Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141071.roa
File: AS141071.roa (raw, json)
Hash identifier: dvrdcD6UyUGdr3JORNcWu5MbJ9DypP8yeWIqT+1tEyE=
Subject key identifier: 70:91:E4:91:E6:26:C2:78:CD:A5:76:1D:3B:14:CB:83:32:6F:7D:F7
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4AF35125260A46E726283AC1ADAE057637D05AB2
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141071.roa
Signing time: Mon 10 Aug 2026 04:00:15 +0000
ROA not before: Mon 10 Aug 2026 03:55:15 +0000
ROA not after: Mon 09 Aug 2027 04:00:15 +0000
asID: 141071
IP address blocks: 103.54.171.0/24 maxlen: 24
103.97.140.0/24 maxlen: 24
103.97.141.0/24 maxlen: 24
103.155.196.0/23 maxlen: 23
202.57.19.0/24 maxlen: 24
202.57.20.0/23 maxlen: 24
2406:7640::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f3:51:25:26:0a:46:e7:26:28:3a:c1:ad:ae:05:76:37:d0:5a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Aug 10 03:55:15 2026 GMT
Not After : Aug 9 04:00:15 2027 GMT
Subject: CN=7091E491E626C278CDA5761D3B14CB83326F7DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:ff:0e:5f:fe:78:49:2c:2d:25:5d:2b:62:
ae:48:f2:c3:e4:74:c8:c3:d9:c8:a1:f8:3b:2c:d0:
8e:97:f1:5b:31:f0:0f:99:c9:10:b6:72:33:3d:86:
02:da:c2:04:34:6d:59:af:70:16:ec:4c:f1:ec:7e:
5c:f4:52:a8:c0:0a:01:80:2c:f7:54:fc:1f:0c:b5:
cf:b3:03:9f:15:e2:63:1c:1e:29:40:ab:94:2e:db:
19:87:ca:82:bf:8f:22:5d:45:5b:da:44:55:b4:c6:
35:e6:7e:e7:5d:80:64:4a:5f:3e:d4:c1:75:fe:0e:
cc:ed:cf:cb:ee:20:6c:05:b2:47:aa:12:b9:12:0a:
eb:ee:fb:ef:43:fc:2a:66:51:0b:92:9c:b6:24:44:
76:e6:a3:86:4b:46:0d:a1:2e:3b:a6:e1:cc:ec:14:
a4:1a:63:e2:5c:7b:97:bd:a7:7e:00:d5:78:9a:62:
47:6e:56:d9:02:08:42:05:c1:56:11:ce:58:a3:e0:
5e:b7:99:6c:c7:4d:2f:c4:df:5b:41:86:0d:62:9a:
e5:a4:c8:ac:f3:0f:97:b6:87:e1:30:cf:79:0d:7a:
1a:51:51:47:0d:2f:0d:63:28:84:40:28:45:49:06:
68:ac:ba:3d:0d:dc:b5:9e:2b:5b:c4:c7:ac:5e:13:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:E4:91:E6:26:C2:78:CD:A5:76:1D:3B:14:CB:83:32:6F:7D:F7
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.171.0/24
103.97.140.0/23
103.155.196.0/23
202.57.19.0-202.57.21.255
IPv6:
2406:7640::/32
Signature Algorithm: sha256WithRSAEncryption
01:01:35:39:e5:55:1f:60:8b:06:c4:a8:8c:96:f7:8f:55:ec:
66:c7:fa:5d:fd:9a:f7:c9:59:95:19:2c:4d:52:8a:11:50:e0:
32:f1:40:1a:68:e0:bb:2e:60:ce:a1:75:97:6e:95:0d:fc:8f:
6b:0f:74:31:d3:b9:ac:0c:42:0f:1b:d2:dc:6e:52:5c:4e:92:
9e:7d:90:26:71:f0:fb:15:9e:55:4a:25:6a:3b:03:58:37:c3:
8e:4a:40:ac:80:19:07:9b:cc:6a:31:8d:6a:3a:02:49:c5:cb:
56:cd:d9:95:e2:b4:3a:d4:0d:08:ef:7e:1e:0b:b1:6e:9a:fb:
5e:6d:2c:84:3f:52:03:32:96:0c:b5:40:c3:50:ce:4a:fc:a3:
1b:48:51:97:14:19:fd:bf:14:59:76:5f:c0:40:88:64:e0:c4:
37:28:6b:b8:c9:03:f0:32:ca:02:24:e3:cb:d3:ae:89:25:3b:
48:b3:8d:6b:af:d7:81:6b:b4:32:24:a8:fd:8d:7f:03:7f:93:
05:ee:bc:3b:56:b8:99:87:ae:23:cc:4f:7d:d6:dd:24:c1:ce:
0d:7f:41:0d:70:e0:b3:61:20:c3:a8:43:c5:de:11:c6:7a:d4:
36:ba:91:9d:39:f7:66:68:21:e1:0f:1f:8a:a6:2c:db:75:d6:
37:7c:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:32:57 2026 by rpki-client