Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58495.roa
File: AS58495.roa (raw, json)
Hash identifier: 0yUZ1j7RfHs/mkmso2gZ4k4+HDz6IOcrWd05ziGEUmo=
Subject key identifier: C0:F9:D9:22:CD:AB:9B:21:F4:57:06:D3:9E:8E:A7:39:DD:17:1E:7E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 419BF8AB8009124B64BDCAE0371A8977989E2E07
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58495.roa
Signing time: Mon 04 May 2026 13:35:48 +0000
ROA not before: Mon 04 May 2026 13:30:48 +0000
ROA not after: Mon 03 May 2027 13:35:48 +0000
asID: 58495
IP address blocks: 36.50.86.0/23 maxlen: 23
36.50.86.0/24 maxlen: 24
36.50.87.0/24 maxlen: 24
36.50.88.0/23 maxlen: 23
36.50.88.0/24 maxlen: 24
36.50.89.0/24 maxlen: 24
36.50.100.0/23 maxlen: 23
36.50.106.0/24 maxlen: 24
36.50.128.0/23 maxlen: 23
36.50.128.0/24 maxlen: 24
36.50.129.0/24 maxlen: 24
36.50.140.0/23 maxlen: 23
36.50.141.0/24 maxlen: 24
36.50.152.0/23 maxlen: 23
36.50.156.0/23 maxlen: 23
36.50.158.0/23 maxlen: 23
36.50.158.0/24 maxlen: 24
36.50.160.0/23 maxlen: 23
36.50.160.0/24 maxlen: 24
36.50.161.0/24 maxlen: 24
36.50.164.0/23 maxlen: 23
36.50.164.0/24 maxlen: 24
36.50.165.0/24 maxlen: 24
36.50.168.0/23 maxlen: 23
36.50.168.0/24 maxlen: 24
36.50.169.0/24 maxlen: 24
36.50.170.0/23 maxlen: 23
36.50.170.0/24 maxlen: 24
36.50.171.0/24 maxlen: 24
36.50.172.0/23 maxlen: 23
36.50.172.0/24 maxlen: 24
36.50.173.0/24 maxlen: 24
36.50.180.0/24 maxlen: 24
36.50.181.0/24 maxlen: 24
36.50.184.0/24 maxlen: 24
36.50.185.0/24 maxlen: 24
36.50.186.0/23 maxlen: 23
36.50.186.0/24 maxlen: 24
36.50.187.0/24 maxlen: 24
36.50.188.0/23 maxlen: 23
36.50.188.0/24 maxlen: 24
36.50.189.0/24 maxlen: 24
36.50.190.0/23 maxlen: 23
36.50.190.0/24 maxlen: 24
36.50.191.0/24 maxlen: 24
36.50.192.0/23 maxlen: 23
36.50.192.0/24 maxlen: 24
36.50.193.0/24 maxlen: 24
36.50.194.0/23 maxlen: 23
36.50.194.0/24 maxlen: 24
36.50.195.0/24 maxlen: 24
36.50.202.0/23 maxlen: 23
36.50.202.0/24 maxlen: 24
36.50.203.0/24 maxlen: 24
36.50.210.0/23 maxlen: 23
36.50.210.0/24 maxlen: 24
36.50.211.0/24 maxlen: 24
36.50.212.0/23 maxlen: 23
36.50.212.0/24 maxlen: 24
36.50.213.0/24 maxlen: 24
45.117.134.0/23 maxlen: 23
45.117.134.0/24 maxlen: 24
45.117.135.0/24 maxlen: 24
103.24.226.0/24 maxlen: 24
103.26.116.0/24 maxlen: 24
103.115.28.0/22 maxlen: 24
103.116.201.0/24 maxlen: 24
103.116.202.0/24 maxlen: 24
103.116.203.0/24 maxlen: 24
103.121.196.0/22 maxlen: 24
103.121.212.0/23 maxlen: 23
103.121.212.0/24 maxlen: 24
103.121.213.0/24 maxlen: 24
103.121.214.0/24 maxlen: 24
103.121.215.0/24 maxlen: 24
103.134.186.0/24 maxlen: 24
103.134.187.0/24 maxlen: 24
103.134.188.0/22 maxlen: 24
103.136.160.0/24 maxlen: 24
103.136.161.0/24 maxlen: 24
103.136.244.0/24 maxlen: 24
103.136.245.0/24 maxlen: 24
103.137.34.0/23 maxlen: 23
103.137.34.0/24 maxlen: 24
103.137.35.0/24 maxlen: 24
103.137.64.0/24 maxlen: 24
103.137.65.0/24 maxlen: 24
103.146.188.0/24 maxlen: 24
103.151.214.0/24 maxlen: 24
103.151.215.0/24 maxlen: 24
