Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
File: AS136052.roa (raw, json)
Hash identifier: 4JCmfkYAaWvkTWmauTKrIbOs52FZjkTV5Hty323Aflw=
Subject key identifier: CC:FE:8D:89:15:37:8F:8D:C3:AA:C2:79:0D:D5:71:57:FF:65:04:F6
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 58F8B8E3BE4DC3ABC45C347A459A31227CB35EDE
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
Signing time: Fri 25 Sep 2026 04:57:08 +0000
ROA not before: Fri 25 Sep 2026 04:52:08 +0000
ROA not after: Fri 24 Sep 2027 04:57:08 +0000
asID: 136052
IP address blocks: 27.112.78.0/23 maxlen: 24
27.112.78.0/24 maxlen: 24
103.15.226.0/24 maxlen: 24
103.23.198.0/23 maxlen: 24
103.28.52.0/23 maxlen: 23
103.28.52.0/23 maxlen: 24
103.31.38.0/23 maxlen: 24
103.49.238.0/23 maxlen: 24
103.55.36.0/23 maxlen: 24
103.55.36.0/24 maxlen: 24
103.55.37.0/24 maxlen: 24
103.55.38.0/23 maxlen: 24
103.55.38.0/24 maxlen: 24
103.55.39.0/24 maxlen: 24
103.59.94.0/23 maxlen: 23
103.59.94.0/23 maxlen: 24
103.63.24.0/23 maxlen: 24
103.67.78.0/23 maxlen: 23
103.67.78.0/23 maxlen: 24
103.76.120.0/23 maxlen: 23
103.76.120.0/23 maxlen: 24
103.82.92.0/23 maxlen: 24
103.117.56.0/23 maxlen: 24
103.123.62.0/23 maxlen: 23
103.123.62.0/23 maxlen: 24
103.139.192.0/23 maxlen: 24
103.146.202.0/23 maxlen: 23
103.171.18.0/24 maxlen: 24
103.171.84.0/23 maxlen: 24
103.171.84.0/24 maxlen: 24
103.171.85.0/24 maxlen: 24
103.172.204.0/23 maxlen: 24
103.174.114.0/23 maxlen: 24
103.176.76.0/24 maxlen: 24
103.176.78.0/23 maxlen: 24
103.179.56.0/23 maxlen: 24
103.179.254.0/23 maxlen: 24
103.181.142.0/23 maxlen: 24
103.183.74.0/23 maxlen: 24
103.186.0.0/23 maxlen: 23
103.191.92.0/23 maxlen: 24
103.193.176.0/23 maxlen: 24
103.193.178.0/23 maxlen: 24
103.214.112.0/24 maxlen: 24
103.214.113.0/24 maxlen: 24
103.217.144.0/23 maxlen: 24
103.217.226.0/23 maxlen: 24
103.226.138.0/23 maxlen: 24
103.236.201.0/24 maxlen: 24
103.242.10.0/23 maxlen: 24
103.250.208.0/23 maxlen: 24
116.193.190.0/23 maxlen: 24
203.145.34.0/23 maxlen: 23
203.145.34.0/23 maxlen: 24
203.145.35.0/24 maxlen: 24
210.79.190.0/24 maxlen: 24
210.79.191.0/24 maxlen: 24
2001:df7:7400::/48 maxlen: 48
2401:8160::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 23:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f8:b8:e3:be:4d:c3:ab:c4:5c:34:7a:45:9a:31:22:7c:b3:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Sep 25 04:52:08 2026 GMT
Not After : Sep 24 04:57:08 2027 GMT
Subject: CN=CCFE8D8915378F8DC3AAC2790DD57157FF6504F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:6d:eb:47:7f:a0:d9:8b:08:8e:4e:e9:af:
