxlen: 24
103.188.170.0/23 maxlen: 24
103.224.73.0/24 maxlen: 24
115.187.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9a:d3:f4:96:85:13:fa:22:0f:20:a2:5c:1a:f1:3f:d9:1c:4a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 23 02:17:58 2026 GMT
Not After : Jun 22 02:22:58 2027 GMT
Subject: CN=22001CB869815239C10E4089F94BE06D8DCFC52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:f4:e0:a2:ed:50:25:0b:c6:39:ac:2a:23:
23:18:98:48:e7:84:53:3c:2d:23:a9:6f:00:8c:44:
9e:c3:4e:dd:8b:7a:24:46:2e:92:cb:d0:81:5e:45:
72:1d:71:7e:85:1e:29:ac:61:0d:3a:61:40:e7:24:
ae:f7:c9:89:0c:15:fe:78:ee:77:ff:ca:55:3d:2b:
cf:6d:d4:11:ec:ef:75:57:68:2e:86:7b:c6:e4:42:
54:0f:4d:db:09:2f:60:64:80:31:ae:36:34:c5:af:
4f:1b:46:1f:0a:bd:49:cc:29:82:fb:67:a0:9c:67:
c4:49:13:a2:ee:47:6c:f0:da:00:8b:08:a2:4c:fa:
a1:01:82:92:e4:2a:37:6e:98:f9:f7:cc:b7:9f:27:
15:1b:b1:13:32:84:94:26:37:98:56:1c:e3:29:eb:
67:0f:29:e6:c1:04:ac:d7:b0:80:88:c5:f1:af:67:
b3:1b:a7:c3:74:16:c8:55:ee:4e:2b:98:da:01:1e:
a8:f0:f3:b6:91:16:c3:4c:34:79:40:a2:f6:81:0c:
56:9f:7c:24:f0:c8:a1:0a:55:e1:38:13:d1:84:f3:
10:bb:39:eb:d3:e5:46:23:f5:81:ef:ee:a5:07:3f:
2d:9b:2a:85:8e:b1:6f:a8:c0:8c:93:5b:61:a2:22:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:1C:B8:69:81:52:39:C1:0E:40:89:F9:4B:E0:6D:8D:CF:C5:2E
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.46.0/23
103.41.250.0/23
103.75.64.0/23
103.130.182.0/23
103.132.200.0/23
103.139.166.0/23
103.144.21.0/24
103.144.126.0/23
103.144.212.0/23
103.148.232.0/23
103.151.14.0/23
103.153.186.0/23
103.156.216.0/23
103.157.82.0/23
103.159.220.0/23
103.165.244.0/23
103.166.210.0/23
103.167.12.0/23
103.167.108.0/23
103.168.168.0/23
103.172.248.0/23
103.173.76.0/23
103.177.104.0/23
103.188.170.0/23
103.224.73.0/24
115.187.30.0/23
Signature Algorithm: sha256WithRSAEncryption
99:af:68:05:9a:77:61:6e:fe:f6:96:2e:76:78:37:c9:b4:0a:
71:fe:f2:66:6e:34:cf:5e:a1:a4:66:37:df:15:88:55:2d:ee:
b8:c0:ef:7d:0a:ee:05:c1:88:f0:e1:c1:7c:99:8b:13:cb:84:
e0:b6:17:35:56:27:9d:49:d1:ba:c7:80:d9:04:a7:79:29:8c:
1c:f1:d5:9d:80:61:00:5b:58:9b:6a:ae:ca:a9:34:86:54:11:
f8:44:5a:bd:6f:48:74:0e:91:13:5c:7f:f8:61:a5:86:e9:5f:
3d:20:81:bc:d3:4b:32:51:63:d5:0b:89:d1:8f:79:d5:8b:ee:
64:a7:a1:cb:57:a7:70:91:8f:54:53:2c:b6:5e:bf:20:05:ba:
1a:53:6b:fb:37:0d:c0:5f:c9:3f:4e:f2:02:7f:ad:b2:a3:2e:
65:32:0e:95:39:71:23:f4:b9:6c:c1:c3:6c:ff:73:27:3c:e8:
41:71:05:1d:3c:d0:ea:e1:27:36:47:7a:6d:0c:cc:e9:83:ff:
26:36:bb:d1:e8:95:e3:8b:a9:7e:a2:17:71:5c:0a:2b:7e:21:
ec:99:fc:be:55:68:83:02:07:6b:65:c8:9f:5a:3f:92:d6:3e:
ba:d4:c5:fe:63:d9:98:28:c0:15:57:65:94:b5:6c:da:00:1c:
17:1f:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:50:17 2026 by rpki-client