Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
File: AS63859.roa (raw, json)
Hash identifier: H3OVBf/VQiWLvMYGzbRxNzbHiBMKDgVuVykPBnMvXQU=
Subject key identifier: 21:48:5C:62:59:70:95:6A:9D:AC:3D:DC:48:F9:BA:49:26:34:43:61
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5958D285C7ED781A0DD8DF4B0FCEFF54C42EF288
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
Signing time: Fri 13 Nov 2026 02:29:06 +0000
ROA not before: Fri 13 Nov 2026 02:24:06 +0000
ROA not after: Fri 12 Nov 2027 02:29:06 +0000
asID: 63859
IP address blocks: 27.50.16.0/20 maxlen: 24
36.50.112.0/23 maxlen: 24
36.50.114.0/23 maxlen: 24
36.50.138.0/23 maxlen: 24
36.50.142.0/23 maxlen: 24
36.50.150.0/23 maxlen: 24
103.47.132.0/22 maxlen: 24
103.106.156.0/22 maxlen: 24
103.106.156.0/24 maxlen: 24
103.106.157.0/24 maxlen: 24
103.106.158.0/24 maxlen: 24
103.106.159.0/24 maxlen: 24
103.119.48.0/21 maxlen: 24
103.119.48.0/22 maxlen: 24
103.119.52.0/22 maxlen: 24
103.119.60.0/22 maxlen: 24
103.119.64.0/22 maxlen: 24
103.120.168.0/21 maxlen: 24
103.120.168.0/22 maxlen: 24
103.120.172.0/22 maxlen: 24
103.121.16.0/21 maxlen: 24
103.121.16.0/22 maxlen: 24
103.121.20.0/22 maxlen: 24
103.125.36.0/22 maxlen: 24
103.125.40.0/22 maxlen: 24
103.125.48.0/22 maxlen: 24
103.125.56.0/22 maxlen: 24
103.129.16.0/23 maxlen: 24
103.129.92.0/22 maxlen: 24
103.129.104.0/22 maxlen: 24
103.129.150.0/23 maxlen: 24
103.129.172.0/23 maxlen: 24
103.129.174.0/23 maxlen: 24
103.130.16.0/23 maxlen: 24
103.130.18.0/23 maxlen: 24
103.130.128.0/22 maxlen: 24
103.130.164.0/22 maxlen: 24
103.156.112.0/23 maxlen: 24
103.156.114.0/23 maxlen: 24
103.156.118.0/23 maxlen: 24
103.156.160.0/23 maxlen: 24
103.156.164.0/23 maxlen: 24
103.156.218.0/23 maxlen: 24
103.157.48.0/23 maxlen: 24
103.157.58.0/23 maxlen: 24
103.157.60.0/23 maxlen: 24
103.171.146.0/23 maxlen: 24
103.171.148.0/23 maxlen: 24
103.171.150.0/23 maxlen: 24
103.171.152.0/23 maxlen: 24
103.171.154.0/23 maxlen: 24
103.171.156.0/23 maxlen: 24
103.171.158.0/23 maxlen: 24
103.171.160.0/23 maxlen: 24
103.171.162.0/23 maxlen: 24
103.171.164.0/23 maxlen: 24
103.175.222.0/23 maxlen: 24
103.175.224.0/23 maxlen: 24
103.175.226.0/23 maxlen: 24
103.175.228.0/23 maxlen: 24
103.175.230.0/23 maxlen: 24
202.59.192.0/20 maxlen: 24
202.150.64.0/19 maxlen: 24
203.83.32.0/20 maxlen: 24
210.87.88.0/23 maxlen: 24
210.87.90.0/23 maxlen: 24
2402:8780::/32 maxlen: 48
2402:8780:1015::/48 maxlen: 48
2402:8780:1018::/48 maxlen: 48
2402:8780:1019::/48 maxlen: 48
2402:8780:101a::/48 maxlen: 48
2402:8780:101d::/48 maxlen: 48
2402:8780:1020::/48 maxlen: 48
2402:8780:1021::/48 maxlen: 48
2402:8780:1024::/48 maxlen: 48
2402:8780:102a::/48 maxlen: 48
2402:8780:102c::/48 maxlen: 48
2402:8780:1038::/48 maxlen: 48
2402:8780:103c::/48 maxlen: 48
2402:8780:1041::/48 maxlen: 48
2402:8780:1052::/48 maxlen: 48
