Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: TPktlimiWXYe6ApdzE/GZtgSAobJ6a4OxVqZqw7F5h8=
Subject key identifier: C7:F1:14:EE:D9:43:A5:57:2F:C0:86:1C:10:8D:2B:39:E5:00:30:89
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 2C5AF5F9941910233C16BD8C1B568B3D41E38F1F
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS0.roa
Signing time: Wed 09 Sep 2026 10:13:55 +0000
ROA not before: Wed 09 Sep 2026 10:08:55 +0000
ROA not after: Wed 08 Sep 2027 10:13:55 +0000
asID: 0
IP address blocks: 157.10.212.0/23 maxlen: 24
157.15.68.0/24 maxlen: 24
157.15.170.0/23 maxlen: 24
157.20.167.0/24 maxlen: 24
157.20.232.0/24 maxlen: 24
157.66.54.0/23 maxlen: 24
157.66.126.0/23 maxlen: 24
157.66.192.0/23 maxlen: 24
160.19.186.0/23 maxlen: 24
160.20.78.0/24 maxlen: 24
160.20.250.0/24 maxlen: 24
160.22.4.0/23 maxlen: 24
160.22.10.0/23 maxlen: 24
160.22.98.0/23 maxlen: 24
160.25.45.0/24 maxlen: 24
160.25.126.0/23 maxlen: 24
160.25.176.0/23 maxlen: 24
160.25.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5a:f5:f9:94:19:10:23:3c:16:bd:8c:1b:56:8b:3d:41:e3:8f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Sep 9 10:08:55 2026 GMT
Not After : Sep 8 10:13:55 2027 GMT
Subject: CN=C7F114EED943A5572FC0861C108D2B39E5003089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:4a:8a:2c:8d:79:72:c6:91:be:81:75:1f:
52:c0:12:b4:39:38:ce:a5:5b:2a:2f:2a:68:4c:3f:
85:7f:00:bb:5c:bb:79:49:69:52:6e:1e:31:94:7a:
fd:87:33:40:c2:de:ab:59:a8:74:6d:46:19:1e:26:
34:3e:01:86:3d:e2:71:fe:17:04:b5:54:21:8b:bd:
cb:1c:c4:99:d2:83:c0:06:3f:03:3c:21:62:77:d2:
31:87:b7:a8:aa:d3:34:57:8b:12:91:7d:59:92:06:
4e:a0:d3:55:fd:c1:30:f4:41:84:b4:b1:04:6a:cd:
cd:7a:3a:2d:32:f9:07:d7:f5:93:c9:7a:20:c1:60:
62:c1:30:41:d6:5f:da:05:ee:a3:f3:12:01:14:0d:
bf:5b:35:f5:a9:59:68:a6:d1:f3:ef:23:2b:bd:50:
d2:5d:b5:7d:75:9b:fd:e9:4b:81:bb:58:e1:a5:be:
b3:94:d1:31:24:c2:39:eb:17:90:c4:78:95:bf:74:
78:75:2e:1c:dd:45:5d:36:0f:04:ff:5d:13:d7:54:
b7:2e:37:4c:63:0b:03:17:55:f9:40:b4:27:77:20:
de:be:26:3a:8b:dc:86:17:73:a8:ed:34:2c:36:c9:
58:c6:2d:52:cb:b0:b2:f8:bc:03:06:9b:dd:d1:1b:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:14:EE:D9:43:A5:57:2F:C0:86:1C:10:8D:2B:39:E5:00:30:89
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.212.0/23
157.15.68.0/24
157.15.170.0/23
157.20.167.0/24
157.20.232.0/24
157.66.54.0/23
157.66.126.0/23
157.66.192.0/23
160.19.186.0/23
160.20.78.0/24
160.20.250.0/24
160.22.4.0/23
160.22.10.0/23
160.22.98.0/23
160.25.45.0/24
160.25.126.0/23
160.25.176.0/23
160.25.246.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:d1:11:05:56:ad:db:10:de:a4:52:77:2b:49:27:8c:31:7b:
81:7e:b3:99:c9:1f:18:94:d2:c1:b2:2d:d1:ad:27:f9:5a:4b:
e5:cc:88:2e:82:c7:61:f7:d9:86:17:be:61:e5:cf:9b:24:71:
e7:57:b5:81:24:e8:d3:cd:93:a2:4c:5e:a5:4b:b5:75:62:85:
20:c7:43:0e:19:95:04:fd:e3:65:a3:6a:30:58:49:0d:96:4b:
98:ac:27:a4:03:d2:cc:8a:35:bd:d8:5d:87:9e:00:d5:6c:f6:
4b:4e:4d:82:2f:40:1d:17:6b:f5:4a:9a:f8:21:22:8f:00:ca:
95:ff:f1:13:30:fb:a2:2e:16:24:1b:dd:0e:03:28:f1:af:4d:
d2:21:d1:86:c4:28:00:cd:95:31:ed:9a:9a:2e:52:c2:2c:7f:
71:20:49:cc:06:3f:1d:a0:ed:6c:26:92:aa:9c:9b:6b:27:d8:
d4:93:bd:ba:7d:ad:15:b0:d9:37:c5:a5:17:51:8a:68:6a:6a:
fc:f2:74:9d:c7:c1:d5:5c:22:80:79:bb:6c:fe:d7:94:67:de:
bf:19:30:21:1a:a3:93:1a:08:9d:a5:c9:64:ff:3d:cf:f0:87:
fe:b7:61:13:e6:57:71:de:5e:fc:d2:f3:4c:7a:60:a7:25:19:
83:65:85:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 09:09:08 2026 by rpki-client