Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
File: AS9341.roa (raw, json)
Hash identifier: /jy0GCHn+DKNkuy1bpl2VmqOZka0hDnCIqLR77pmxv8=
Subject key identifier: 08:7C:25:F5:AC:0C:45:11:C4:FF:E3:AF:77:08:14:D8:D1:C5:08:8E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 647060E89E9135A24EA6F62ED88D9F4E1332D4A6
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
Signing time: Fri 08 May 2026 07:51:51 +0000
ROA not before: Fri 08 May 2026 07:46:51 +0000
ROA not after: Fri 07 May 2027 07:51:51 +0000
asID: 9341
IP address blocks: 43.240.80.0/22 maxlen: 24
103.17.172.0/22 maxlen: 24
103.17.172.0/23 maxlen: 24
103.17.174.0/23 maxlen: 24
103.49.188.0/22 maxlen: 24
103.55.220.0/22 maxlen: 24
103.76.168.0/22 maxlen: 24
103.76.172.0/22 maxlen: 24
103.78.72.0/22 maxlen: 24
103.78.140.0/22 maxlen: 24
103.88.196.0/22 maxlen: 24
103.88.200.0/22 maxlen: 24
103.88.204.0/22 maxlen: 24
103.88.208.0/22 maxlen: 24
103.88.244.0/22 maxlen: 24
103.88.248.0/22 maxlen: 24
103.88.252.0/22 maxlen: 24
103.89.32.0/22 maxlen: 24
103.91.14.0/23 maxlen: 24
103.94.0.0/22 maxlen: 24
103.94.124.0/22 maxlen: 24
103.101.22.0/23 maxlen: 24
103.145.150.0/24 maxlen: 24
103.181.244.0/23 maxlen: 24
103.210.230.0/23 maxlen: 24
103.215.24.0/22 maxlen: 24
103.215.178.0/23 maxlen: 24
103.229.164.0/22 maxlen: 24
103.238.138.0/23 maxlen: 24
153.76.64.0/19 maxlen: 24
160.202.40.0/22 maxlen: 24
175.184.232.0/22 maxlen: 24
202.46.64.0/19 maxlen: 24
202.57.18.0/24 maxlen: 24
202.57.28.0/22 maxlen: 24
202.74.43.0/24 maxlen: 24
202.74.72.0/23 maxlen: 24
202.146.48.0/20 maxlen: 24
202.154.176.0/21 maxlen: 24
202.164.216.0/22 maxlen: 24
202.171.236.0/24 maxlen: 24
203.171.216.0/23 maxlen: 24
203.171.216.0/24 maxlen: 24
203.171.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:70:60:e8:9e:91:35:a2:4e:a6:f6:2e:d8:8d:9f:4e:13:32:d4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 8 07:46:51 2026 GMT
Not After : May 7 07:51:51 2027 GMT
Subject: CN=087C25F5AC0C4511C4FFE3AF770814D8D1C5088E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:33:ec:e5:3e:b3:7a:cd:d9:36:72:a4:fc:
0c:dc:20:97:af:e8:88:b9:3d:96:e2:09:65:bc:b6:
93:56:e9:cf:9b:6e:c0:3f:be:23:e7:59:08:51:38:
32:66:69:a6:90:32:a4:2a:ec:de:19:ab:e4:67:db:
7c:3e:40:37:9b:a3:f6:64:e0:04:73:2c:02:ab:32:
fb:12:21:7f:01:46:e8:c4:c1:9e:6a:bd:fe:ab:8e:
78:6b:fc:72:f2:88:29:f9:04:66:9a:78:40:4c:04:
cd:71:f5:ea:fc:de:38:3c:d4:fe:83:0f:ef:08:cf:
db:a1:a3:6c:86:7b:39:73:d1:f2:d9:7a:d4:80:a7:
ba:cd:ea:3c:bc:71:ba:01:a6:78:86:be:8c:04:13:
74:9e:17:38:50:4c:05:11:48:77:3e:6d:33:a0:ed:
ec:5b:65:a3:28:a2:3c:3c:20:03:5a:47:68:54:31:
2c:d8:62:02:51:22:8f:ce:0f:22:a4:27:3c:1a:d7:
43:12:94:51:5f:02:cb:8b:c0:d1:47:e8:ff:3c:ea:
93:be:f8:a4:7e:8e:7e:06:72:69:e6:2f:9e:55:66:
2c:ef:f5:4a:5a:4c:55:cb:fd:62:ea:e1:7b:40:fb:
ca:de:f3:24:3f:7c:79:85:c9:f0:16:e6:e7:1b:9c:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7C:25:F5:AC:0C:45:11:C4:FF:E3:AF:77:08:14:D8:D1:C5:08:8E
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.80.0/22
103.17.172.0/22
103.49.188.0/22
103.55.220.0/22
103.76.168.0/21
103.78.72.0/22
103.78.140.0/22
103.88.196.0-103.88.211.255
103.88.244.0-103.88.255.255
103.89.32.0/22
103.91.14.0/23
103.94.0.0/22
103.94.124.0/22
103.101.22.0/23
103.145.150.0/24
103.181.244.0/23
103.210.230.0/23
103.215.24.0/22
103.215.178.0/23
103.229.164.0/22
103.238.138.0/23
153.76.64.0/19
160.202.40.0/22
175.184.232.0/22
202.46.64.0/19
202.57.18.0/24
202.57.28.0/22
202.74.43.0/24
202.74.72.0/23
202.146.48.0/20
202.154.176.0/21
202.164.216.0/22
202.171.236.0/24
203.171.216.0/23
Signature Algorithm: sha256WithRSAEncryption
71:02:48:83:f0:23:5f:b2:49:58:0c:04:5e:e9:f1:39:e8:de:
dd:c3:1b:3d:71:27:bc:e3:8b:f1:69:1c:a7:63:58:30:b3:20:
80:5e:b4:1e:13:bf:be:ef:69:a9:14:a0:ae:ec:12:eb:c6:d1:
27:83:ab:c7:2d:96:6d:54:a2:45:9c:7e:ea:67:ab:b5:60:6f:
dd:b7:35:8b:d6:a4:30:8e:72:70:b1:96:bd:7d:71:a2:d2:2a:
77:61:24:d6:68:89:ac:9c:80:de:10:a1:c9:f2:64:32:d4:9f:
04:db:cd:be:bf:b8:c7:8b:50:ce:ca:d0:1a:b7:41:05:b8:b6:
f3:bb:ac:af:12:8d:ea:c9:89:f3:50:cf:00:59:19:80:90:25:
39:67:7a:bc:1c:2b:2d:94:b4:78:be:5c:9d:ff:0b:06:c6:f8:
82:f7:dd:2f:3e:68:6b:40:ab:0c:9d:56:5c:09:90:d6:5b:74:
99:5f:12:e4:4a:01:c2:48:80:b7:53:07:b3:76:b9:82:77:32:
a9:3c:c4:c9:39:3c:a9:96:ef:5a:23:b4:ec:c9:15:2a:3f:73:
7f:21:fe:2f:f1:0a:88:86:2c:8d:f2:f0:47:7a:9f:f0:91:06:
d5:75:72:93:9c:cc:d1:3a:b6:2b:59:24:93:3b:23:9c:98:58:
8e:3b:50:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:43:25 2026 by rpki-client