Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS132641.roa
File: AS132641.roa (raw, json)
Hash identifier: Zf0t/tPGkQ2c7/dF6tzpgFw4XfLag5Vt6p4Szn3757o=
Subject key identifier: EF:7D:FC:97:6C:0D:89:82:3B:E9:63:98:3D:33:DD:FA:89:C8:7A:A9
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 25EAE584DD755CE473EA3FB21BD2A915405A1088
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132641.roa
Signing time: Fri 23 Oct 2026 07:46:07 +0000
ROA not before: Fri 23 Oct 2026 07:41:07 +0000
ROA not after: Fri 22 Oct 2027 07:46:07 +0000
asID: 132641
IP address blocks: 43.251.96.0/22 maxlen: 24
103.19.108.0/22 maxlen: 24
103.41.120.0/22 maxlen: 24
103.132.140.0/22 maxlen: 24
103.145.218.0/23 maxlen: 24
103.145.224.0/23 maxlen: 24
103.145.240.0/23 maxlen: 24
103.145.244.0/23 maxlen: 24
2406:a500:c3e7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 09:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ea:e5:84:dd:75:5c:e4:73:ea:3f:b2:1b:d2:a9:15:40:5a:10:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 23 07:41:07 2026 GMT
Not After : Oct 22 07:46:07 2027 GMT
Subject: CN=EF7DFC976C0D89823BE963983D33DDFA89C87AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:03:65:fc:cf:43:5f:82:9a:92:b2:79:59:
3c:fd:a8:a6:89:c2:37:d6:ff:a2:28:88:9b:73:38:
f6:03:ef:32:9d:ce:cd:14:21:6d:f5:34:fb:64:81:
54:ca:d0:39:34:ad:21:b5:64:25:72:8b:8e:64:f0:
87:52:19:e3:dc:2f:0c:7f:71:ee:64:80:cc:ae:fd:
a8:40:5f:86:05:c4:37:31:0a:41:08:b8:55:b9:94:
54:8e:03:d7:29:a5:72:57:44:38:65:57:5d:28:b1:
c1:56:16:f7:08:b9:9d:2d:75:9d:e8:3a:99:dc:6b:
c1:30:e3:d8:68:f8:2b:e4:6a:83:58:5c:53:78:ff:
21:06:c2:a8:0f:ce:96:6c:09:41:48:3b:4d:d8:a3:
f2:95:f9:9f:7b:8b:66:6c:df:09:a3:9c:8d:1e:b9:
63:9a:7d:1d:a3:63:28:c4:67:d3:e7:ca:f5:c0:02:
34:86:b8:05:d5:f0:0a:15:9e:5e:a0:ea:00:e5:2c:
f5:55:23:e6:6f:1e:ad:c6:69:fb:ac:b5:26:a1:8f:
ed:f4:58:77:8d:40:f4:0a:a3:04:15:f3:7b:e5:a8:
6b:dc:e2:f2:a4:2f:71:d0:4f:dc:3e:73:8a:cb:ab:
b6:58:21:23:1e:79:49:01:c6:d6:93:56:03:89:61:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:FC:97:6C:0D:89:82:3B:E9:63:98:3D:33:DD:FA:89:C8:7A:A9
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.251.96.0/22
103.19.108.0/22
103.41.120.0/22
103.132.140.0/22
103.145.218.0/23
103.145.224.0/23
103.145.240.0/23
103.145.244.0/23
IPv6:
2406:a500:c3e7::/48
Signature Algorithm: sha256WithRSAEncryption
20:35:f1:8e:ab:f3:da:39:f0:18:fc:15:53:2e:d3:68:5e:5d:
e6:e5:97:66:89:1c:54:00:81:72:3f:46:3d:36:98:47:f2:59:
a3:00:f3:c6:98:3f:9d:37:d3:33:ed:b6:0d:93:46:e6:35:7c:
3c:6c:f8:2e:88:c1:66:81:cc:8a:1c:11:f0:c5:47:e3:3f:9a:
81:68:70:14:d1:9a:eb:2d:40:6a:3b:eb:d6:f6:0a:9d:4c:94:
16:3c:d0:7d:89:62:12:21:0e:3e:1d:3f:cc:df:78:d8:b2:5d:
ca:fb:fd:39:9e:f4:85:94:91:8e:d8:87:ef:58:2c:c8:4c:19:
b3:45:33:0b:c2:af:6f:7f:50:32:24:be:3f:81:6a:fb:50:5c:
15:e1:0c:83:7f:7e:f7:39:2d:41:14:5c:f0:b5:62:ca:91:8a:
2b:0e:bf:ae:55:d5:f6:00:44:33:57:56:69:0b:46:a5:e5:b2:
d8:d7:3f:02:c5:e9:6b:f6:59:0e:5b:5f:eb:05:13:7e:fe:e0:
7b:ec:ed:42:30:8c:ab:3a:50:50:e9:aa:26:f2:c6:be:a1:93:
af:27:bd:5c:5c:fe:e4:8c:81:ce:4a:9b:29:9a:39:bc:4b:d2:
de:41:09:ac:78:62:6a:e2:64:12:29:05:28:65:c6:3e:4e:4e:
4a:a6:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:19:51 2026 by rpki-client