Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
File: AS63859.roa (raw, json)
Hash identifier: /c25cmLncKtd71I6P3Mqm76HisFh6w03kWoTX0uk/j8=
Subject key identifier: 01:06:4F:78:2D:66:4E:92:CF:C6:6D:8A:70:00:47:AA:35:FA:35:3A
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 76A105105CE8BCFB66BCA4A06DDFCC9D0A447B2A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
Signing time: Wed 06 May 2026 08:20:06 +0000
ROA not before: Wed 06 May 2026 08:15:06 +0000
ROA not after: Wed 05 May 2027 08:20:06 +0000
asID: 63859
IP address blocks: 36.50.112.0/23 maxlen: 24
36.50.114.0/23 maxlen: 24
36.50.138.0/23 maxlen: 24
36.50.142.0/23 maxlen: 24
36.50.150.0/23 maxlen: 24
103.47.132.0/22 maxlen: 24
103.106.156.0/22 maxlen: 24
103.106.156.0/24 maxlen: 24
103.106.157.0/24 maxlen: 24
103.106.158.0/24 maxlen: 24
103.106.159.0/24 maxlen: 24
103.119.48.0/21 maxlen: 24
103.119.48.0/22 maxlen: 24
103.119.52.0/22 maxlen: 24
103.119.60.0/22 maxlen: 24
103.119.64.0/22 maxlen: 24
103.120.168.0/21 maxlen: 24
103.120.168.0/22 maxlen: 24
103.120.172.0/22 maxlen: 24
103.121.16.0/21 maxlen: 24
103.121.16.0/22 maxlen: 24
103.121.20.0/22 maxlen: 24
103.125.36.0/22 maxlen: 24
103.125.40.0/22 maxlen: 24
103.125.48.0/22 maxlen: 24
103.125.56.0/22 maxlen: 24
103.129.16.0/23 maxlen: 24
103.129.92.0/22 maxlen: 24
103.129.104.0/22 maxlen: 24
103.129.150.0/23 maxlen: 24
103.129.172.0/23 maxlen: 24
103.129.174.0/23 maxlen: 24
103.130.16.0/23 maxlen: 24
103.130.18.0/23 maxlen: 24
103.130.128.0/22 maxlen: 24
103.130.164.0/22 maxlen: 24
103.156.112.0/23 maxlen: 24
103.156.114.0/23 maxlen: 24
103.156.118.0/23 maxlen: 24
103.156.160.0/23 maxlen: 24
103.156.164.0/23 maxlen: 24
103.156.218.0/23 maxlen: 24
103.157.48.0/23 maxlen: 24
103.157.58.0/23 maxlen: 24
103.157.60.0/23 maxlen: 24
103.171.146.0/23 maxlen: 24
103.171.148.0/23 maxlen: 24
103.171.150.0/23 maxlen: 24
103.171.152.0/23 maxlen: 24
103.171.154.0/23 maxlen: 24
103.171.156.0/23 maxlen: 24
103.171.158.0/23 maxlen: 24
103.171.160.0/23 maxlen: 24
103.171.162.0/23 maxlen: 24
103.171.164.0/23 maxlen: 24
103.175.222.0/23 maxlen: 24
103.175.224.0/23 maxlen: 24
103.175.226.0/23 maxlen: 24
103.175.228.0/23 maxlen: 24
103.175.230.0/23 maxlen: 24
202.59.192.0/20 maxlen: 24
203.83.32.0/20 maxlen: 24
210.87.88.0/23 maxlen: 24
210.87.90.0/23 maxlen: 24
2402:8780::/32 maxlen: 48
2402:8780:1015::/48 maxlen: 48
2402:8780:1018::/48 maxlen: 48
2402:8780:1019::/48 maxlen: 48
2402:8780:101a::/48 maxlen: 48
2402:8780:101d::/48 maxlen: 48
2402:8780:1020::/48 maxlen: 48
2402:8780:1021::/48 maxlen: 48
2402:8780:1024::/48 maxlen: 48
2402:8780:102a::/48 maxlen: 48
2402:8780:102c::/48 maxlen: 48
2402:8780:1038::/48 maxlen: 48
2402:8780:103c::/48 maxlen: 48
2402:8780:1041::/48 maxlen: 48
2402:8780:1052::/48 maxlen: 48
