Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS131111.roa
File: AS131111.roa (raw, json)
Hash identifier: dtJagLRBbjBD3s0HgP9z1ADBFk/eaJYWic8iht0i0Uw=
Subject key identifier: D1:6A:CB:E4:3F:55:CD:37:ED:26:B5:E6:B3:D1:F9:90:BE:22:CA:54
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0DE8FCAA7A58495C1F0D584B49112795A0DD7261
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131111.roa
Signing time: Sat 02 May 2026 21:22:53 +0000
ROA not before: Sat 02 May 2026 21:17:53 +0000
ROA not after: Sat 01 May 2027 21:22:53 +0000
asID: 131111
IP address blocks: 103.75.24.0/22 maxlen: 24
103.75.208.0/22 maxlen: 24
103.76.24.0/22 maxlen: 24
103.78.80.0/22 maxlen: 24
103.78.96.0/22 maxlen: 24
103.78.212.0/22 maxlen: 24
103.81.132.0/22 maxlen: 24
103.82.12.0/22 maxlen: 24
103.83.4.0/22 maxlen: 24
103.83.92.0/22 maxlen: 24
103.85.60.0/22 maxlen: 24
103.85.64.0/22 maxlen: 24
103.117.157.0/24 maxlen: 24
103.122.32.0/24 maxlen: 24
103.122.33.0/24 maxlen: 24
103.122.34.0/24 maxlen: 24
103.122.35.0/24 maxlen: 24
103.123.64.0/24 maxlen: 24
103.123.65.0/24 maxlen: 24
103.123.66.0/24 maxlen: 24
103.123.67.0/24 maxlen: 24
103.123.68.0/24 maxlen: 24
103.123.69.0/24 maxlen: 24
103.123.70.0/24 maxlen: 24
103.123.71.0/24 maxlen: 24
103.123.248.0/24 maxlen: 24
103.123.249.0/24 maxlen: 24
103.123.250.0/24 maxlen: 24
103.123.251.0/24 maxlen: 24
103.124.112.0/24 maxlen: 24
103.124.113.0/24 maxlen: 24
103.124.114.0/24 maxlen: 24
103.124.115.0/24 maxlen: 24
103.124.118.0/24 maxlen: 24
103.124.119.0/24 maxlen: 24
103.125.208.0/24 maxlen: 24
103.125.209.0/24 maxlen: 24
103.125.210.0/24 maxlen: 24
103.125.211.0/24 maxlen: 24
103.135.212.0/24 maxlen: 24
103.135.213.0/24 maxlen: 24
103.135.214.0/24 maxlen: 24
103.135.215.0/24 maxlen: 24
103.135.220.0/22 maxlen: 24
103.135.222.0/24 maxlen: 24
103.135.223.0/24 maxlen: 24
103.136.56.0/24 maxlen: 24
103.136.57.0/24 maxlen: 24
103.136.58.0/24 maxlen: 24
103.136.59.0/24 maxlen: 24
103.154.78.0/24 maxlen: 24
103.154.79.0/24 maxlen: 24
103.154.80.0/24 maxlen: 24
103.154.81.0/24 maxlen: 24
103.154.82.0/24 maxlen: 24
103.154.83.0/24 maxlen: 24
103.154.84.0/24 maxlen: 24
103.154.85.0/24 maxlen: 24
103.154.86.0/24 maxlen: 24
103.154.87.0/24 maxlen: 24
103.154.88.0/24 maxlen: 24
103.154.89.0/24 maxlen: 24
103.154.90.0/24 maxlen: 24
103.154.91.0/24 maxlen: 24
103.154.92.0/24 maxlen: 24
103.154.93.0/24 maxlen: 24
103.154.108.0/24 maxlen: 24
103.154.109.0/24 maxlen: 24
103.154.110.0/24 maxlen: 24
103.154.111.0/24 maxlen: 24
103.154.112.0/24 maxlen: 24
103.154.113.0/24 maxlen: 24
103.154.114.0/24 maxlen: 24
103.154.115.0/24 maxlen: 24
103.154.116.0/24 maxlen: 24
103.154.117.0/24 maxlen: 24
103.154.118.0/24 maxlen: 24
103.154.119.0/24 maxlen: 24
103.154.120.0/24 maxlen: 24
103.154.121.0/24 maxlen: 24
103.154.122.0/24 maxlen: 24
103.154.123.0/24 maxlen: 24
103.154.124.0/24 maxlen: 24
103.154.125.0/24 maxlen: 24
103.154.126.0/24 maxlen: 24
103.154.127.0/24 maxlen: 24
103.154.128.0/24 maxlen: 24
103.154.129.0/24 maxlen: 24
103.154.130.0/24 maxlen: 24
103.154.131.0/24 maxlen: 24
103.154.134.0/24 maxlen: 24
103.154.135.0/24 maxlen: 24
103.154.136.0/24 maxlen: 24
103.154.137.0/24 maxlen: 24
103.154.138.0/24 maxlen: 24
103.154.139.0/24 maxlen: 24
103.154.140.0/24 maxlen: 24
103.154.141.0/24 maxlen: 24
103.154.142.0/24 maxlen: 24
103.154.143.0/24 maxlen: 24
103.154.144.0/24 maxlen: 24
103.154.145.0/24 maxlen: 24
103.154.146.0/24 maxlen: 24
103.154.147.0/24 maxlen: 24
103.154.148.0/24 maxlen: 24
103.154.149.0/24 maxlen: 24