2402:8780:106d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 17:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:58:d2:85:c7:ed:78:1a:0d:d8:df:4b:0f:ce:ff:54:c4:2e:f2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Nov 13 02:24:06 2026 GMT
Not After : Nov 12 02:29:06 2027 GMT
Subject: CN=21485C625970956A9DAC3DDC48F9BA4926344361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:78:4a:d7:a7:99:8e:80:14:1a:be:87:50:
b1:e8:b1:9c:25:95:d6:b4:f4:f3:86:7c:d2:63:9a:
47:19:c6:de:03:fb:00:19:a7:fc:8f:dd:19:30:46:
b7:c6:46:40:31:f3:88:cf:c1:f6:87:cb:0c:ed:9c:
df:d5:e2:ed:d3:f3:07:af:9e:32:e6:56:95:49:c4:
4f:7c:64:c7:3d:4d:43:bd:7c:c3:fe:29:e0:96:d7:
d4:f6:92:4f:a2:af:b0:e5:4f:b6:2d:13:e1:c3:ce:
c3:bc:6d:08:fd:3c:6d:be:d3:2a:e1:88:8e:c1:60:
7f:db:c4:cf:f9:c8:94:6d:be:da:e3:c5:ef:86:ce:
3c:6f:f0:3e:b3:65:d6:9d:8e:a4:1a:20:1f:7b:82:
5b:c6:92:10:1a:d7:00:67:84:04:43:b8:92:23:64:
b8:26:63:0e:27:b3:ba:f9:58:1f:0c:e8:b4:82:51:
59:6e:bd:1e:cd:3b:b5:3f:59:d2:d2:3f:9a:d5:9a:
96:b9:b4:b1:9d:d9:e5:26:b3:40:c8:df:97:6d:a9:
4d:ce:47:26:ac:c5:21:83:9c:51:67:32:e5:11:db:
a5:f3:8d:23:33:40:62:90:2e:e8:43:28:0a:b9:7b:
cf:95:83:e3:ca:af:e1:c5:46:41:42:42:ce:87:7d:
93:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:5C:62:59:70:95:6A:9D:AC:3D:DC:48:F9:BA:49:26:34:43:61
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.50.16.0/20
36.50.112.0/22
36.50.138.0/23
36.50.142.0/23
36.50.150.0/23
103.47.132.0/22
103.106.156.0/22
103.119.48.0/21
103.119.60.0-103.119.67.255
103.120.168.0/21
103.121.16.0/21
103.125.36.0-103.125.43.255
103.125.48.0/22
103.125.56.0/22
103.129.16.0/23
103.129.92.0/22
103.129.104.0/22
103.129.150.0/23
103.129.172.0/22
103.130.16.0/22
103.130.128.0/22
103.130.164.0/22
103.156.112.0/22
103.156.118.0/23
103.156.160.0/23
103.156.164.0/23
103.156.218.0/23
103.157.48.0/23
103.157.58.0-103.157.61.255
103.171.146.0-103.171.165.255
103.175.222.0-103.175.231.255
202.59.192.0/20
202.150.64.0/19
203.83.32.0/20
210.87.88.0/22
IPv6:
2402:8780::/32
Signature Algorithm: sha256WithRSAEncryption
5a:38:4a:db:e6:63:08:4a:f4:82:da:e2:73:3e:47:fb:0b:4d:
5f:44:0d:74:50:59:a7:25:71:8d:70:f4:d0:cb:08:42:c1:18:
32:e7:66:c1:9e:7d:e0:72:95:7b:5b:c6:4a:47:3e:41:9f:a4:
52:08:e4:81:ab:9f:19:d8:0a:df:7f:09:e8:07:52:e5:57:07:
c3:f0:df:cf:86:84:40:73:41:62:19:5c:66:97:ae:ed:d8:7f:
06:b5:d7:d2:81:62:c1:b4:03:b5:7a:36:9a:52:63:f2:13:e4:
05:bf:7d:6a:c0:31:0a:b0:15:ed:05:5d:27:4e:de:0f:6e:39:
f1:b0:1d:e7:f5:c4:76:43:c1:14:d2:73:68:f7:ca:4e:6b:6f:
d5:05:9e:e1:97:d3:53:a5:a2:82:9e:8f:5f:6e:65:78:a1:42:
a0:27:ca:84:7a:37:c3:23:e0:f8:eb:f9:be:8a:6b:1a:2f:6b:
ea:e4:64:73:8f:de:27:f2:2d:5a:4d:53:09:ff:fe:0e:e5:ba:
98:99:11:4b:e2:ad:71:70:4c:7f:aa:d8:a5:29:c8:79:ff:5e:
29:4e:fc:3f:06:75:5b:98:58:35:73:bd:26:37:ab:8e:f7:d2:
f7:7a:b8:ec:8d:08:ef:9b:cb:43:8d:29:ef:d6:27:11:d0:76:
8f:04:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:29:22 2026 by rpki-client