2402:8780:106d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a1:05:10:5c:e8:bc:fb:66:bc:a4:a0:6d:df:cc:9d:0a:44:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 6 08:15:06 2026 GMT
Not After : May 5 08:20:06 2027 GMT
Subject: CN=01064F782D664E92CFC66D8A700047AA35FA353A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:37:97:b2:7b:8c:36:80:2e:33:33:20:de:
54:65:4c:44:f0:8c:f4:19:51:6e:92:19:af:d4:7a:
15:aa:6f:ea:e6:b7:3e:97:25:17:6b:6b:ee:53:2c:
e3:8e:99:d4:0d:18:94:bd:d5:dc:a5:ea:ca:9c:5e:
a9:db:7d:33:9b:da:e3:20:65:55:3b:58:53:05:4a:
65:51:7c:41:45:32:1c:f5:a8:87:39:47:d4:e1:28:
06:39:4e:dc:e3:c0:14:d6:19:fb:cc:19:00:40:80:
38:e2:b8:1f:13:a3:d9:1e:9a:4e:80:00:a5:38:10:
9f:1b:2e:fd:80:be:4d:d8:8b:6f:b6:02:ea:68:55:
7f:7c:1c:6b:b0:16:f1:ec:a9:d4:5a:f0:7d:3c:f2:
be:31:55:85:3e:3d:01:2d:32:07:fe:de:1b:dd:fd:
9e:b7:9e:9c:62:a2:f3:a1:7e:37:63:cf:78:a3:58:
2a:78:5e:e9:8e:e4:ea:83:d9:90:d2:df:b5:72:94:
da:77:d0:ec:a0:7d:bc:a5:0d:c1:ca:7a:d1:b3:30:
ed:10:db:96:6f:8e:8d:6b:b5:d0:68:cc:ed:5d:43:
11:49:ae:ae:f4:4b:df:d0:d7:92:80:3d:5f:47:53:
31:be:a0:a7:45:69:7d:66:55:3f:66:6a:57:01:87:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:4F:78:2D:66:4E:92:CF:C6:6D:8A:70:00:47:AA:35:FA:35:3A
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.112.0/22
36.50.138.0/23
36.50.142.0/23
36.50.150.0/23
103.47.132.0/22
103.106.156.0/22
103.119.48.0/21
103.119.60.0-103.119.67.255
103.120.168.0/21
103.121.16.0/21
103.125.36.0-103.125.43.255
103.125.48.0/22
103.125.56.0/22
103.129.16.0/23
103.129.92.0/22
103.129.104.0/22
103.129.150.0/23
103.129.172.0/22
103.130.16.0/22
103.130.128.0/22
103.130.164.0/22
103.156.112.0/22
103.156.118.0/23
103.156.160.0/23
103.156.164.0/23
103.156.218.0/23
103.157.48.0/23
103.157.58.0-103.157.61.255
103.171.146.0-103.171.165.255
103.175.222.0-103.175.231.255
202.59.192.0/20
203.83.32.0/20
210.87.88.0/22
IPv6:
2402:8780::/32
Signature Algorithm: sha256WithRSAEncryption
11:a1:30:df:ee:07:5f:af:74:67:3f:33:4a:35:a8:ce:47:43:
43:97:0b:e4:68:a2:e1:2c:68:32:a2:71:9d:f9:ec:e8:66:27:
ea:6f:f6:eb:06:b4:5a:7a:ee:75:45:41:98:6c:4b:5c:3b:a5:
e6:be:74:01:7f:17:65:ff:79:62:79:1d:f5:6a:20:f9:88:47:
c1:37:6a:75:22:ff:ad:cc:48:9d:96:b8:6b:0e:65:1f:df:56:
63:f2:71:04:af:97:6d:7d:ff:c9:3e:25:88:c6:70:4c:c3:e3:
23:e7:d7:60:b4:3e:39:d9:c3:8c:b7:8c:33:39:8f:a1:a0:1d:
cd:7c:d7:0e:c7:ce:8e:33:98:a9:ed:13:c5:84:88:b3:14:35:
4b:4e:d3:b5:6f:b7:e2:38:e1:ce:d1:20:9a:e0:74:b3:75:6a:
4c:8f:99:13:db:91:a3:df:82:6e:40:e4:85:bd:30:f9:07:29:
24:7a:bc:34:ae:a7:e2:44:ef:65:c0:0d:09:7b:b4:98:a0:db:
db:e5:61:f6:4a:5d:fc:a5:03:5d:98:3a:bc:64:a0:7a:eb:80:
46:1e:ac:09:50:1d:de:ae:26:49:03:fc:ae:90:90:6b:8a:e8:
8d:0f:1f:12:32:a2:c6:05:38:04:56:a0:cc:5b:41:44:bf:36:
0c:65:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:57:06 2026 by rpki-client