Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
File: AS136052.roa (raw, json)
Hash identifier: 3dSQt3IpQQNsKllIiS0mlSHGM2Z4HKL2xiR9/Ymc3do=
Subject key identifier: 86:1E:A1:7E:FC:81:C1:93:73:13:BA:8B:AD:A1:38:54:3E:45:54:E9
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6BA887E867F97472E9EEFD9AB8B008D3B7B27F37
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
Signing time: Sat 02 May 2026 21:29:55 +0000
ROA not before: Sat 02 May 2026 21:24:55 +0000
ROA not after: Sat 01 May 2027 21:29:55 +0000
asID: 136052
IP address blocks: 27.112.78.0/23 maxlen: 24
27.112.78.0/24 maxlen: 24
103.15.226.0/24 maxlen: 24
103.23.198.0/23 maxlen: 24
103.28.52.0/23 maxlen: 23
103.28.52.0/23 maxlen: 24
103.31.38.0/23 maxlen: 24
103.49.238.0/23 maxlen: 24
103.52.114.0/23 maxlen: 24
103.54.170.0/24 maxlen: 24
103.55.36.0/23 maxlen: 24
103.55.36.0/24 maxlen: 24
103.55.37.0/24 maxlen: 24
103.55.38.0/23 maxlen: 24
103.55.38.0/24 maxlen: 24
103.55.39.0/24 maxlen: 24
103.59.94.0/23 maxlen: 23
103.59.94.0/23 maxlen: 24
103.63.24.0/23 maxlen: 24
103.67.78.0/23 maxlen: 23
103.67.78.0/23 maxlen: 24
103.76.120.0/23 maxlen: 23
103.76.120.0/23 maxlen: 24
103.82.92.0/23 maxlen: 24
103.117.56.0/23 maxlen: 24
103.123.62.0/23 maxlen: 23
103.123.62.0/23 maxlen: 24
103.139.192.0/23 maxlen: 24
103.146.202.0/23 maxlen: 23
103.171.18.0/24 maxlen: 24
103.171.84.0/23 maxlen: 24
103.171.84.0/24 maxlen: 24
103.171.85.0/24 maxlen: 24
103.172.204.0/23 maxlen: 24
103.174.114.0/23 maxlen: 24
103.176.76.0/24 maxlen: 24
103.176.78.0/23 maxlen: 24
103.179.56.0/23 maxlen: 24
103.179.254.0/23 maxlen: 24
103.181.142.0/23 maxlen: 24
103.183.74.0/23 maxlen: 24
103.186.0.0/23 maxlen: 23
103.191.92.0/23 maxlen: 24
103.193.176.0/23 maxlen: 24
103.193.178.0/23 maxlen: 24
103.214.112.0/24 maxlen: 24
103.214.113.0/24 maxlen: 24
103.217.144.0/23 maxlen: 24
103.217.226.0/23 maxlen: 24
103.226.138.0/23 maxlen: 24
103.236.201.0/24 maxlen: 24
103.242.10.0/23 maxlen: 24
103.250.208.0/23 maxlen: 24
116.193.190.0/23 maxlen: 24
203.145.34.0/23 maxlen: 23
203.145.34.0/23 maxlen: 24
203.145.35.0/24 maxlen: 24
210.79.190.0/24 maxlen: 24
210.79.191.0/24 maxlen: 24
2001:df7:7400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a8:87:e8:67:f9:74:72:e9:ee:fd:9a:b8:b0:08:d3:b7:b2:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:24:55 2026 GMT
Not After : May 1 21:29:55 2027 GMT
Subject: CN=861EA17EFC81C1937313BA8BADA138543E4554E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:4b:46:e1:f4:58:c0:59:f6:fd:9f:73:ce:
a0:d0:df:e4:4d:ff:a7:56:9a:4c:51:7b:b0:c2:24:
32:63:22:bd:12:cb:86:7f:64:4a:a8:3d:46:92:a9:
a8:77:4e:1b:32:45:47:e4:d5:bb:ee:f5:28:d6:15:
92:0e:8b:79:a6:b9:f0:07:d2:08:7f:40:1f:ff:04:
be:72:35:97:8b:89:9f:74:5d:70:9f:a5:b9:28:70:
bc:41:29:a6:3c:44:df:1b:96:60:53:44:37:31:1f:
fc:15:10:92:ff:6a:d0:57:31:50:50:aa:ff:d2:a0:
ea:20:00:f4:0c:2a:b6:e3:24:e1:34:7b:10:bc:25:
ce:ff:01:d9:92:df:0a:3a:f5:66:95:d0:3e:8d:42:
33:44:6c:c7:7d:e9:fc:71:18:b0:56:05:18:cf:d1:
80:ef:22:70:db:03:c7:be:2f:11:1d:29:44:af:0a:
4f:00:a6:71:18:fd:f6:6c:50:8f:9c:df:0d:f2:23:
08:2d:0a:6a:d6:5c:44:96:32:e8:5a:bd:98:3e:14:
32:b4:02:7c:bc:63:00:3a:e1:f2:cf:a5:0c:9d:71:
af:a7:4a:36:33:20:18:62:02:83:a1:34:65:4f:54:
fd:72:b4:25:3b:32:e8:74:32:ab:4c:f2:9e:97:f4:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:A1:7E:FC:81:C1:93:73:13:BA:8B:AD:A1:38:54:3E:45:54:E9
