Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45700.roa
File: AS45700.roa (raw, json)
Hash identifier: sKxI8891EBzRxok8Jnorm7JUGbw0xfMyO1gX9ne5/RQ=
Subject key identifier: 69:6D:B4:DA:D8:56:65:0A:C1:76:B4:AD:82:E0:46:F2:43:78:B9:9F
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 28BC22B56F0F028BE1C1D2FE67FEA540D9BC6E47
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45700.roa
Signing time: Thu 06 Aug 2026 03:15:03 +0000
ROA not before: Thu 06 Aug 2026 03:10:03 +0000
ROA not after: Thu 05 Aug 2027 03:15:03 +0000
asID: 45700
IP address blocks: 27.131.248.0/22 maxlen: 24
116.254.96.0/22 maxlen: 24
202.65.224.0/20 maxlen: 24
203.17.80.0/21 maxlen: 24
2401:e320::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:bc:22:b5:6f:0f:02:8b:e1:c1:d2:fe:67:fe:a5:40:d9:bc:6e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Aug 6 03:10:03 2026 GMT
Not After : Aug 5 03:15:03 2027 GMT
Subject: CN=696DB4DAD856650AC176B4AD82E046F24378B99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:90:38:c4:44:db:5e:9f:5b:3e:73:81:62:
93:3b:d2:28:fc:a5:6a:7c:0f:cf:16:0d:e2:54:d7:
5a:82:11:b3:22:cb:c7:16:eb:fb:7e:5b:75:24:85:
4a:9f:0a:4e:11:73:4b:14:6f:72:ae:27:0b:7e:86:
01:28:0a:95:5b:01:30:34:70:d4:77:0d:22:9a:21:
f3:78:97:1c:20:b6:21:37:05:69:51:b2:06:39:2e:
04:19:0b:85:3e:59:c7:a6:d1:61:60:ea:d5:30:01:
47:70:d5:42:e1:34:4b:ed:a8:a3:5c:80:6e:88:d1:
e9:11:3a:08:c9:66:e1:cd:a0:55:f4:7f:98:f7:83:
2b:22:05:e2:9d:88:01:d7:9f:3f:e1:05:98:80:17:
7d:46:2c:f5:d9:a7:65:40:58:e9:7d:c3:00:15:86:
e0:52:e4:cf:28:e3:a9:73:4d:5f:d4:fb:5c:74:7c:
15:71:96:2b:76:bc:b5:98:68:1a:04:8d:78:62:37:
bb:c8:ff:29:56:fa:01:8d:37:36:1e:96:11:05:f3:
74:f8:be:ab:06:0f:b8:cc:0c:92:61:08:57:13:57:
2b:7b:f5:6e:9d:6b:8a:7b:0f:64:ba:d9:23:2f:58:
bb:90:7e:13:13:c2:ec:de:88:30:a1:c4:96:03:7d:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6D:B4:DA:D8:56:65:0A:C1:76:B4:AD:82:E0:46:F2:43:78:B9:9F
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.131.248.0/22
116.254.96.0/22
202.65.224.0/20
203.17.80.0/21
IPv6:
2401:e320::/32
Signature Algorithm: sha256WithRSAEncryption
89:c8:c4:29:ef:cc:59:e8:c7:18:1e:94:07:90:ed:95:87:87:
8d:ea:a6:4b:12:82:c9:8c:b3:d2:2f:fc:5c:90:33:e5:cc:b2:
26:b6:a3:8e:3a:e3:84:22:00:30:9c:92:01:a3:21:cd:8a:3d:
b6:02:5d:94:03:4d:3c:23:c5:6f:0d:55:bd:56:91:11:69:de:
57:62:e7:e4:c0:f0:9e:21:96:90:6b:68:16:5c:96:f8:48:97:
cf:85:9d:42:a7:80:b7:79:34:06:e3:d0:a3:47:85:3c:af:0b:
8c:21:31:8c:8b:44:6f:18:cd:8a:09:26:05:0c:c9:68:20:16:
17:22:05:b5:21:42:cc:cb:3d:f2:5d:2b:2f:b5:5e:24:61:e4:
a2:00:b3:2c:b8:ec:a1:de:3f:c9:86:e3:9b:e7:fe:dc:c2:16:
6e:3e:5d:76:3d:da:e0:63:8f:75:12:1a:7c:ad:5c:ee:09:9a:
4b:11:db:61:5f:eb:94:34:31:e5:75:6c:47:1d:8f:a8:76:b7:
5f:e2:22:2d:b3:b1:a8:69:e0:b2:f9:80:c0:e8:18:ba:fa:86:
05:f2:16:90:20:5b:63:8d:05:11:15:25:a3:e4:3e:ad:01:e9:
db:dc:e9:e3:0a:f8:2b:b3:9c:cc:ba:54:3d:a4:60:83:c7:f7:
16:41:cc:9f
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIUKLwitW8PAovhwdL+Z/6lQNm8bkcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwNjAzMTAwM1oX
DTI3MDgwNTAzMTUwM1owMzExMC8GA1UEAxMoNjk2REI0REFEODU2NjUwQUMxNzZC
NEFEODJFMDQ2RjI0Mzc4Qjk5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMd4kDjERNten1s+c4FikzvSKPylanwPzxYN4lTXWoIRsyLLxxbr+35bdSSF
Sp8KThFzSxRvcq4nC36GASgKlVsBMDRw1HcNIpoh83iXHCC2ITcFaVGyBjkuBBkL
hT5Zx6bRYWDq1TABR3DVQuE0S+2oo1yAbojR6RE6CMlm4c2gVfR/mPeDKyIF4p2I
AdefP+EFmIAXfUYs9dmnZUBY6X3DABWG4FLkzyjjqXNNX9T7XHR8FXGWK3a8tZho
GgSNeGI3u8j/KVb6AY03Nh6WEQXzdPi+qwYPuMwMkmEIVxNXK3v1bp1rinsPZLrZ
Iy9Yu5B+ExPC7N6IMKHElgN9nSMCAwEAAaOCAewwggHoMB0GA1UdDgQWBBRpbbTa
2FZlCsF2tK2C4EbyQ3i5nzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDU3MDAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgAB
MBgDBAIbg/gDBAJ0/mADBATKQeADBAPLEVAwDQQCAAIwBwMFACQB4yAwDQYJKoZI
hvcNAQELBQADggEBAInIxCnvzFnoxxgelAeQ7ZWHh43qpksSgsmMs9Iv/FyQM+XM
sia2o44644QiADCckgGjIc2KPbYCXZQDTTwjxW8NVb1WkRFp3ldi5+TA8J4hlpBr
aBZclvhIl8+FnUKngLd5NAbj0KNHhTyvC4whMYyLRG8YzYoJJgUMyWggFhciBbUh
QszLPfJdKy+1XiRh5KIAsyy47KHeP8mG45vn/tzCFm4+XXY92uBjj3USGnytXO4J
mksR22Ff65Q0MeV1bEcdj6h2t1/iIi2zsahp4LL5gMDoGLr6hgXyFpAgW2ONBREV
JaPkPq0B6dvc6eMK+CuznMy6VD2kYIPH9xZBzJ8=
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:55:58 2026 by rpki-client