21:7c:17:24:c8:e0:73:2a:09:79:41:db:bc:cf:d6:
6d:48:34:98:27:7f:af:a9:42:18:7c:a1:21:5f:c1:
7d:7b:b2:df:4e:96:71:5f:21:fe:49:29:bf:10:f9:
1e:cd:20:47:fa:5e:13:20:4a:3a:0e:74:70:2c:0b:
1f:f4:c5:f8:a8:f2:7c:94:2f:b7:62:ba:72:89:f7:
8c:39:28:84:40:60:a7:cf:57:1f:6d:35:f5:c5:28:
a0:85:ad:73:58:70:b6:f1:c1:ec:a7:f3:28:fb:46:
03:81:12:e8:01:bf:fa:17:30:e4:a6:c4:b2:da:4b:
cd:b0:f9:6d:81:30:e1:3c:1a:f8:ac:2c:66:b3:fa:
31:5a:c1:6b:e7:a2:07:33:55:05:2f:9b:76:9e:16:
1b:d0:a8:c5:a4:3d:83:9f:b4:71:08:9a:8f:b5:20:
a6:d5:fc:3f:a1:10:e6:91:f2:dc:14:10:78:ea:e1:
39:d3:0a:6d:ad:e4:7c:75:7e:5f:ef:35:56:22:a3:
24:89:b0:f5:26:c1:86:0d:de:4d:7e:98:f0:76:1d:
67:7d:e0:34:45:12:96:ff:1a:5b:3c:2d:af:59:6f:
fc:31:e5:30:a4:b0:e1:66:b3:f8:dd:cd:a2:74:80:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:8D:89:15:37:8F:8D:C3:AA:C2:79:0D:D5:71:57:FF:65:04:F6
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.78.0/23
103.15.226.0/24
103.23.198.0/23
103.28.52.0/23
103.31.38.0/23
103.49.238.0/23
103.55.36.0/22
103.59.94.0/23
103.63.24.0/23
103.67.78.0/23
103.76.120.0/23
103.82.92.0/23
103.117.56.0/23
103.123.62.0/23
103.139.192.0/23
103.146.202.0/23
103.171.18.0/24
103.171.84.0/23
103.172.204.0/23
103.174.114.0/23
103.176.76.0/24
103.176.78.0/23
103.179.56.0/23
103.179.254.0/23
103.181.142.0/23
103.183.74.0/23
103.186.0.0/23
103.191.92.0/23
103.193.176.0/22
103.214.112.0/23
103.217.144.0/23
103.217.226.0/23
103.226.138.0/23
103.236.201.0/24
103.242.10.0/23
103.250.208.0/23
116.193.190.0/23
203.145.34.0/23
210.79.190.0/23
IPv6:
2001:df7:7400::/48
2401:8160::/32
Signature Algorithm: sha256WithRSAEncryption
95:bf:66:94:aa:9e:e8:4a:d6:19:d3:d8:9d:70:1a:3e:64:ba:
35:19:9a:48:a6:70:70:c2:44:40:d4:7b:2a:0b:79:bf:60:71:
ad:2b:16:aa:b8:0d:64:79:0a:f2:cd:d7:b1:3b:49:8b:da:54:
ad:54:6d:f4:2a:89:49:5c:84:ce:20:4a:0a:20:f8:1a:52:73:
b6:a9:4e:6d:17:12:f3:f2:8a:11:3f:cb:e3:13:b7:2e:49:c3:
b4:dd:30:83:1c:dc:5d:d4:7c:f2:67:e2:ab:55:ca:f5:94:ea:
01:ca:a4:fa:c2:e7:15:54:b5:01:5f:5b:7a:e1:26:03:ef:75:
e7:ec:cc:2d:17:60:ec:a8:7a:4d:0b:ce:fb:9a:86:20:45:c4:
c2:e9:dc:f8:ea:b7:44:f0:8a:56:7e:53:00:d4:46:33:fc:67:
c4:57:7e:9d:b1:c4:9d:49:fc:61:70:07:db:6f:fd:32:b1:83:
4d:c9:fc:a4:8c:4f:fb:4f:19:2a:30:93:6d:1e:08:21:f0:82:
73:07:22:77:41:4f:23:26:68:9a:2e:50:74:d9:c6:00:46:8a:
45:61:66:68:33:4a:51:19:d8:f6:7a:36:4e:12:88:fc:02:50:
28:cf:d7:73:cd:dc:79:2d:87:51:66:9e:f4:d6:0c:24:64:f8:
39:a4:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:49 2026 by rpki-client