Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133815.roa
File: AS133815.roa (raw, json)
Hash identifier: 1XreoI3mqVCoccaar53fiiX0chMMhjwGfkGQHJeN7qg=
Subject key identifier: 8E:B7:A0:AF:6B:22:A8:16:DC:C0:A1:FB:20:7C:6E:31:8A:B3:F1:54
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 10BC6770956DC2A6D62101469D5676FDD398AF54
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133815.roa
Signing time: Sat 02 May 2026 21:10:46 +0000
ROA not before: Sat 02 May 2026 21:05:46 +0000
ROA not after: Sat 01 May 2027 21:10:46 +0000
asID: 133815
IP address blocks: 103.141.150.0/23 maxlen: 24
103.141.152.0/23 maxlen: 24
103.149.224.0/23 maxlen: 24
103.149.230.0/23 maxlen: 24
103.149.232.0/23 maxlen: 24
103.149.234.0/23 maxlen: 24
103.150.4.0/23 maxlen: 24
103.150.12.0/23 maxlen: 24
103.150.14.0/23 maxlen: 24
103.150.16.0/23 maxlen: 24
103.150.34.0/23 maxlen: 24
103.151.18.0/23 maxlen: 24
103.151.100.0/23 maxlen: 24
103.151.194.0/23 maxlen: 24
103.152.70.0/23 maxlen: 24
103.152.90.0/23 maxlen: 24
103.152.96.0/23 maxlen: 24
103.152.110.0/23 maxlen: 24
103.188.40.0/23 maxlen: 24
103.188.50.0/23 maxlen: 24
103.188.52.0/23 maxlen: 24
103.190.216.0/23 maxlen: 24
103.190.218.0/23 maxlen: 24
103.190.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bc:67:70:95:6d:c2:a6:d6:21:01:46:9d:56:76:fd:d3:98:af:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:05:46 2026 GMT
Not After : May 1 21:10:46 2027 GMT
Subject: CN=8EB7A0AF6B22A816DCC0A1FB207C6E318AB3F154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:9e:99:ac:53:88:d8:38:0c:be:7f:14:a9:
96:59:8b:12:94:48:c0:bb:25:d3:30:75:b5:6e:fa:
18:a0:ac:14:86:e2:0b:d1:74:08:14:ee:78:ad:99:
fb:1a:c4:35:3d:6a:20:3b:5b:86:da:d3:7a:20:f4:
45:45:cd:96:5e:97:ba:7e:e3:4c:62:a6:d9:6d:4f:
2f:4f:b7:6f:f1:43:26:a3:6a:0d:be:ad:8a:21:5e:
ac:a9:01:9c:43:bc:dd:7e:8a:42:78:2a:6f:01:f5:
cd:ba:bc:d5:46:d9:71:d3:60:04:3f:91:58:e5:11:
b9:ca:be:6c:cf:d8:b3:3e:05:fd:a6:9f:d8:46:3e:
00:7a:1a:0e:0f:61:c1:df:77:03:d9:de:6d:59:ec:
ad:e6:32:66:bc:b0:5d:2a:6b:4b:a7:88:41:c7:80:
28:66:40:f2:ee:94:c0:df:5a:fa:f7:d9:6c:a4:36:
5f:1d:bf:39:d1:60:b1:21:0c:eb:d0:45:44:c0:80:
3c:55:b3:7f:ec:5f:b7:1d:75:60:09:e1:3d:e3:6a:
58:5f:16:ca:c3:d2:02:9b:77:70:52:62:5b:0b:cf:
84:98:0c:e4:42:bc:8a:f2:6e:52:15:2b:da:f2:91:
ee:5c:56:92:aa:94:57:9f:13:88:82:90:1a:29:67:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B7:A0:AF:6B:22:A8:16:DC:C0:A1:FB:20:7C:6E:31:8A:B3:F1:54
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133815.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.150.0-103.141.153.255
103.149.224.0/23
103.149.230.0-103.149.235.255
103.150.4.0/23
103.150.12.0-103.150.17.255
103.150.34.0/23
103.151.18.0/23
103.151.100.0/23
103.151.194.0/23
103.152.70.0/23
103.152.90.0/23
103.152.96.0/23
103.152.110.0/23
103.188.40.0/23
103.188.50.0-103.188.53.255
103.190.216.0-103.190.221.255
Signature Algorithm: sha256WithRSAEncryption
9a:10:0b:3f:0a:b1:e3:a4:08:18:54:3f:a8:88:12:f1:a4:f2:
b1:e8:8f:b8:9b:d6:89:28:84:9b:37:6e:37:d9:36:25:93:1d:
69:6c:b2:62:a5:60:b1:09:fa:89:5d:c7:6b:8c:a9:ba:d7:77:
7f:8b:3e:a2:42:86:43:f0:1c:71:64:e0:d9:2a:5d:80:a5:1d:
36:80:a6:ee:c9:a8:34:3d:94:01:f7:a1:6b:24:73:7d:cf:1b:
02:21:9d:93:c9:0b:c7:be:22:23:2f:d4:94:71:b2:b8:7b:6f:
65:59:3d:94:9e:34:9c:93:d7:ef:8e:c7:6f:61:a2:81:fd:0a:
f1:81:ac:c2:1f:06:fd:62:ef:56:3f:1e:76:5c:2e:97:5d:bb:
0c:b9:46:4c:ee:b8:8c:99:b3:79:f9:c0:bc:50:36:cd:25:94:
73:a9:14:d2:6f:70:70:ce:39:22:55:0f:5c:52:81:4f:c6:f3:
3c:bc:d3:3e:cb:64:29:77:1c:58:f1:f2:8f:98:74:8f:81:2e:
f6:17:26:cf:81:e7:0f:e4:e6:ed:00:3f:fe:1a:cb:7f:ae:81:
e4:09:69:9e:2e:5b:23:63:35:38:08:8b:74:0e:78:22:09:2c:
84:de:96:11:75:4b:ed:ec:76:08:41:29:80:36:67:bb:e0:da:
f8:00:9b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:23 2026 by rpki-client