Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa
File: AS64300.roa (raw, json)
Hash identifier: Lh/hQChg+OEuIywsJazvjdGXz3hdhvcV6nPdSHyH15s=
Subject key identifier: B6:B5:9E:EC:F6:B4:E8:AC:09:25:16:1E:E1:6D:F2:C0:05:28:7A:EE
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 70A05CFCF48A2D3E7B43E5FAD0C7ADD8D5126870
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa
Signing time: Sun 03 May 2026 05:54:48 +0000
ROA not before: Sun 03 May 2026 05:49:48 +0000
ROA not after: Sun 02 May 2027 05:54:48 +0000
asID: 64300
IP address blocks: 45.126.40.0/23 maxlen: 23
103.13.204.0/23 maxlen: 24
103.18.232.0/23 maxlen: 24
103.46.8.0/23 maxlen: 24
103.67.46.0/23 maxlen: 24
103.80.80.0/22 maxlen: 22
163.61.225.0/24 maxlen: 24
2400:4ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a0:5c:fc:f4:8a:2d:3e:7b:43:e5:fa:d0:c7:ad:d8:d5:12:68:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 05:49:48 2026 GMT
Not After : May 2 05:54:48 2027 GMT
Subject: CN=B6B59EECF6B4E8AC0925161EE16DF2C005287AEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:55:1a:f6:05:d1:cd:4c:b3:ed:a0:97:f6:
50:fa:29:56:54:a6:d8:af:07:c4:9b:28:3d:44:96:
33:65:46:6c:6a:ef:5f:64:53:13:5e:2d:98:e2:42:
9f:6c:76:ac:f0:68:60:6c:74:dd:34:03:7a:4e:19:
fa:21:3f:1e:70:b5:fc:23:78:6f:51:53:77:ad:e0:
bb:f6:e1:e2:60:16:84:52:ce:ed:40:7d:2f:0e:18:
f8:36:7c:4e:2b:0b:48:9b:0f:34:aa:a7:7a:f7:e2:
82:16:00:19:82:b3:a1:c9:4b:28:7b:79:6c:de:df:
1a:f1:e2:6b:be:fd:7b:09:9b:f6:8a:2c:05:25:42:
81:07:1d:d4:54:c5:5e:3f:32:4e:f9:a1:45:c7:3e:
c2:92:ee:81:93:ea:1c:42:6a:6d:fb:28:a0:3a:fb:
09:a1:cf:d7:a8:f5:3f:52:ad:c3:4c:ba:54:d9:12:
f8:b5:45:9d:92:e1:bc:1f:a4:c1:a6:94:2a:4d:81:
d4:4a:c3:66:74:86:b7:28:e3:b4:bd:eb:43:06:1c:
10:c2:7c:9f:d4:3c:60:22:94:ad:3b:cb:30:07:cb:
4f:56:f1:57:69:5e:2a:4b:97:41:3c:65:16:71:df:
a1:3e:43:e9:08:0e:f7:da:ac:04:ae:cc:13:a5:6c:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B5:9E:EC:F6:B4:E8:AC:09:25:16:1E:E1:6D:F2:C0:05:28:7A:EE
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.126.40.0/23
103.13.204.0/23
103.18.232.0/23
103.46.8.0/23
103.67.46.0/23
103.80.80.0/22
163.61.225.0/24
IPv6:
2400:4ec0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:a9:db:a9:c0:fe:0b:08:f3:38:9a:0f:88:33:42:01:b6:1c:
43:9d:ee:03:df:5d:9d:e8:f3:d4:cc:8d:27:31:9d:25:dd:ce:
0f:ea:e3:cf:9a:17:7b:b6:86:45:50:6e:91:6e:26:9b:f3:d4:
de:e3:62:d0:24:6f:3a:4e:cc:12:59:f8:5a:03:b3:f5:83:77:
4d:58:a2:5b:a8:36:e6:4f:7d:63:72:4e:ba:0f:37:a7:2b:19:
26:20:64:7f:82:86:9e:cf:cc:4f:88:59:aa:dd:1b:70:f9:92:
3a:5c:65:a3:30:17:a5:cd:b4:4f:a1:ac:38:78:61:32:cc:92:
be:e4:8c:d6:aa:a6:4b:89:bf:9e:f0:11:ca:4a:f2:54:e6:03:
a6:37:ce:6c:d0:82:dd:61:88:5a:99:ee:1e:ce:b3:11:35:dd:
9a:f5:cc:9d:60:1b:6a:39:8f:54:e6:b5:fc:15:2d:f3:75:0f:
76:88:ab:7a:d7:dc:e0:ca:58:aa:7a:72:1d:b3:a5:0d:be:0a:
c4:cb:59:7f:00:e1:e1:cd:c4:42:bd:4c:49:13:91:3d:ae:6d:
9f:cd:42:6d:34:ab:ab:55:18:04:09:16:25:63:6a:0e:f6:62:
0b:cb:58:c8:bf:b2:aa:5a:f5:56:53:23:c1:40:b2:d5:48:82:
21:02:3c:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:42:13 2026 by rpki-client