Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS63859.roa
File: AS63859.roa (raw, json)
Hash identifier: 0vGMUFLx7ztIUvjS9TSjv2OR4n375JnipqQwIpvCXcA=
Subject key identifier: FD:BF:41:55:E5:3D:8B:38:AA:F3:FB:EE:60:B9:B1:BD:7F:25:05:01
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 40251EBB5D9C70E03D9D70231F0F6DD7B3B17841
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63859.roa
Signing time: Wed 29 Jul 2026 07:17:52 +0000
ROA not before: Wed 29 Jul 2026 07:12:52 +0000
ROA not after: Wed 28 Jul 2027 07:17:52 +0000
asID: 63859
IP address blocks: 9.154.0.0/16 maxlen: 24
9.154.220.0/24 maxlen: 24
9.154.221.0/24 maxlen: 24
9.154.222.0/24 maxlen: 24
9.154.223.0/24 maxlen: 24
9.154.224.0/24 maxlen: 24
9.154.225.0/24 maxlen: 24
9.154.226.0/24 maxlen: 24
9.154.227.0/24 maxlen: 24
9.154.228.0/24 maxlen: 24
9.154.229.0/24 maxlen: 24
9.154.230.0/24 maxlen: 24
9.154.231.0/24 maxlen: 24
9.154.232.0/24 maxlen: 24
9.154.233.0/24 maxlen: 24
9.154.234.0/24 maxlen: 24
9.154.235.0/24 maxlen: 24
9.154.236.0/24 maxlen: 24
9.154.237.0/24 maxlen: 24
9.154.238.0/24 maxlen: 24
9.154.239.0/24 maxlen: 24
157.66.208.0/23 maxlen: 24
157.66.208.0/24 maxlen: 24
157.66.209.0/24 maxlen: 24
157.66.210.0/23 maxlen: 24
157.66.210.0/24 maxlen: 24
157.66.211.0/24 maxlen: 24
158.140.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:25:1e:bb:5d:9c:70:e0:3d:9d:70:23:1f:0f:6d:d7:b3:b1:78:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Jul 29 07:12:52 2026 GMT
Not After : Jul 28 07:17:52 2027 GMT
Subject: CN=FDBF4155E53D8B38AAF3FBEE60B9B1BD7F250501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:3e:1b:17:44:00:b7:dd:89:a4:61:df:7d:
9d:53:e9:b9:97:4f:18:a9:25:69:24:f8:f7:60:c9:
02:e4:82:35:7c:ab:0a:e2:a1:f8:22:a6:ce:7b:aa:
41:2d:52:c0:50:6c:40:eb:5b:42:06:f5:6b:ff:d7:
bc:37:09:aa:b0:a9:39:d0:51:f9:3e:5d:28:f2:6f:
22:19:62:28:92:ec:d8:46:dd:44:e4:3b:46:86:ee:
06:4f:ae:10:7b:02:a6:a8:87:98:33:ec:be:2e:7e:
40:34:9a:92:d7:68:98:16:74:d4:9a:1a:c3:90:6a:
a9:4f:b9:23:c8:06:d0:3c:81:d9:12:76:07:72:86:
38:ec:3d:29:18:ae:13:7d:a0:99:e1:56:b2:10:38:
24:5f:c9:eb:69:4d:dc:50:15:bc:20:15:00:c5:d2:
b0:b2:e2:48:e9:2e:8f:1a:53:05:cc:6c:cc:dc:52:
cd:17:fc:51:6a:e1:e8:d4:48:86:f7:7c:ef:25:93:
8f:b1:dc:0c:91:6b:55:21:60:8c:ec:e9:aa:eb:41:
a6:e5:38:d3:f3:f6:d6:7f:08:b7:56:14:26:06:1e:
92:f9:f5:7f:68:66:31:a6:fe:5e:42:8f:ca:af:b7:
e5:c0:19:9c:8b:9f:b5:d1:45:75:1b:0f:d3:ec:48:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:41:55:E5:3D:8B:38:AA:F3:FB:EE:60:B9:B1:BD:7F:25:05:01
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.154.0.0/16
157.66.208.0/22
158.140.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:62:9c:6d:a7:04:55:77:1f:58:c9:c4:86:61:83:69:40:f4:
77:54:5b:60:3e:42:65:45:57:1b:d5:97:77:e4:7c:e2:af:5f:
83:b1:2c:47:b1:4b:d8:4e:dd:27:9d:39:85:31:65:85:7e:48:
31:7b:0e:12:fd:1f:a4:c7:3d:4b:2c:35:51:43:4a:e0:9a:86:
62:00:a6:dd:8a:98:6e:f2:aa:a8:fa:9f:24:6b:39:c2:6e:4b:
04:02:ea:70:c0:49:4c:cd:57:3f:25:fa:d1:40:fe:2d:98:98:
26:0e:75:25:1a:83:4a:c2:ce:88:58:38:93:33:00:da:31:6e:
2d:37:88:ad:0e:04:a5:29:3f:70:a4:dd:df:9a:0f:7a:81:dc:
fe:20:e7:24:93:45:62:63:79:7b:0d:ae:65:91:31:82:4c:7a:
30:34:a5:79:a0:44:4a:36:5c:ab:2d:34:6f:b2:cd:06:a0:9d:
94:1e:e7:2e:d4:a5:54:9f:60:61:40:11:32:84:4e:a3:35:9c:
05:30:ab:12:40:cc:91:f2:9b:83:a7:1b:84:85:f2:dc:73:17:
ac:51:5b:67:7e:8c:0f:f4:3b:50:5f:14:80:9d:5b:22:3e:99:
0d:38:46:d0:9c:5b:7a:a9:0b:5d:c5:95:da:6e:ce:ca:5f:ec:
7f:71:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:16:13 2026 by rpki-client