Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
File: AS23679.roa (raw, json)
Hash identifier: Dq503gaOS3YoPjly/Sj0VYrakVzRmuudfwRrM1qamxg=
Subject key identifier: F0:5F:E3:9C:5C:4D:43:2D:72:7E:AA:E2:1A:DF:4B:65:79:13:49:DF
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 209F54A59CA912269B86688B76481DDBDA0DC406
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
Signing time: Wed 05 Nov 2025 04:42:49 +0000
ROA not before: Wed 05 Nov 2025 04:37:49 +0000
ROA not after: Wed 04 Nov 2026 04:42:49 +0000
asID: 23679
IP address blocks: 103.31.46.0/24 maxlen: 24
103.114.76.0/24 maxlen: 24
103.114.77.0/24 maxlen: 24
103.114.78.0/24 maxlen: 24
103.196.116.0/24 maxlen: 24
110.232.65.0/24 maxlen: 24
110.232.68.0/23 maxlen: 24
110.232.70.0/24 maxlen: 24
110.232.91.0/24 maxlen: 24
124.158.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 14 Nov 2025 16:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9f:54:a5:9c:a9:12:26:9b:86:68:8b:76:48:1d:db:da:0d:c4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 5 04:37:49 2025 GMT
Not After : Nov 4 04:42:49 2026 GMT
Subject: CN=F05FE39C5C4D432D727EAAE21ADF4B65791349DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:1a:62:ab:d7:9f:ab:b9:09:eb:10:41:1d:
16:34:ec:c3:b9:02:56:1f:00:ed:c6:ee:75:66:53:
f8:ca:67:84:5e:5d:f5:41:70:1c:62:48:03:ae:9c:
0e:e4:0e:86:01:ab:a1:8f:b4:a7:85:2b:8e:f2:09:
01:ab:47:d0:fa:4d:10:f2:c7:d9:da:3f:8d:d8:4e:
1b:77:66:63:07:0d:0d:28:17:03:66:a7:a5:85:ae:
7a:bd:6f:c8:66:23:4d:68:ca:0e:f6:d5:68:98:89:
15:8b:5b:90:3f:cd:7f:f3:7f:89:26:37:16:97:0b:
e4:4e:fd:4c:51:31:ef:85:b1:0d:5b:95:53:8d:fd:
4f:fe:58:f6:71:83:64:c7:3b:7b:96:0f:e0:b8:e3:
b5:c6:f7:6c:33:ab:d7:1f:00:46:dc:54:81:eb:91:
ca:37:17:d3:c0:83:d5:87:fc:a3:8f:91:a3:2e:1c:
8f:d7:02:03:38:70:7b:19:7b:bd:cd:1d:5c:cf:1a:
27:70:36:5a:10:3d:36:14:a1:08:f0:9c:b6:74:2c:
af:6d:3c:a1:9c:ad:99:cf:c7:81:25:ab:63:f0:64:
82:57:e8:80:01:b7:0c:ea:f2:e4:d4:95:2a:fa:0e:
36:f5:7e:bf:2d:68:77:fa:9b:f2:5b:9b:28:00:e2:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:E3:9C:5C:4D:43:2D:72:7E:AA:E2:1A:DF:4B:65:79:13:49:DF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.46.0/24
103.114.76.0-103.114.78.255
103.196.116.0/24
110.232.65.0/24
110.232.68.0-110.232.70.255
110.232.91.0/24
124.158.116.0/23
Signature Algorithm: sha256WithRSAEncryption
62:43:0b:ea:d3:bb:a1:c8:b7:76:ac:ca:2a:4c:76:8b:51:ea:
dd:c9:5b:dd:af:90:3f:7c:5b:67:e7:1a:93:92:59:e5:ad:ec:
ab:4c:d5:49:61:12:12:5f:a9:d6:f8:f1:77:49:e0:f7:27:66:
45:52:3d:38:44:9d:ab:98:21:85:95:c9:6a:ed:bd:3c:4c:f6:
a0:9b:7a:a3:54:41:8b:81:ff:77:42:b2:dd:58:4f:ae:9e:74:
43:6e:57:d4:a6:b2:dc:b0:29:8e:57:48:20:78:e3:50:9c:42:
fe:ac:77:c6:e6:70:4c:47:a2:ed:d4:b0:2d:df:6b:88:ae:1b:
76:f5:39:41:f0:e4:62:e4:72:5b:cf:fe:2b:4f:8b:81:b5:34:
aa:9e:c0:d9:42:39:be:f7:24:f2:9b:4c:8d:b3:3f:d6:8b:39:
97:b5:9d:3f:04:bf:d1:9d:80:5d:70:06:01:5a:6f:cf:99:8e:
29:d5:4b:20:58:de:e3:d0:d2:e2:f6:bb:1d:f9:6a:ae:17:72:
b1:41:41:df:a1:ea:e3:43:d6:8d:e4:7b:e3:f3:46:83:b8:c5:
25:77:e9:e9:94:a1:3b:3b:ef:fb:3a:9a:a3:b1:df:3f:aa:90:
bb:98:fa:3a:7a:42:f5:7f:56:17:85:d2:cf:ef:60:00:74:60:
e6:ce:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 20:55:30 2025 by rpki-client