Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS58495.roa
File: AS58495.roa (raw, json)
Hash identifier: x2m5cIeU/mqINUFZ/lzFV4+Kb1Blf0I92hQ2ry5ghao=
Subject key identifier: B8:C5:E7:32:40:C3:55:0B:F5:CF:86:1F:8D:4F:ED:B0:B9:F9:36:F7
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 6D60FAFEBB978BBA651321689A3519EDC4ECEEF9
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS58495.roa
Signing time: Mon 04 May 2026 13:34:50 +0000
ROA not before: Mon 04 May 2026 13:29:50 +0000
ROA not after: Mon 03 May 2027 13:34:50 +0000
asID: 58495
IP address blocks: 157.10.2.0/23 maxlen: 23
157.10.2.0/24 maxlen: 24
157.10.3.0/24 maxlen: 24
157.10.8.0/24 maxlen: 24
157.10.10.0/23 maxlen: 23
157.10.10.0/24 maxlen: 24
157.10.11.0/24 maxlen: 24
157.10.16.0/23 maxlen: 23
157.10.20.0/24 maxlen: 24
157.10.68.0/23 maxlen: 23
157.10.68.0/24 maxlen: 24
157.10.69.0/24 maxlen: 24
157.10.70.0/24 maxlen: 24
157.10.71.0/24 maxlen: 24
157.10.74.0/24 maxlen: 24
157.10.76.0/23 maxlen: 23
157.10.76.0/24 maxlen: 24
157.10.77.0/24 maxlen: 24
157.10.94.0/23 maxlen: 23
157.10.94.0/24 maxlen: 24
157.10.95.0/24 maxlen: 24
157.10.102.0/23 maxlen: 23
157.10.102.0/24 maxlen: 24
157.10.103.0/24 maxlen: 24
157.10.106.0/24 maxlen: 24
157.10.107.0/24 maxlen: 24
157.10.108.0/24 maxlen: 24
157.10.109.0/24 maxlen: 24
157.10.110.0/23 maxlen: 23
157.10.110.0/24 maxlen: 24
157.10.111.0/24 maxlen: 24
157.10.114.0/23 maxlen: 23
157.10.116.0/23 maxlen: 23
157.10.116.0/24 maxlen: 24
157.10.117.0/24 maxlen: 24
157.10.148.0/23 maxlen: 23
157.10.148.0/24 maxlen: 24
157.10.149.0/24 maxlen: 24
157.10.152.0/23 maxlen: 23
157.10.152.0/24 maxlen: 24
157.10.153.0/24 maxlen: 24
157.10.154.0/23 maxlen: 23
157.10.154.0/24 maxlen: 24
157.10.155.0/24 maxlen: 24
157.10.230.0/23 maxlen: 23
157.10.230.0/24 maxlen: 24
157.10.231.0/24 maxlen: 24
157.10.232.0/23 maxlen: 23
157.10.232.0/24 maxlen: 24
157.10.233.0/24 maxlen: 24
157.10.234.0/23 maxlen: 23
157.10.234.0/24 maxlen: 24
157.10.235.0/24 maxlen: 24
157.15.148.0/23 maxlen: 23
157.15.148.0/24 maxlen: 24
157.15.149.0/24 maxlen: 24
157.15.150.0/23 maxlen: 23
157.15.150.0/24 maxlen: 24
157.15.151.0/24 maxlen: 24
157.15.152.0/23 maxlen: 23
157.15.152.0/24 maxlen: 24
157.15.153.0/24 maxlen: 24
157.15.156.0/23 maxlen: 23
157.15.156.0/24 maxlen: 24
157.15.157.0/24 maxlen: 24
157.15.160.0/24 maxlen: 24
157.15.161.0/24 maxlen: 24
157.15.180.0/24 maxlen: 24
157.15.181.0/24 maxlen: 24
157.15.182.0/24 maxlen: 24
157.15.194.0/23 maxlen: 23
157.15.194.0/24 maxlen: 24
157.15.195.0/24 maxlen: 24
157.15.198.0/23 maxlen: 23
157.15.198.0/24 maxlen: 24
157.15.199.0/24 maxlen: 24
157.15.204.0/23 maxlen: 23
157.15.204.0/24 maxlen: 24
157.15.205.0/24 maxlen: 24
157.15.208.0/23 maxlen: 23
157.15.208.0/24 maxlen: 24
157.15.209.0/24 maxlen: 24
157.15.230.0/23 maxlen: 23
157.15.230.0/24 maxlen: 24
157.15.231.0/24 maxlen: 24
157.15.232.0/23 maxlen: 23
157.15.232.0/24 maxlen: 24
157.15.233.0/24 maxlen: 24
