Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133800.roa
File: AS133800.roa (raw, json)
Hash identifier: HEnWK8JUNqJNf/1e1sesrr/zakqwliPMDTrL/SwlSrI=
Subject key identifier: 77:96:7D:B8:E9:0F:B9:54:7E:86:48:26:DA:F7:3E:54:15:FC:A8:C4
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6153458D9526203119352ED2EEC92AC17DFE181C
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133800.roa
Signing time: Sat 02 May 2026 21:22:48 +0000
ROA not before: Sat 02 May 2026 21:17:48 +0000
ROA not after: Sat 01 May 2027 21:22:48 +0000
asID: 133800
IP address blocks: 103.28.75.0/24 maxlen: 24
103.31.204.0/23 maxlen: 24
103.44.26.0/23 maxlen: 24
103.77.104.0/23 maxlen: 24
103.89.0.0/22 maxlen: 24
103.89.4.0/22 maxlen: 24
103.93.52.0/22 maxlen: 24
103.93.56.0/22 maxlen: 24
103.93.64.0/22 maxlen: 24
103.93.128.0/22 maxlen: 24
103.93.132.0/22 maxlen: 24
103.93.160.0/22 maxlen: 24
103.125.180.0/23 maxlen: 24
103.127.96.0/23 maxlen: 24
103.127.98.0/23 maxlen: 24
103.127.132.0/23 maxlen: 24
103.127.134.0/23 maxlen: 24
103.127.136.0/23 maxlen: 24
103.127.138.0/23 maxlen: 24
103.127.208.0/23 maxlen: 24
103.127.210.0/23 maxlen: 24
103.129.148.0/23 maxlen: 24
103.150.80.0/24 maxlen: 24
103.150.84.0/23 maxlen: 24
103.150.86.0/23 maxlen: 24
103.150.88.0/23 maxlen: 24
103.150.90.0/23 maxlen: 24
103.150.92.0/23 maxlen: 24
103.150.96.0/23 maxlen: 24
103.150.98.0/23 maxlen: 24
103.150.100.0/23 maxlen: 24
103.150.102.0/23 maxlen: 24
103.150.116.0/23 maxlen: 24
103.150.120.0/23 maxlen: 24
103.150.190.0/23 maxlen: 24
103.150.192.0/23 maxlen: 24
103.150.194.0/23 maxlen: 24
103.150.196.0/23 maxlen: 24
103.175.216.0/23 maxlen: 24
103.175.218.0/23 maxlen: 24
103.175.220.0/23 maxlen: 24
103.196.146.0/23 maxlen: 24
103.196.152.0/23 maxlen: 24
103.196.154.0/23 maxlen: 24
116.206.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:53:45:8d:95:26:20:31:19:35:2e:d2:ee:c9:2a:c1:7d:fe:18:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:17:48 2026 GMT
Not After : May 1 21:22:48 2027 GMT
Subject: CN=77967DB8E90FB9547E864826DAF73E5415FCA8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:b7:7d:5b:da:32:b0:69:17:f0:65:06:6c:
fc:1c:1a:2a:19:04:0a:6d:50:f5:c5:45:2f:8e:77:
16:8e:64:8a:37:e8:3a:19:23:8a:45:c8:b5:39:56:
97:71:a2:a7:7b:4d:26:4b:db:52:08:4c:83:b8:e6:
04:93:75:40:c2:d4:71:ab:97:71:c9:24:bc:07:a4:
b7:4a:3a:96:aa:9d:ec:b8:a0:33:58:fd:e3:c2:cb:
98:70:46:25:11:3c:b8:61:6b:76:fc:08:0f:74:63:
34:20:55:89:07:b6:d8:b7:c3:88:56:3b:04:9e:6e:
5c:e5:a3:9e:7c:be:45:86:d0:9d:c1:71:b2:b5:af:
02:00:cf:43:47:9b:01:41:2e:99:d6:a0:ac:cb:31:
09:76:06:ee:0f:72:a7:37:f2:1e:61:42:47:cc:44:
36:08:ec:5a:f2:17:df:7e:15:f3:93:e1:9b:79:7e:
d9:58:ab:cc:d3:eb:ff:59:fc:62:5c:7b:04:7a:01:
1b:59:23:52:55:34:87:88:44:92:04:f5:4a:7d:0d:
79:5f:12:f9:b1:18:9c:10:40:76:9e:6d:99:25:6f:
f1:63:93:5c:8b:89:82:c1:b5:6c:5a:07:1a:b9:6b:
a3:79:3a:55:8d:8e:f3:8e:0b:a0:4a:c9:b0:5d:2f:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:7D:B8:E9:0F:B9:54:7E:86:48:26:DA:F7:3E:54:15:FC:A8:C4