103.151.218.0/23 maxlen: 24
103.151.220.0/23 maxlen: 24
103.182.46.0/24 maxlen: 24
103.240.68.0/24 maxlen: 24
103.240.69.0/24 maxlen: 24
113.192.12.0/24 maxlen: 24
113.192.13.0/24 maxlen: 24
113.192.53.0/24 maxlen: 24
113.192.54.0/23 maxlen: 23
113.192.54.0/24 maxlen: 24
113.192.55.0/24 maxlen: 24
113.192.58.0/23 maxlen: 23
113.192.58.0/24 maxlen: 24
203.114.236.0/23 maxlen: 23
203.114.236.0/24 maxlen: 24
203.114.237.0/24 maxlen: 24
210.79.156.0/23 maxlen: 23
210.79.156.0/24 maxlen: 24
210.79.157.0/24 maxlen: 24
210.79.160.0/23 maxlen: 23
210.79.160.0/24 maxlen: 24
210.79.161.0/24 maxlen: 24
210.79.162.0/23 maxlen: 23
210.79.162.0/24 maxlen: 24
210.79.163.0/24 maxlen: 24
210.79.164.0/24 maxlen: 24
210.79.165.0/24 maxlen: 24
210.79.188.0/23 maxlen: 23
210.79.188.0/24 maxlen: 24
210.79.189.0/24 maxlen: 24
210.87.76.0/23 maxlen: 23
210.87.76.0/24 maxlen: 24
210.87.77.0/24 maxlen: 24
210.87.80.0/23 maxlen: 23
210.87.80.0/24 maxlen: 24
210.87.81.0/24 maxlen: 24
210.87.82.0/23 maxlen: 23
210.87.84.0/24 maxlen: 24
210.87.85.0/24 maxlen: 24
210.87.86.0/23 maxlen: 23
210.87.86.0/24 maxlen: 24
210.87.87.0/24 maxlen: 24
2404:2f80:1::/48 maxlen: 48
2404:2f80:fe00::/48 maxlen: 48
2404:2f80:ff00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9b:f8:ab:80:09:12:4b:64:bd:ca:e0:37:1a:89:77:98:9e:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 4 13:30:48 2026 GMT
Not After : May 3 13:35:48 2027 GMT
Subject: CN=C0F9D922CDAB9B21F45706D39E8EA739DD171E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:6e:ec:f6:75:0b:02:37:34:9f:78:6d:4b:
b7:67:47:59:1c:f2:bd:77:3a:70:4d:77:87:93:60:
a7:c9:bb:86:c4:53:9d:ea:c6:91:74:2b:35:f0:28:
b3:92:65:f7:ed:cc:e5:a4:ee:89:0a:a3:a8:91:ba:
12:32:18:8a:4c:28:be:31:2f:5d:0b:4d:83:81:69:
cf:80:c1:c8:ae:13:5e:5b:cb:51:d3:76:ea:45:91:
c6:de:61:da:c6:f0:63:e8:c3:f5:13:41:19:18:79:
72:1c:9c:0e:eb:33:9d:22:61:bd:fd:82:93:21:27:
b2:35:54:e9:e3:62:f2:fb:67:68:fa:64:2a:da:a8:
ad:02:a0:7a:75:f9:5c:74:82:98:2b:f1:4a:40:1c:
9a:e3:41:91:d7:3a:2c:da:75:73:62:d3:8c:62:ad:
9d:87:62:92:51:4e:a3:cd:d7:30:25:76:e1:cc:34:
b8:13:6d:33:a0:ec:aa:3c:73:d1:b6:62:ca:75:45:
ca:18:b9:eb:c6:2b:0e:d3:ff:46:13:57:05:50:83:
b2:cd:3d:64:a7:41:ad:01:19:77:33:5b:10:de:36:
7e:b9:6b:56:68:98:33:45:db:f6:99:26:2d:fc:bf:
b8:e8:5d:93:55:71:df:b3:b6:a6:8d:05:ac:3a:be:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:D9:22:CD:AB:9B:21:F4:57:06:D3:9E:8E:A7:39:DD:17:1E:7E
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.86.0-36.50.89.255
36.50.100.0/23
36.50.106.0/24
36.50.128.0/23
36.50.140.0/23
36.50.152.0/23
36.50.156.0-36.50.161.255
36.50.164.0/23
36.50.168.0-36.50.173.255
36.50.180.0/23
36.50.184.0-36.50.195.255
36.50.202.0/23
36.50.210.0-36.50.213.255
45.117.134.0/23
103.24.226.0/24
103.26.116.0/24
103.115.28.0/22
103.116.201.0-103.116.203.255
103.121.196.0/22
103.121.212.0/22
103.134.186.0-103.134.191.255
103.136.160.0/23
103.136.244.0/23
103.137.34.0/23
103.137.64.0/23