157.15.236.0/23 maxlen: 23
157.15.238.0/23 maxlen: 23
157.15.238.0/24 maxlen: 24
157.15.239.0/24 maxlen: 24
157.15.240.0/23 maxlen: 23
157.15.240.0/24 maxlen: 24
157.15.241.0/24 maxlen: 24
157.15.244.0/23 maxlen: 23
157.15.244.0/24 maxlen: 24
157.15.245.0/24 maxlen: 24
157.15.248.0/23 maxlen: 23
157.15.248.0/24 maxlen: 24
157.15.249.0/24 maxlen: 24
157.15.252.0/23 maxlen: 23
157.15.252.0/24 maxlen: 24
157.15.253.0/24 maxlen: 24
157.20.0.0/23 maxlen: 23
157.20.0.0/24 maxlen: 24
157.20.1.0/24 maxlen: 24
157.20.2.0/23 maxlen: 23
157.20.2.0/24 maxlen: 24
157.20.3.0/24 maxlen: 24
157.20.4.0/23 maxlen: 23
157.20.4.0/24 maxlen: 24
157.20.5.0/24 maxlen: 24
157.20.6.0/23 maxlen: 23
157.20.6.0/24 maxlen: 24
157.20.7.0/24 maxlen: 24
157.20.10.0/23 maxlen: 23
157.20.10.0/24 maxlen: 24
157.20.11.0/24 maxlen: 24
157.20.12.0/23 maxlen: 23
157.20.12.0/24 maxlen: 24
157.20.13.0/24 maxlen: 24
157.20.18.0/23 maxlen: 23
157.20.18.0/24 maxlen: 24
157.20.19.0/24 maxlen: 24
157.20.20.0/23 maxlen: 23
157.20.20.0/24 maxlen: 24
157.20.21.0/24 maxlen: 24
157.20.22.0/23 maxlen: 23
157.20.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 03:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:60:fa:fe:bb:97:8b:ba:65:13:21:68:9a:35:19:ed:c4:ec:ee:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: May 4 13:29:50 2026 GMT
Not After : May 3 13:34:50 2027 GMT
Subject: CN=B8C5E73240C3550BF5CF861F8D4FEDB0B9F936F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:52:00:bf:45:7c:a9:97:58:25:ab:95:95:
b3:e6:16:29:42:db:6e:1a:cb:c0:be:5d:75:55:63:
34:c7:a5:18:1f:19:5d:26:88:b3:61:d7:81:61:8c:
10:ae:66:fc:e7:e7:14:ff:46:40:72:76:72:cb:0d:
74:b3:f2:cd:42:7e:5e:99:21:f6:8b:58:f1:d1:0f:
9d:cf:83:92:6d:a9:08:63:64:99:83:b2:16:39:6b:
51:ce:79:fe:60:f4:50:06:0c:b3:1f:6e:d9:a6:d0:
7d:30:1c:ae:6d:59:e2:ba:14:58:66:44:5d:d0:d4:
59:a6:2d:da:8b:c5:aa:c3:fd:9e:58:2e:ac:59:ff:
e7:0a:cb:f2:66:6f:a7:34:d8:bb:dc:6d:ae:bd:d0:
4c:f3:59:5f:ae:d6:cc:ef:46:a8:f1:02:b0:37:1e:
f5:32:b8:c5:68:42:49:cd:26:ec:f8:35:89:f3:91:
a4:40:d8:44:16:6d:55:f3:90:a5:9c:f6:35:ef:87:
4f:7e:d4:07:eb:53:2f:61:55:c8:6b:39:1c:e8:1a:
dc:8b:23:19:96:5e:87:df:ef:aa:40:d4:d5:d9:42:
e4:6c:bd:07:32:06:a8:49:93:cc:93:fd:9e:de:58:
6f:58:38:16:f7:46:76:48:df:04:b1:fe:c1:f6:94:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C5:E7:32:40:C3:55:0B:F5:CF:86:1F:8D:4F:ED:B0:B9:F9:36:F7
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS58495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.2.0/23
157.10.8.0/24
157.10.10.0/23
157.10.16.0/23
157.10.20.0/24
157.10.68.0/22
157.10.74.0/24
157.10.76.0/23
157.10.94.0/23
157.10.102.0/23
157.10.106.0-157.10.111.255
157.10.114.0-157.10.117.255
157.10.148.0/23
157.10.152.0/22
157.10.230.0-157.10.235.255
157.15.148.0-157.15.153.255
157.15.156.0/23
157.15.160.0/23
157.15.180.0-157.15.182.255
157.15.194.0/23
157.15.198.0/23
157.15.204.0/23
157.15.208.0/23
157.15.230.0-157.15.233.255
