Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS138077.roa
File: AS138077.roa (raw, json)
Hash identifier: Ns/xjpccvmJ2nGY4T2Va13lfMEirmdtkAiKMrSGROCc=
Subject key identifier: 0F:BA:44:2C:F0:2C:4F:53:BA:85:13:47:9D:34:B2:B8:DD:50:F6:57
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 2D0E52791534603B9BD3DB97D46E2381F598543A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138077.roa
Signing time: Sat 02 May 2026 21:28:41 +0000
ROA not before: Sat 02 May 2026 21:23:41 +0000
ROA not after: Sat 01 May 2027 21:28:41 +0000
asID: 138077
IP address blocks: 103.7.187.0/24 maxlen: 24
103.16.137.0/24 maxlen: 24
103.16.138.0/24 maxlen: 24
103.16.139.0/24 maxlen: 24
103.52.2.0/23 maxlen: 24
103.87.70.0/23 maxlen: 24
103.87.70.0/24 maxlen: 24
103.87.71.0/24 maxlen: 24
103.130.198.0/23 maxlen: 24
103.137.38.0/23 maxlen: 24
103.150.178.0/24 maxlen: 24
103.150.179.0/24 maxlen: 24
103.160.54.0/23 maxlen: 24
103.160.154.0/23 maxlen: 24
103.169.204.0/23 maxlen: 24
103.242.76.0/24 maxlen: 24
110.44.170.0/24 maxlen: 24
110.44.172.0/22 maxlen: 22
117.103.116.0/23 maxlen: 24
160.20.222.0/24 maxlen: 24
202.56.172.0/22 maxlen: 24
202.56.172.0/24 maxlen: 24
202.56.173.0/24 maxlen: 24
202.56.174.0/24 maxlen: 24
202.56.175.0/24 maxlen: 24
203.84.138.0/24 maxlen: 24
203.84.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0e:52:79:15:34:60:3b:9b:d3:db:97:d4:6e:23:81:f5:98:54:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:23:41 2026 GMT
Not After : May 1 21:28:41 2027 GMT
Subject: CN=0FBA442CF02C4F53BA8513479D34B2B8DD50F657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:b3:5d:eb:c2:c3:25:e9:ec:0c:47:cc:de:
39:e3:8e:a8:db:4b:9b:56:1a:7e:8d:54:40:f3:5f:
dc:de:ae:e8:5d:cd:37:d7:63:29:2c:19:35:21:53:
6a:f9:ab:73:68:ed:48:c4:dd:5d:4c:01:54:7a:df:
b7:a0:c1:ad:1b:5c:b8:0c:b5:aa:8e:0d:27:2b:a9:
35:c4:d5:58:c4:f3:55:5d:da:28:d6:31:05:1f:d2:
38:d4:ca:8a:97:48:a6:1c:23:c9:ad:10:17:79:70:
0a:5d:68:ad:f2:fb:6c:06:80:6a:5e:b4:c6:12:85:
c3:6f:95:36:0f:10:30:be:26:64:95:53:ad:6a:f0:
7b:9c:a5:5b:e5:19:a1:6e:98:13:f6:da:1d:f9:5d:
8e:a6:db:96:b6:69:84:0c:d5:63:60:58:a4:45:37:
86:86:12:55:0e:ef:7a:0d:f9:18:05:58:65:bd:75:
28:87:36:09:e4:ce:08:32:98:85:f7:73:e1:b3:66:
e7:cb:2c:f8:c3:c8:3c:54:08:6b:71:4f:82:e6:1b:
63:9b:1e:e0:c6:18:36:0a:b0:03:22:08:6d:ad:c8:
92:3e:e4:74:eb:93:36:ac:98:76:d0:20:8a:06:d6:
b0:df:cc:a9:dc:94:27:19:d4:c0:0d:4d:92:75:12:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:44:2C:F0:2C:4F:53:BA:85:13:47:9D:34:B2:B8:DD:50:F6:57
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS138077.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.187.0/24
103.16.137.0-103.16.139.255
103.52.2.0/23
103.87.70.0/23
103.130.198.0/23
103.137.38.0/23
103.150.178.0/23
103.160.54.0/23
103.160.154.0/23
103.169.204.0/23
103.242.76.0/24
110.44.170.0/24
110.44.172.0/22
117.103.116.0/23
160.20.222.0/24
202.56.172.0/22
203.84.138.0/24
203.84.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:34:39:fe:2f:a0:22:ba:0c:0e:30:04:f4:6b:90:30:18:1f:
11:9e:e1:70:0c:7c:9d:d4:e8:fd:12:1b:df:b4:0e:3b:e5:d1:
8f:c4:c1:5d:17:03:2c:63:e3:59:a4:76:91:ac:1f:0e:15:ea:
b3:b3:b9:d7:2c:b1:a7:7f:26:35:e7:64:24:2e:6d:03:59:43:
5a:93:ec:95:95:9f:79:44:9e:ae:ca:91:ec:45:f8:88:6b:fc:
76:c2:96:a0:b4:5e:f3:ae:a9:0b:d8:48:92:44:8a:db:a4:2d:
8e:71:5b:d4:cb:9a:dd:e6:eb:a8:79:af:b2:dd:7c:bc:5e:ad:
df:19:4e:49:4e:32:73:53:a5:58:c5:76:91:fa:9a:c3:79:95:
4d:21:01:01:05:d7:0a:6e:92:06:41:94:51:d1:ae:05:96:1b:
11:f8:64:4d:c3:09:e5:a2:d2:f8:a4:ef:88:08:a5:90:ea:dd:
3e:53:94:c8:69:b8:1b:09:31:ee:a6:71:e3:b4:48:bd:41:41:
0f:23:60:18:bd:c3:e9:ec:3b:b7:77:eb:06:98:16:45:d4:83:
b0:63:f0:97:3a:75:dc:9f:5d:63:1b:72:8a:02:ab:1a:48:6b:
3f:a9:c3:40:12:69:39:46:92:07:e4:9c:68:65:a8:40:5c:96:
a9:c8:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:29 2026 by rpki-client