Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140443.roa
File: AS140443.roa (raw, json)
Hash identifier: BsPhmIHjXB1P8nwrWg3L3sWD/vjzqpQy1e8I4EM8j+I=
Subject key identifier: A7:94:E4:17:76:67:D6:3B:7D:93:EC:40:40:E7:1F:25:99:70:13:19
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 108B4D4B937C471485D5223A1D4185A6B99F184A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140443.roa
Signing time: Sat 02 May 2026 21:26:16 +0000
ROA not before: Sat 02 May 2026 21:21:16 +0000
ROA not after: Sat 01 May 2027 21:26:16 +0000
asID: 140443
IP address blocks: 103.160.62.0/23 maxlen: 24
103.168.146.0/24 maxlen: 24
103.168.147.0/24 maxlen: 24
103.173.74.0/23 maxlen: 24
103.178.152.0/24 maxlen: 24
103.178.153.0/24 maxlen: 24
2001:df1:ff40::/48 maxlen: 48
2001:df4:f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8b:4d:4b:93:7c:47:14:85:d5:22:3a:1d:41:85:a6:b9:9f:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:21:16 2026 GMT
Not After : May 1 21:26:16 2027 GMT
Subject: CN=A794E4177667D63B7D93EC4040E71F2599701319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:60:e0:84:42:58:96:83:d4:b1:3b:fc:b5:94:
1f:d9:42:43:08:50:e3:6a:53:b6:20:af:27:51:9b:
ae:f2:fb:ee:37:01:30:3d:5b:e8:5e:d5:17:34:ea:
c6:66:7b:10:d3:99:a3:f0:f7:a8:62:25:ca:61:e1:
57:c9:38:22:c2:87:a3:85:ca:1e:32:da:bc:8a:ec:
5d:3f:a9:3b:8a:e0:5a:d8:dc:2c:02:2c:cb:5c:66:
d9:bf:60:87:e3:46:93:6a:e6:ab:02:6b:7f:c9:f1:
e3:07:3a:5a:74:89:51:99:6d:0c:f6:16:45:76:ba:
ee:11:e6:88:d6:5e:b7:e7:13:d2:05:00:4b:6d:7c:
27:2b:18:c5:55:07:72:ed:6d:68:b3:18:83:fd:ab:
19:b0:52:16:a8:e0:c3:f5:62:98:47:2f:b6:b3:7c:
15:39:10:65:00:c0:d4:35:37:cb:8c:e2:f4:b9:90:
48:34:77:31:10:a6:25:ba:40:ca:a5:ac:cd:e4:a8:
c8:ba:9e:74:d4:c2:ec:f1:cd:51:d2:e4:eb:50:14:
28:ae:2f:b9:e5:ba:be:32:57:af:5e:82:35:5d:34:
cb:54:57:a2:f4:e9:4d:c3:c0:ac:92:e1:e5:f2:e3:
f7:f3:bf:4f:06:ea:b0:cb:9f:43:97:88:57:67:71:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:E4:17:76:67:D6:3B:7D:93:EC:40:40:E7:1F:25:99:70:13:19
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.62.0/23
103.168.146.0/23
103.173.74.0/23
103.178.152.0/23
IPv6:
2001:df1:ff40::/48
2001:df4:f80::/48
Signature Algorithm: sha256WithRSAEncryption
6d:8a:87:e6:4a:c3:44:50:ca:80:4c:ec:69:88:16:d4:81:b9:
9e:8b:f6:d5:c4:38:08:0c:43:8a:25:00:03:63:8e:30:d7:91:
a4:26:58:89:0d:f9:77:4c:2f:04:46:e6:cb:5c:1a:9b:61:db:
c6:ab:13:e4:e5:13:87:02:40:f1:6c:f9:79:1b:c6:72:3e:2a:
64:67:c3:e7:b1:90:c6:2b:2f:d3:33:b6:2d:ce:e2:a8:11:53:
55:58:b1:ba:c3:f8:61:56:78:79:41:98:19:69:b6:a1:65:5c:
e5:41:36:4f:21:be:88:9d:b3:fa:d8:ff:6d:4c:46:67:e4:1e:
5c:30:54:ea:f6:7e:64:13:8f:04:5d:8b:6d:bd:c3:01:63:02:
6d:ac:22:56:86:db:06:7d:b2:dd:cb:10:f4:b3:19:f6:1f:53:
1e:d9:2c:50:1e:c7:07:01:ff:0f:47:3b:c0:e7:7b:0e:cb:0e:
e9:a4:c0:bf:ed:89:b7:eb:44:69:c1:ff:44:ac:ea:02:79:c7:
df:96:63:28:13:9c:23:34:b4:b3:a4:5e:3e:f0:c6:e3:35:4d:
d8:85:1f:67:52:bf:7f:75:39:af:7c:e4:18:cc:67:dc:f3:62:
f7:19:de:fd:1d:37:d1:1d:44:2b:82:b0:f3:9e:e9:fc:c8:6a:
d2:08:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:19 2026 by rpki-client