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133800.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.75.0/24
103.31.204.0/23
103.44.26.0/23
103.77.104.0/23
103.89.0.0/21
103.93.52.0-103.93.59.255
103.93.64.0/22
103.93.128.0/21
103.93.160.0/22
103.125.180.0/23
103.127.96.0/22
103.127.132.0-103.127.139.255
103.127.208.0/22
103.129.148.0/23
103.150.80.0/24
103.150.84.0-103.150.93.255
103.150.96.0/21
103.150.116.0/23
103.150.120.0/23
103.150.190.0-103.150.197.255
103.175.216.0-103.175.221.255
103.196.146.0/23
103.196.152.0/22
116.206.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:7e:16:c3:b7:48:c9:a4:58:ad:df:5e:63:57:e9:ce:db:a8:
f3:48:fb:a4:50:8e:33:e3:70:e8:6a:27:2a:97:ae:93:e6:7b:
5a:a1:0f:a7:6a:ab:48:fd:44:f9:7e:ce:ec:c8:f4:d2:6c:43:
78:c3:94:78:89:2b:f4:c7:51:81:21:d3:f0:97:6b:e6:b9:5d:
a6:53:69:1a:0b:23:0d:f4:4d:b8:18:b5:9d:2f:4e:64:34:32:
f9:9c:8d:7f:bf:34:18:56:9b:21:ce:46:96:15:d3:f4:ec:ed:
69:86:75:21:72:5b:bc:39:f7:3d:7b:70:24:2c:30:f5:a2:a5:
e5:6f:7a:76:a2:2d:75:ee:cb:ed:84:45:eb:e1:19:e2:84:bc:
2a:56:7f:6f:c0:ef:44:af:71:47:eb:0a:69:08:b6:b6:a2:b6:
02:12:1b:f8:40:db:ae:69:dd:b0:95:e3:0c:14:f0:32:34:f4:
7f:d6:8f:1a:0f:d3:64:bf:4b:e9:e4:42:a4:4d:9e:5c:00:1c:
87:e8:cd:f1:e1:b7:9a:37:5e:d4:c3:47:e1:4d:01:d5:4d:d2:
66:cd:65:d8:2f:a3:8f:5b:9a:a2:18:39:44:77:22:ce:c8:22:
ad:1d:62:81:2b:6a:f4:99:1f:18:eb:d1:55:dc:a2:31:68:73:
d5:87:bd:00
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUYVNFjZUmIDEZNS7S7skqwX3+GBwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTc0OFoX
DTI3MDUwMTIxMjI0OFowMzExMC8GA1UEAxMoNzc5NjdEQjhFOTBGQjk1NDdFODY0
ODI2REFGNzNFNTQxNUZDQThDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANyWt31b2jKwaRfwZQZs/BwaKhkECm1Q9cVFL453Fo5kijfoOhkjikXItTlW
l3Gip3tNJkvbUghMg7jmBJN1QMLUcauXcckkvAekt0o6lqqd7LigM1j948LLmHBG
JRE8uGFrdvwID3RjNCBViQe22LfDiFY7BJ5uXOWjnny+RYbQncFxsrWvAgDPQ0eb
AUEumdagrMsxCXYG7g9ypzfyHmFCR8xENgjsWvIX334V85Phm3l+2VirzNPr/1n8
Ylx7BHoBG1kjUlU0h4hEkgT1Sn0NeV8S+bEYnBBAdp5tmSVv8WOTXIuJgsG1bFoH
Grlro3k6VY2O844LoErJsF0vtfcCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBR3ln24
6Q+5VH6GSCba9z5UFfyoxDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzODAwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHVBggrBgEFBQcBBwEB/wSBxTCBwjCB
vwQCAAEwgbgDBABnHEsDBAFnH8wDBAFnLBoDBAFnTWgDBANnWQAwDAMEAmddNAME
AmddOAMEAmddQAMEA2ddgAMEAmddoAMEAWd9tAMEAmd/YDAMAwQCZ3+EAwQCZ3+I
AwQCZ3/QAwQBZ4GUAwQAZ5ZQMAwDBAJnllQDBAFnllwDBANnlmADBAFnlnQDBAFn
lngwDAMEAWeWvgMEAWeWxDAMAwQDZ6/YAwQBZ6/cAwQBZ8SSAwQCZ8SYAwQCdM7E
MA0GCSqGSIb3DQEBCwUAA4IBAQBMfhbDt0jJpFit315jV+nO26jzSPukUI4z43Do
aicql66T5ntaoQ+naqtI/UT5fs7syPTSbEN4w5R4iSv0x1GBIdPwl2vmuV2mU2ka
CyMN9E24GLWdL05kNDL5nI1/vzQYVpshzkaWFdP07O1phnUhclu8Ofc9e3AkLDD1
oqXlb3p2oi117svthEXr4RnihLwqVn9vwO9Er3FH6wppCLa2orYCEhv4QNuuad2w
leMMFPAyNPR/1o8aD9Nkv0vp5EKkTZ5cAByH6M3x4beaN17Uw0fhTQHVTdJmzWXY
L6OPW5qiGDlEdyLOyCKtHWKBK2r0mR8Y69FV3KIxaHPVh70A
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:29 2026 by rpki-client