Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS9875.roa
File: AS9875.roa (raw, json)
Hash identifier: 3HqeS8WwJNra790yz2coNwxbf5mCXzIoxruffoCnyMA=
Subject key identifier: F5:BB:4A:0D:59:77:ED:8C:E4:C9:6B:A5:C4:B1:0F:EF:CF:14:37:63
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5524F4A101E51EED6982AE2BA8DC4F2EC03170B9
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9875.roa
Signing time: Wed 01 Jul 2026 08:44:40 +0000
ROA not before: Wed 01 Jul 2026 08:39:40 +0000
ROA not after: Wed 30 Jun 2027 08:44:40 +0000
asID: 9875
IP address blocks: 103.93.224.0/22 maxlen: 24
103.93.228.0/22 maxlen: 24
103.159.228.0/23 maxlen: 24
103.159.230.0/23 maxlen: 24
103.159.232.0/23 maxlen: 24
103.159.234.0/23 maxlen: 24
103.167.142.0/23 maxlen: 24
103.167.144.0/23 maxlen: 24
103.167.146.0/23 maxlen: 24
103.167.148.0/23 maxlen: 24
103.168.106.0/23 maxlen: 24
103.168.108.0/23 maxlen: 24
103.168.110.0/23 maxlen: 24
103.168.112.0/23 maxlen: 24
103.169.110.0/24 maxlen: 24
103.169.111.0/24 maxlen: 24
103.169.112.0/23 maxlen: 24
103.169.114.0/24 maxlen: 24
103.169.115.0/24 maxlen: 24
103.169.118.0/23 maxlen: 24
103.169.120.0/23 maxlen: 24
103.169.122.0/23 maxlen: 24
103.169.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:24:f4:a1:01:e5:1e:ed:69:82:ae:2b:a8:dc:4f:2e:c0:31:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 1 08:39:40 2026 GMT
Not After : Jun 30 08:44:40 2027 GMT
Subject: CN=F5BB4A0D5977ED8CE4C96BA5C4B10FEFCF143763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:fa:11:62:53:5d:92:0e:37:f2:fd:26:65:
80:31:4b:98:a0:26:a7:8c:82:ba:8f:d1:58:56:71:
9b:fb:0c:08:95:4c:b1:df:d5:9b:3d:b6:65:00:7f:
a3:2b:70:94:29:2f:75:85:b8:ea:e9:e8:02:74:55:
e0:a2:96:76:8b:b9:82:b4:30:d4:c5:4d:09:39:18:
5a:0c:9a:11:00:3a:23:fd:44:40:97:26:0e:1c:94:
51:c9:c0:77:08:e3:72:9b:56:19:80:38:fb:94:14:
8a:30:03:9f:ad:7b:bf:f6:2a:16:44:46:2d:9d:2d:
71:49:bd:b8:f0:f5:64:43:78:8b:0c:13:22:a7:73:
98:4f:23:18:54:03:ff:c9:4c:b5:60:8e:52:14:74:
13:49:b5:93:7c:fb:7f:91:94:f6:2f:6c:80:0e:a1:
db:cf:e2:53:56:1a:01:de:e5:97:77:a1:47:8e:35:
fb:55:14:2a:1a:c4:7b:f4:b0:b9:2c:d0:64:d1:29:
f7:25:74:85:69:7a:c0:fe:ed:a2:a9:9c:6e:e2:d0:
df:5e:b6:14:69:a7:af:97:e4:36:3b:c5:1d:8b:78:
46:ad:b8:5f:ba:80:a6:4d:1c:bd:f9:8b:e9:7c:4e:
80:4f:39:10:a2:82:6a:8d:2f:20:c2:dd:89:20:dd:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:4A:0D:59:77:ED:8C:E4:C9:6B:A5:C4:B1:0F:EF:CF:14:37:63
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9875.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.93.224.0/21
103.159.228.0-103.159.235.255
103.167.142.0-103.167.149.255
103.168.106.0-103.168.113.255
103.169.110.0-103.169.115.255
103.169.118.0-103.169.125.255
Signature Algorithm: sha256WithRSAEncryption
20:9d:7d:fb:9a:b5:52:cc:78:a3:a2:44:a5:df:76:63:8c:f1:
13:9d:06:bb:31:b3:07:b1:fc:b6:4d:1d:33:3b:87:9a:fa:f9:
44:f6:f8:d6:2d:b9:c4:a8:e6:b1:fb:ac:34:49:5a:0c:e8:45:
c4:5b:f5:d6:53:cc:d5:da:58:94:72:e2:6a:da:a1:05:f8:fd:
2b:7f:51:62:a1:74:fa:84:9d:24:bd:86:fa:e0:39:72:41:82:
5e:17:fc:2a:58:5a:12:f9:d9:9a:54:a2:d1:14:68:9c:99:12:
21:83:52:73:35:ea:fe:5f:07:b8:60:2c:9e:a3:61:a3:33:5b:
89:b1:f4:53:6b:8d:94:53:f0:49:31:90:ca:c2:fd:2b:dc:45:
18:89:83:fe:b5:be:db:f7:5d:0d:0f:e7:09:2b:03:89:6e:0b:
d5:79:8b:89:fd:d3:02:67:24:b8:b8:1e:09:44:07:dd:26:34:
e7:82:85:8b:06:da:51:cb:86:a8:79:8c:f8:51:60:a1:38:f2:
81:17:19:fc:65:24:75:d7:9e:78:94:fe:59:c7:86:59:21:b1:
09:91:df:74:b3:bb:86:4a:77:04:ec:36:9c:86:56:48:af:32:
32:0c:29:d3:00:a5:fb:18:12:bf:5f:bd:83:ab:4c:ad:87:00:
16:84:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:48:18 2026 by rpki-client