103.154.150.0/24 maxlen: 24
103.154.151.0/24 maxlen: 24
103.154.152.0/24 maxlen: 24
103.154.153.0/24 maxlen: 24
103.154.210.0/24 maxlen: 24
103.154.211.0/24 maxlen: 24
103.154.212.0/24 maxlen: 24
103.154.213.0/24 maxlen: 24
103.154.214.0/24 maxlen: 24
103.154.215.0/24 maxlen: 24
103.154.216.0/24 maxlen: 24
103.154.217.0/24 maxlen: 24
103.154.218.0/24 maxlen: 24
103.154.219.0/24 maxlen: 24
103.154.220.0/24 maxlen: 24
103.154.221.0/24 maxlen: 24
103.154.222.0/24 maxlen: 24
103.154.223.0/24 maxlen: 24
103.154.224.0/24 maxlen: 24
103.154.225.0/24 maxlen: 24
103.154.226.0/24 maxlen: 24
103.154.227.0/24 maxlen: 24
103.154.228.0/24 maxlen: 24
103.154.229.0/24 maxlen: 24
119.235.208.0/20 maxlen: 20
119.235.208.0/20 maxlen: 24
119.235.208.0/24 maxlen: 24
119.235.209.0/24 maxlen: 24
119.235.221.0/24 maxlen: 24
202.150.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e8:fc:aa:7a:58:49:5c:1f:0d:58:4b:49:11:27:95:a0:dd:72:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:17:53 2026 GMT
Not After : May 1 21:22:53 2027 GMT
Subject: CN=D16ACBE43F55CD37ED26B5E6B3D1F990BE22CA54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:49:a5:eb:82:02:6a:b9:58:22:d0:52:ed:2c:
37:56:de:25:ba:d0:8e:7c:34:27:56:6f:03:60:df:
93:ad:29:ac:cd:b6:dc:4b:aa:05:2a:25:6f:e0:17:
39:9f:a2:aa:2d:b8:95:2a:1d:0b:16:d5:4a:f1:9b:
e5:91:f3:27:3e:7f:fa:46:dd:c2:69:a2:eb:bb:0c:
0e:be:00:a2:41:e4:a4:39:af:8e:44:9d:9d:fb:70:
9f:f2:62:68:2a:74:b5:9a:57:f4:58:7f:70:32:2f:
a9:f5:e2:79:54:35:f6:8f:c4:59:cb:0e:65:e8:94:
5f:eb:57:30:a1:26:c6:ed:14:19:b5:47:b3:6e:21:
15:08:ba:3f:09:c3:f1:0c:79:9b:59:e6:8f:69:35:
b2:f7:89:fe:5f:66:e8:02:73:b2:32:79:7e:2e:b7:
b6:42:30:28:4a:c5:18:64:25:fb:74:d8:7d:3e:02:
27:ec:ba:2d:93:27:ae:a5:55:e6:be:15:78:84:64:
ae:5d:f2:0d:e7:fd:d3:de:72:23:5f:f8:dd:5b:4e:
bd:e0:19:8f:7a:55:3c:43:b8:ef:a3:7b:cf:39:d4:
e6:01:8c:03:4c:68:13:eb:a0:ad:e3:83:6a:66:6e:
38:df:ef:34:bf:f8:e2:c8:41:2e:5e:4f:99:c9:ce:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:CB:E4:3F:55:CD:37:ED:26:B5:E6:B3:D1:F9:90:BE:22:CA:54
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.24.0/22
103.75.208.0/22
103.76.24.0/22
103.78.80.0/22
103.78.96.0/22
103.78.212.0/22
103.81.132.0/22
103.82.12.0/22
103.83.4.0/22
103.83.92.0/22
103.85.60.0-103.85.67.255
103.117.157.0/24
103.122.32.0/22
103.123.64.0/21
103.123.248.0/22
103.124.112.0/22
103.124.118.0/23
103.125.208.0/22
103.135.212.0/22
103.135.220.0/22
103.136.56.0/22
103.154.78.0-103.154.93.255
103.154.108.0-103.154.131.255
103.154.134.0-103.154.153.255
103.154.210.0-103.154.229.255
119.235.208.0/20
202.150.64.0/19
Signature Algorithm: sha256WithRSAEncryption
81:23:2d:c5:92:9c:6f:cf:65:c4:a7:6c:ab:23:89:8a:a6:92:
0a:66:ab:86:a1:92:8e:af:42:7f:a7:a8:3a:f3:2d:90:8d:6b:
e3:ba:76:e6:92:30:76:be:12:33:46:6b:75:9f:85:0a:65:b5:
82:e9:46:96:71:0b:1c:9b:f5:a7:d1:9f:cf:da:fd:0d:ea:5b:
47:41:20:bd:91:17:02:84:96:4b:bc:bb:d4:72:e7:26:00:19:
35:56:91:8d:8f:fe:39:63:d5:48:3d:6f:b3:16:4b:e8:e2:3f:
d1:d9:b9:bc:c6:03:5d:f6:de:fa:de:6b:59:8c:84:e5:71:2e:
75:5d:54:e8:31:95:3a:c4:74:fc:54:41:53:58:1e:69:b6:e4:
09:89:f5:b8:b9:95:48:f7:50:fd:47:7e:c2:43:48:9a:8b:08:
1f:ac:36:27:78:0a:7d:1a:a3:5f:25:81:68:cb:a4:58:fb:68:
b5:f1:22:e0:00:30:2e:8f:98:a8:4d:b4:b5:35:5b:29:92:22:
04:67:26:43:64:f5:f3:ce:d3:ad:66:64:9f:2a:13:8c:b3:e0:
43:be:49:23:ff:c9:e7:e8:8a:4a:e2:65:3e:b5:8c:d4:84:dc:
7f:b8:5b:e6:c3:4d:e1:49:f7:40:30:db:8f:79:21:64:4a:04:
3f:a9:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:32 2026 by rpki-client