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.78.0/23
103.15.226.0/24
103.23.198.0/23
103.28.52.0/23
103.31.38.0/23
103.49.238.0/23
103.52.114.0/23
103.54.170.0/24
103.55.36.0/22
103.59.94.0/23
103.63.24.0/23
103.67.78.0/23
103.76.120.0/23
103.82.92.0/23
103.117.56.0/23
103.123.62.0/23
103.139.192.0/23
103.146.202.0/23
103.171.18.0/24
103.171.84.0/23
103.172.204.0/23
103.174.114.0/23
103.176.76.0/24
103.176.78.0/23
103.179.56.0/23
103.179.254.0/23
103.181.142.0/23
103.183.74.0/23
103.186.0.0/23
103.191.92.0/23
103.193.176.0/22
103.214.112.0/23
103.217.144.0/23
103.217.226.0/23
103.226.138.0/23
103.236.201.0/24
103.242.10.0/23
103.250.208.0/23
116.193.190.0/23
203.145.34.0/23
210.79.190.0/23
IPv6:
2001:df7:7400::/48
Signature Algorithm: sha256WithRSAEncryption
1a:23:ff:32:11:bb:08:2d:38:f8:63:ad:8f:13:a3:42:13:75:
28:75:a4:07:ce:36:b7:81:e5:5d:58:c5:9e:e0:ca:b1:a2:41:
d6:a4:58:af:5b:47:9a:1e:39:86:71:f3:37:b4:d5:0d:b5:54:
18:67:b5:94:05:27:72:83:d3:9a:2c:48:e0:f0:a1:20:08:df:
dd:54:4e:25:1f:75:9f:f4:e5:a6:e0:38:62:92:5e:59:c0:f9:
12:2d:96:d8:1a:23:ea:2f:d2:bc:ff:29:fe:16:a5:34:7f:54:
a0:94:5f:f9:42:5b:00:e6:d3:37:01:09:48:de:c3:b7:38:0a:
63:9b:ae:2a:95:2a:22:5f:03:e8:bc:30:dc:f7:d7:a9:32:ad:
e4:5e:26:b9:df:62:2f:d7:43:56:60:34:28:db:86:c7:d9:98:
27:31:e7:87:28:3e:75:5b:75:a3:bd:34:ac:9f:3d:9b:49:79:
f1:18:11:5b:56:a7:ae:44:db:ac:cb:ba:79:75:44:2b:20:c9:
17:d0:72:86:de:6f:33:90:ba:fd:3a:a3:23:f5:eb:1c:28:16:
bd:e6:c3:cf:10:7c:ce:02:87:d1:f0:fc:91:ec:de:b9:99:a9:
cd:8e:6d:46:dd:42:54:15:7a:24:e6:61:43:88:eb:f1:59:4a:
e9:95:7c:cf
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUa6iH6Gf5dHLp7v2auLAI07eyfzcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjQ1NVoX
DTI3MDUwMTIxMjk1NVowMzExMC8GA1UEAxMoODYxRUExN0VGQzgxQzE5MzczMTNC
QThCQURBMTM4NTQzRTQ1NTRFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhpS0bh9FjAWfb9n3POoNDf5E3/p1aaTFF7sMIkMmMivRLLhn9kSqg9RpKp
qHdOGzJFR+TVu+71KNYVkg6Leaa58AfSCH9AH/8EvnI1l4uJn3RdcJ+luShwvEEp
pjxE3xuWYFNENzEf/BUQkv9q0FcxUFCq/9Kg6iAA9AwqtuMk4TR7ELwlzv8B2ZLf
Cjr1ZpXQPo1CM0Rsx33p/HEYsFYFGM/RgO8icNsDx74vER0pRK8KTwCmcRj99mxQ
j5zfDfIjCC0KatZcRJYy6Fq9mD4UMrQCfLxjADrh8s+lDJ1xr6dKNjMgGGICg6E0
ZU9U/XK0JTsy6HQyq0zynpf00kMCAwEAAaOCAtUwggLRMB0GA1UdDgQWBBSGHqF+
/IHBk3MTuoutoThUPkVU6TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2MDUyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBJgYIKwYBBQUHAQcBAf8EggEVMIIB
ETCB/QQCAAEwgfYDBAEbcE4DBABnD+IDBAFnF8YDBAFnHDQDBAFnHyYDBAFnMe4D
BAFnNHIDBABnNqoDBAJnNyQDBAFnO14DBAFnPxgDBAFnQ04DBAFnTHgDBAFnUlwD
BAFndTgDBAFnez4DBAFni8ADBAFnksoDBABnqxIDBAFnq1QDBAFnrMwDBAFnrnID
BABnsEwDBAFnsE4DBAFnszgDBAFns/4DBAFntY4DBAFnt0oDBAFnugADBAFnv1wD
BAJnwbADBAFn1nADBAFn2ZADBAFn2eIDBAFn4ooDBABn7MkDBAFn8goDBAFn+tAD
BAF0wb4DBAHLkSIDBAHST74wDwQCAAIwCQMHACABDfd0ADANBgkqhkiG9w0BAQsF
AAOCAQEAGiP/MhG7CC04+GOtjxOjQhN1KHWkB842t4HlXVjFnuDKsaJB1qRYr1tH
mh45hnHzN7TVDbVUGGe1lAUncoPTmixI4PChIAjf3VROJR91n/TlpuA4YpJeWcD5
Ei2W2Boj6i/SvP8p/halNH9UoJRf+UJbAObTNwEJSN7DtzgKY5uuKpUqIl8D6Lww
3PfXqTKt5F4mud9iL9dDVmA0KNuGx9mYJzHnhyg+dVt1o700rJ89m0l58RgRW1an
rkTbrMu6eXVEKyDJF9Byht5vM5C6/TqjI/XrHCgWvebDzxB8zgKH0fD8kezeuZmp
zY5tRt1CVBV6JOZhQ4jr8VlK6ZV8zw==
-----END CERTIFICATE-----
Generated at Sun May 3 00:41:46 2026 by rpki-client