Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149693.roa
File: AS149693.roa (raw, json)
Hash identifier: q6n9iAKwUmA8t9P++gNNj4JbpIqnaDyhnkKpNkMbfkE=
Subject key identifier: B7:BD:74:B8:85:86:94:B3:60:5F:A3:9B:31:B8:B9:1A:55:7B:44:79
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3E095D6F13774D89EA3FD2800F511DC382FD3F10
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149693.roa
Signing time: Thu 13 Aug 2026 02:46:49 +0000
ROA not before: Thu 13 Aug 2026 02:41:49 +0000
ROA not after: Thu 12 Aug 2027 02:46:49 +0000
asID: 149693
IP address blocks: 2400:aca0::/32 maxlen: 32
2400:aca0::/35 maxlen: 35
2400:aca0:2::/48 maxlen: 48
2400:aca0:2000::/35 maxlen: 35
2400:aca0:4000::/35 maxlen: 35
2400:aca0:6000::/35 maxlen: 35
2400:aca0:8000::/35 maxlen: 35
2400:aca0:a000::/35 maxlen: 35
2400:aca0:c000::/35 maxlen: 35
2400:aca0:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:09:5d:6f:13:77:4d:89:ea:3f:d2:80:0f:51:1d:c3:82:fd:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Aug 13 02:41:49 2026 GMT
Not After : Aug 12 02:46:49 2027 GMT
Subject: CN=B7BD74B8858694B3605FA39B31B8B91A557B4479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:a1:40:79:b2:d2:3f:71:22:5f:11:64:ba:
6a:10:3f:97:c0:d7:59:ed:69:0f:24:28:48:23:5c:
0b:26:40:d3:89:58:ea:12:f3:78:aa:a9:5c:4f:2b:
a4:38:9e:8f:e1:95:e3:99:95:fc:f8:18:38:a3:ec:
4f:93:f5:41:a9:99:b2:64:00:f7:a9:af:27:78:a8:
b7:e7:16:74:3b:4e:4c:9d:bc:4a:4f:5b:de:b9:b6:
a3:10:f4:64:6a:e0:43:03:a1:41:4d:db:f7:53:c1:
8e:91:eb:b2:23:8a:54:1a:63:31:97:71:7f:30:ff:
2c:5e:d7:44:25:d7:27:f2:d2:3f:9b:64:ef:bd:8e:
da:75:f0:f2:5b:1a:54:e6:cb:d7:0d:84:88:a2:75:
cd:19:44:f9:7c:df:54:09:ab:6c:51:3d:2d:90:f2:
c5:ed:98:11:db:1a:ed:64:aa:8a:a0:be:98:aa:dc:
ae:98:6c:06:c6:7f:4b:47:61:7b:74:1f:06:de:f5:
74:10:45:64:4f:ae:ce:86:59:5a:bb:c0:8d:97:8d:
b3:85:36:3d:f2:65:8d:48:42:46:b7:58:89:8e:65:
73:8e:af:53:4b:7d:f1:5e:e6:d5:96:21:93:7f:5f:
ce:4b:1c:ac:83:6d:6a:05:c8:3c:ed:3d:6a:d1:f0:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:74:B8:85:86:94:B3:60:5F:A3:9B:31:B8:B9:1A:55:7B:44:79
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:aca0::/32
Signature Algorithm: sha256WithRSAEncryption
65:c8:67:30:9e:00:30:36:04:9e:0a:21:9a:3e:00:a1:50:07:
e5:ac:56:f2:e0:92:25:04:93:db:33:a2:df:f5:d8:12:43:fa:
85:a8:82:3a:7b:1b:76:75:38:06:85:08:88:22:39:21:e4:b9:
82:cc:3d:f5:c5:d0:f9:cb:49:11:9b:0c:9a:8d:d4:29:32:bc:
2a:b5:bc:ca:4e:3c:39:aa:cb:6b:58:dc:bf:5c:a1:f9:4d:5c:
3e:8b:6b:fa:c2:00:95:e3:17:d8:4f:d8:e2:a6:69:22:ab:76:
74:eb:30:0b:b5:63:48:29:7a:44:d8:69:71:98:49:e5:87:2e:
49:70:b5:0e:0a:56:39:d8:1a:40:a5:9c:82:2a:72:3e:67:bf:
cc:0c:c6:08:78:d1:f1:63:ce:50:5a:e7:d0:54:c7:ab:4c:85:
d9:89:ca:f2:98:3e:4b:c7:37:15:4c:8b:74:27:62:ad:67:0a:
2f:6c:a0:37:0d:21:7c:d9:59:fa:99:0c:79:60:f5:81:b6:f9:
ed:30:73:d5:92:bf:37:96:78:f9:dc:67:2f:c3:72:e9:9f:8d:
27:bd:68:06:c4:2d:70:09:0d:15:f5:89:3f:c4:a2:86:62:17:
cb:80:b3:52:0e:61:73:ed:bd:0e:c0:ea:93:82:b6:0d:35:a5:
4a:fa:d0:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:31 2026 by rpki-client