Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141126.roa
File: AS141126.roa (raw, json)
Hash identifier: UK4BA+ZzGsqpOOPq6H8DxbvlzSHHJI7G2L5z14+4uIA=
Subject key identifier: F0:5D:1A:E2:97:DC:2E:30:4D:9F:45:2D:63:D8:D3:94:F7:A3:66:5F
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 55E6F6F054394471AD55CB24C3DA05EDB28C2C2B
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141126.roa
Signing time: Sat 02 May 2026 21:30:47 +0000
ROA not before: Sat 02 May 2026 21:25:47 +0000
ROA not after: Sat 01 May 2027 21:30:47 +0000
asID: 141126
IP address blocks: 103.158.154.0/23 maxlen: 24
203.81.248.0/22 maxlen: 24
203.175.126.0/23 maxlen: 24
2001:df1:d040::/48 maxlen: 48
2001:df5:5980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 03:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e6:f6:f0:54:39:44:71:ad:55:cb:24:c3:da:05:ed:b2:8c:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:25:47 2026 GMT
Not After : May 1 21:30:47 2027 GMT
Subject: CN=F05D1AE297DC2E304D9F452D63D8D394F7A3665F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:f1:d7:96:cf:f0:26:22:85:8c:7d:a0:60:
13:e7:78:0e:98:a5:a5:a3:3d:e1:1f:ff:ca:18:2b:
1c:a2:ea:fe:1c:18:8a:61:39:f7:0d:33:d1:db:4d:
50:eb:75:f5:e9:19:a0:36:42:9d:2d:19:89:62:ee:
f5:cd:37:30:29:e2:ed:6d:d5:66:7a:58:90:5b:1c:
02:86:0f:71:ae:09:95:b6:97:08:ef:5e:34:8f:b6:
be:b8:5c:89:68:67:ca:91:74:7b:3f:60:f5:fd:af:
10:09:3c:0e:75:d4:b5:c5:01:15:45:a5:84:3a:20:
bc:27:e2:07:9c:fe:b4:9f:e8:25:d2:2a:f2:ff:3e:
e3:06:fc:56:63:4c:c3:92:58:63:9b:16:74:71:eb:
71:8c:77:1b:4e:38:74:e0:93:c9:14:62:84:6a:1a:
a8:b2:d7:ac:26:e3:48:c9:d3:5e:cc:70:ae:74:d1:
78:52:36:fb:c2:bb:3f:0e:a0:ce:c5:eb:38:80:3a:
cd:51:24:76:74:1a:85:22:c4:c6:95:0c:c4:b9:3a:
35:1c:2e:87:bf:69:31:ff:f2:3e:27:ae:c9:9c:f4:
c2:01:53:39:e3:05:36:c1:7e:a5:2d:6e:52:45:38:
99:ed:aa:32:4b:a3:7f:8d:76:21:45:45:d8:d0:0a:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:1A:E2:97:DC:2E:30:4D:9F:45:2D:63:D8:D3:94:F7:A3:66:5F
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141126.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.154.0/23
203.81.248.0/22
203.175.126.0/23
IPv6:
2001:df1:d040::/48
2001:df5:5980::/48
Signature Algorithm: sha256WithRSAEncryption
1f:28:f5:f9:30:03:9c:e6:16:03:db:75:17:34:5b:33:c1:c2:
b9:44:c5:60:ac:7c:a2:b6:11:37:f1:ef:aa:7b:67:80:4a:69:
ce:81:39:b5:cc:6d:61:70:2b:32:bd:16:1d:d0:b2:2e:f1:8a:
3e:8c:c5:60:65:33:f4:d7:ca:a4:c1:95:df:ff:1a:c6:51:38:
e9:c1:b9:47:63:cc:7b:65:85:d4:3b:7f:8d:db:6f:5f:6d:61:
34:eb:3f:06:7d:13:89:e9:a8:03:e4:75:ff:72:3a:2c:a5:18:
07:01:87:55:ae:ad:dd:10:ca:45:81:ee:58:e6:c5:3a:38:29:
88:37:e2:2b:23:3e:51:ad:95:73:70:63:b4:e5:03:7b:0c:12:
a6:43:84:60:f7:84:23:fe:fb:46:c5:c9:b3:af:80:63:01:84:
c8:d8:97:de:76:03:57:3e:4a:b5:38:da:34:88:fa:ae:14:bc:
00:89:09:b5:0f:0d:a6:c0:96:03:ba:3b:cc:5d:b8:32:e7:6b:
87:e5:ad:56:92:df:29:66:bd:22:12:58:af:da:bf:6e:1d:3a:
01:a7:ca:e9:7b:00:82:be:37:c0:bd:5c:0d:de:9f:10:7c:34:
8a:80:57:f0:b6:67:46:3b:33:f7:26:80:54:1c:6c:b4:28:ba:
4a:59:fa:63
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUVeb28FQ5RHGtVcskw9oF7bKMLCswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjU0N1oX
DTI3MDUwMTIxMzA0N1owMzExMC8GA1UEAxMoRjA1RDFBRTI5N0RDMkUzMDREOUY0
NTJENjNEOEQzOTRGN0EzNjY1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOwb8deWz/AmIoWMfaBgE+d4DpilpaM94R//yhgrHKLq/hwYimE59w0z0dtN
UOt19ekZoDZCnS0ZiWLu9c03MCni7W3VZnpYkFscAoYPca4JlbaXCO9eNI+2vrhc
iWhnypF0ez9g9f2vEAk8DnXUtcUBFUWlhDogvCfiB5z+tJ/oJdIq8v8+4wb8VmNM
w5JYY5sWdHHrcYx3G044dOCTyRRihGoaqLLXrCbjSMnTXsxwrnTReFI2+8K7Pw6g
zsXrOIA6zVEkdnQahSLExpUMxLk6NRwuh79pMf/yPieuyZz0wgFTOeMFNsF+pS1u
UkU4me2qMkujf412IUVF2NAKAEMCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBTwXRri
l9wuME2fRS1j2NOU96NmXzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMTI2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIA
ATASAwQBZ56aAwQCy1H4AwQBy69+MBgEAgACMBIDBwAgAQ3x0EADBwAgAQ31WYAw
DQYJKoZIhvcNAQELBQADggEBAB8o9fkwA5zmFgPbdRc0WzPBwrlExWCsfKK2ETfx
76p7Z4BKac6BObXMbWFwKzK9Fh3Qsi7xij6MxWBlM/TXyqTBld//GsZROOnBuUdj
zHtlhdQ7f43bb19tYTTrPwZ9E4npqAPkdf9yOiylGAcBh1Wurd0QykWB7ljmxTo4
KYg34isjPlGtlXNwY7TlA3sMEqZDhGD3hCP++0bFybOvgGMBhMjYl952A1c+SrU4
2jSI+q4UvACJCbUPDabAlgO6O8xduDLna4flrVaS3ylmvSISWK/av24dOgGnyul7
AIK+N8C9XA3enxB8NIqAV/C2Z0Y7M/cmgFQcbLQoukpZ+mM=
-----END CERTIFICATE-----
Generated at Sun May 3 01:44:15 2026 by rpki-client