157.15.236.0-157.15.241.255
157.15.244.0/23
157.15.248.0/23
157.15.252.0/23
157.20.0.0/21
157.20.10.0-157.20.13.255
157.20.18.0-157.20.23.255
Signature Algorithm: sha256WithRSAEncryption
43:f5:d9:28:26:87:7d:53:ef:bd:a2:a0:34:dd:d2:f1:8c:8d:
8c:e9:86:c4:2f:21:4a:da:90:4b:eb:a5:af:35:20:10:be:0c:
6a:92:48:07:4a:f7:ec:a7:72:01:2a:08:4a:03:57:58:40:ec:
38:ad:b0:c5:57:cb:68:d0:ff:65:7c:98:56:11:a1:f7:f0:87:
e8:92:ac:de:d1:2b:8a:1e:08:34:6c:5a:b6:e0:69:76:1d:3e:
64:55:ce:d2:74:fc:3e:45:4f:da:aa:9c:d8:b2:46:16:8e:1d:
77:de:ae:f6:d2:11:dd:f4:13:52:4a:3a:ac:01:2c:62:6b:5f:
58:f7:bd:71:63:0b:d0:49:92:33:e9:4d:6f:06:9d:3c:8e:35:
65:bd:c0:53:99:d4:ad:d8:0a:eb:c8:a6:7d:3f:6d:56:ab:a7:
95:b5:20:47:77:52:04:70:e5:68:70:cc:fc:36:82:6b:26:1e:
19:62:79:61:76:8b:50:54:3d:fe:ce:d5:76:76:7f:2d:2a:b1:
3a:31:f7:a6:44:a5:74:a4:79:52:7c:33:88:f4:b1:d3:57:4a:
02:ba:85:b0:31:fd:15:f2:c7:06:3c:b9:10:c9:0d:af:d2:a7:
5b:6a:ce:aa:de:b0:85:c9:84:82:2a:af:29:b4:cd:4d:9d:f0:
40:c1:ee:5a
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIUbWD6/ruXi7plEyFomjUZ7cTs7vkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0
NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwNDEzMjk1MFoX
DTI3MDUwMzEzMzQ1MFowMzExMC8GA1UEAxMoQjhDNUU3MzI0MEMzNTUwQkY1Q0Y4
NjFGOEQ0RkVEQjBCOUY5MzZGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN0aUgC/RXypl1glq5WVs+YWKULbbhrLwL5ddVVjNMelGB8ZXSaIs2HXgWGM
EK5m/OfnFP9GQHJ2cssNdLPyzUJ+Xpkh9otY8dEPnc+Dkm2pCGNkmYOyFjlrUc55
/mD0UAYMsx9u2abQfTAcrm1Z4roUWGZEXdDUWaYt2ovFqsP9nlgurFn/5wrL8mZv
pzTYu9xtrr3QTPNZX67WzO9GqPECsDce9TK4xWhCSc0m7Pg1ifORpEDYRBZtVfOQ
pZz2Ne+HT37UB+tTL2FVyGs5HOga3IsjGZZeh9/vqkDU1dlC5Gy9BzIGqEmTzJP9
nt5Yb1g4FvdGdkjfBLH+wfaUKEMCAwEAAaOCAtEwggLNMB0GA1UdDgQWBBS4xecy
QMNVC/XPhh+NT+2wufk29zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT
YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB
NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG
MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz
Rm5DMDJJLmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTNTg0OTUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggEjBggrBgEFBQcBBwEB/wSCARIwggEO
MIIBCgQCAAEwggECAwQBnQoCAwQAnQoIAwQBnQoKAwQBnQoQAwQAnQoUAwQCnQpE
AwQAnQpKAwQBnQpMAwQBnQpeAwQBnQpmMAwDBAGdCmoDBASdCmAwDAMEAZ0KcgME
AZ0KdAMEAZ0KlAMEAp0KmDAMAwQBnQrmAwQCnQroMAwDBAKdD5QDBAGdD5gDBAGd
D5wDBAGdD6AwDAMEAp0PtAMEAJ0PtgMEAZ0PwgMEAZ0PxgMEAZ0PzAMEAZ0P0DAM
AwQBnQ/mAwQBnQ/oMAwDBAKdD+wDBAGdD/ADBAGdD/QDBAGdD/gDBAGdD/wDBAOd
FAAwDAMEAZ0UCgMEAZ0UDDAMAwQBnRQSAwQDnRQQMA0GCSqGSIb3DQEBCwUAA4IB
AQBD9dkoJod9U++9oqA03dLxjI2M6YbELyFK2pBL66WvNSAQvgxqkkgHSvfsp3IB
KghKA1dYQOw4rbDFV8to0P9lfJhWEaH38Ifokqze0SuKHgg0bFq24Gl2HT5kVc7S
dPw+RU/aqpzYskYWjh133q720hHd9BNSSjqsASxia19Y971xYwvQSZIz6U1vBp08
jjVlvcBTmdSt2ArryKZ9P21Wq6eVtSBHd1IEcOVocMz8NoJrJh4ZYnlhdotQVD3+
ztV2dn8tKrE6MfemRKV0pHlSfDOI9LHTV0oCuoWwMf0V8scGPLkQyQ2v0qdbas6q
3rCFyYSCKq8ptM1NnfBAwe5a
-----END CERTIFICATE-----
Generated at Thu May 7 03:12:25 2026 by rpki-client