103.146.188.0/24
103.151.214.0/23
103.151.218.0-103.151.221.255
103.182.46.0/24
103.240.68.0/23
113.192.12.0/23
113.192.53.0-113.192.55.255
113.192.58.0/23
203.114.236.0/23
210.79.156.0/23
210.79.160.0-210.79.165.255
210.79.188.0/23
210.87.76.0/23
210.87.80.0/21
IPv6:
2404:2f80:1::/48
2404:2f80:fe00::/48
2404:2f80:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
8e:ef:c8:40:eb:08:d3:3c:c6:08:5e:3f:1b:2b:4c:4d:2c:a7:
16:d6:dd:93:f7:ef:a0:87:4e:93:a0:64:d0:85:59:72:dc:f9:
0c:5e:ca:66:fa:99:d6:38:d0:1f:92:07:07:bb:60:2a:bf:33:
a9:ae:a7:0b:02:09:dd:4a:97:4b:a0:64:3f:55:e4:a9:ce:98:
e9:cb:70:ce:73:e2:56:de:0e:0b:49:ca:ab:63:a8:fc:ab:9b:
98:0b:e3:23:f8:e0:a9:7c:7b:ea:a2:b7:9a:68:bc:df:55:9d:
4a:d7:7f:5e:21:12:fe:b2:89:95:e6:3c:27:d3:c3:4f:c7:42:
93:57:24:a0:c5:f9:f7:f7:af:24:17:6f:43:5a:d3:cf:e0:83:
43:4a:46:b6:4f:41:cb:92:6e:11:e9:29:27:29:2b:43:93:97:
6e:8f:1d:9e:30:51:32:2c:ed:c1:a8:34:45:e6:e9:a2:45:d3:
b5:c0:90:d3:49:61:17:04:5e:be:20:e1:4e:89:7b:6e:5d:a9:
a9:19:54:3c:c5:f7:82:0c:ee:41:4a:4c:8a:04:6d:04:e3:bc:
0a:f6:fd:74:a6:be:21:e7:3b:40:88:25:ab:86:04:61:2c:8a:
8b:7e:c9:2e:e6:84:a1:ad:7f:41:e4:22:41:e6:d7:31:20:c2:
ca:d4:12:de
-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgIUQZv4q4AJEktkvcrgNxqJd5ieLgcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwNDEzMzA0OFoX
DTI3MDUwMzEzMzU0OFowMzExMC8GA1UEAxMoQzBGOUQ5MjJDREFCOUIyMUY0NTcw
NkQzOUU4RUE3MzlERDE3MUU3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ4sbuz2dQsCNzSfeG1Lt2dHWRzyvXc6cE13h5Ngp8m7hsRTnerGkXQrNfAo
s5Jl9+3M5aTuiQqjqJG6EjIYikwovjEvXQtNg4Fpz4DByK4TXlvLUdN26kWRxt5h
2sbwY+jD9RNBGRh5chycDusznSJhvf2CkyEnsjVU6eNi8vtnaPpkKtqorQKgenX5
XHSCmCvxSkAcmuNBkdc6LNp1c2LTjGKtnYdiklFOo83XMCV24cw0uBNtM6Dsqjxz
0bZiynVFyhi568YrDtP/RhNXBVCDss09ZKdBrQEZdzNbEN42frlrVmiYM0Xb9pkm
Lfy/uOhdk1Vx37O2po0FrDq+um8CAwEAAaOCAywwggMoMB0GA1UdDgQWBBTA+dki
zaubIfRXBtOejqc53RcefjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTg0OTUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggF+BggrBgEFBQcBBwEB/wSCAW0wggFp
MIIBQgQCAAEwggE6MAwDBAEkMlYDBAEkMlgDBAEkMmQDBAAkMmoDBAEkMoADBAEk
MowDBAEkMpgwDAMEAiQynAMEASQyoAMEASQypDAMAwQDJDKoAwQBJDKsAwQBJDK0
MAwDBAMkMrgDBAIkMsADBAEkMsowDAMEASQy0gMEASQy1AMEAS11hgMEAGcY4gME
AGcadAMEAmdzHDAMAwQAZ3TJAwQCZ3TIAwQCZ3nEAwQCZ3nUMAwDBAFnhroDBAZn
hoADBAFniKADBAFniPQDBAFniSIDBAFniUADBABnkrwDBAFnl9YwDAMEAWeX2gME
AWeX3AMEAGe2LgMEAWfwRAMEAXHADDAMAwQAccA1AwQDccAwAwQBccA6AwQBy3Ls
AwQB0k+cMAwDBAXST6ADBAHST6QDBAHST7wDBAHSV0wDBAPSV1AwIQQCAAIwGwMH
ACQEL4AAAQMHACQEL4D+AAMHACQEL4D/ADANBgkqhkiG9w0BAQsFAAOCAQEAju/I
QOsI0zzGCF4/GytMTSynFtbdk/fvoIdOk6Bk0IVZctz5DF7KZvqZ1jjQH5IHB7tg
Kr8zqa6nCwIJ3UqXS6BkP1Xkqc6Y6ctwznPiVt4OC0nKq2Oo/KubmAvjI/jgqXx7
6qK3mmi831WdStd/XiES/rKJleY8J9PDT8dCk1ckoMX59/evJBdvQ1rTz+CDQ0pG
tk9By5JuEekpJykrQ5OXbo8dnjBRMiztwag0RebpokXTtcCQ00lhFwReviDhTol7
bl2pqRlUPMX3ggzuQUpMigRtBOO8Cvb9dKa+Iec7QIglq4YEYSyKi37JLuaEoa1/
QeQiQebXMSDCytQS3g==
-----END CERTIFICATE-----
Generated at Tue May 12 22:42:47 2026 by rpki-client