Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141642.roa
File: AS141642.roa (raw, json)
Hash identifier: vtk+OBhR1dmJikug8QZn9LjQiVLToEdITNQUu7T9EHc=
Subject key identifier: 69:15:EB:5C:D4:D9:D2:93:13:14:F1:DC:CF:02:85:FA:AB:B0:04:6C
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 24E8A2EB983608B5D2BEACEFB58F9D2ECDFB0E74
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141642.roa
Signing time: Sat 02 May 2026 17:04:21 +0000
ROA not before: Sat 02 May 2026 16:59:21 +0000
ROA not after: Sat 01 May 2027 17:04:21 +0000
asID: 141642
IP address blocks: 36.50.92.0/24 maxlen: 24
36.50.109.0/24 maxlen: 24
103.162.62.0/23 maxlen: 24
103.190.170.0/23 maxlen: 24
103.202.226.0/24 maxlen: 24
2001:df3:35c0::/48 maxlen: 48
2401:13e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e8:a2:eb:98:36:08:b5:d2:be:ac:ef:b5:8f:9d:2e:cd:fb:0e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 16:59:21 2026 GMT
Not After : May 1 17:04:21 2027 GMT
Subject: CN=6915EB5CD4D9D2931314F1DCCF0285FAABB0046C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d6:14:1e:06:da:37:b8:4e:56:8a:47:bd:47:
81:69:03:8d:76:a2:c2:33:d3:ca:e5:b5:39:3f:17:
4f:c8:08:a6:71:47:5d:e2:ee:f0:61:03:be:83:7c:
b2:18:cf:d6:d1:1e:94:fd:29:aa:1b:db:ed:99:a7:
fc:33:09:ba:13:06:60:f6:a8:b8:9e:6e:9d:4d:d2:
25:cc:35:cc:ef:94:a4:17:ad:9a:a1:de:92:55:63:
48:b7:8d:b5:9e:6c:09:40:79:d6:24:79:1d:32:d7:
73:e4:4a:af:39:f7:00:9d:05:73:22:63:80:1b:a7:
17:bf:64:40:76:ac:53:fa:2e:da:13:db:7b:11:8d:
55:d2:ed:d9:11:4d:7b:8a:34:a1:68:60:87:85:a6:
26:8f:b6:e8:02:d5:7e:ad:9e:2f:2c:c6:e4:56:7d:
b9:ab:d5:c6:4d:6c:d2:07:d8:8b:5b:cc:4d:7d:1f:
58:d0:72:cd:39:93:b6:19:65:a9:13:cd:5f:c2:3e:
d1:3c:e8:40:8d:2f:6c:8d:d6:27:94:bb:9f:04:cc:
d8:05:4e:2e:cd:c3:1f:23:d3:a2:9f:e5:72:68:ef:
1f:72:a4:96:70:00:88:44:51:87:b1:0d:72:1b:98:
07:2a:83:67:fc:95:ba:a6:1b:43:84:ea:65:37:95:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:EB:5C:D4:D9:D2:93:13:14:F1:DC:CF:02:85:FA:AB:B0:04:6C
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.92.0/24
36.50.109.0/24
103.162.62.0/23
103.190.170.0/23
103.202.226.0/24
IPv6:
2001:df3:35c0::/48
2401:13e0::/32
Signature Algorithm: sha256WithRSAEncryption
43:60:27:5b:02:7e:fc:b1:59:ec:80:77:d6:93:34:ae:95:8d:
fc:cc:09:b3:7a:7c:5c:60:42:78:41:ec:5d:0a:7d:4f:45:ca:
5d:9d:87:97:40:a2:cd:97:9c:0f:d4:99:ba:fa:3c:f7:de:fe:
24:0c:1f:57:7d:78:ef:d4:37:4e:ff:f3:0a:df:99:af:38:92:
f6:a7:2f:bf:84:9a:78:29:2b:d9:6d:81:d6:ee:7b:9f:d1:a8:
43:ca:ab:9a:5d:0a:7b:fe:41:14:c2:24:0f:37:aa:cd:2e:30:
76:b3:7f:e7:82:da:c0:58:ee:4d:a6:77:12:c6:bf:b9:cd:4e:
12:39:86:09:e5:39:57:30:ec:3b:95:a3:8c:ea:09:bf:69:61:
9e:f8:a5:d5:6a:14:b0:c7:c8:1f:46:96:50:e3:42:d0:6b:4c:
c4:87:19:69:b4:dc:10:47:26:bf:07:3e:47:a8:56:f8:63:b1:
a1:b1:98:34:e0:74:ec:86:d7:21:60:b5:d3:cd:17:80:fe:22:
1a:26:ba:92:c6:4a:01:d7:93:fd:5a:eb:c3:51:06:e4:c5:33:
be:f1:ac:2c:ba:84:f7:8b:fc:1f:dc:8b:4a:74:b5:72:7a:a6:
f4:f5:91:9f:c9:b1:2d:b2:67:e2:18:b4:7c:c8:54:58:2c:e8:
ad:c9:c7:18
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUJOii65g2CLXSvqzvtY+dLs37DnQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE2NTkyMVoX
DTI3MDUwMTE3MDQyMVowMzExMC8GA1UEAxMoNjkxNUVCNUNENEQ5RDI5MzEzMTRG
MURDQ0YwMjg1RkFBQkIwMDQ2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPnWFB4G2je4TlaKR71HgWkDjXaiwjPTyuW1OT8XT8gIpnFHXeLu8GEDvoN8
shjP1tEelP0pqhvb7Zmn/DMJuhMGYPaouJ5unU3SJcw1zO+UpBetmqHeklVjSLeN
tZ5sCUB51iR5HTLXc+RKrzn3AJ0FcyJjgBunF79kQHasU/ou2hPbexGNVdLt2RFN
e4o0oWhgh4WmJo+26ALVfq2eLyzG5FZ9uavVxk1s0gfYi1vMTX0fWNByzTmTthll
qRPNX8I+0TzoQI0vbI3WJ5S7nwTM2AVOLs3DHyPTop/lcmjvH3KklnAAiERRh7EN
chuYByqDZ/yVuqYbQ4TqZTeVsRcCAwEAAaOCAfwwggH4MB0GA1UdDgQWBBRpFetc
1NnSkxMU8dzPAoX6q7AEbDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjQyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIA
ATAeAwQAJDJcAwQAJDJtAwQBZ6I+AwQBZ76qAwQAZ8riMBYEAgACMBADBwAgAQ3z
NcADBQAkARPgMA0GCSqGSIb3DQEBCwUAA4IBAQBDYCdbAn78sVnsgHfWkzSulY38
zAmzenxcYEJ4QexdCn1PRcpdnYeXQKLNl5wP1Jm6+jz33v4kDB9XfXjv1DdO//MK
35mvOJL2py+/hJp4KSvZbYHW7nuf0ahDyquaXQp7/kEUwiQPN6rNLjB2s3/ngtrA
WO5NpncSxr+5zU4SOYYJ5TlXMOw7laOM6gm/aWGe+KXVahSwx8gfRpZQ40LQa0zE
hxlptNwQRya/Bz5HqFb4Y7GhsZg04HTshtchYLXTzReA/iIaJrqSxkoB15P9WuvD
UQbkxTO+8awsuoT3i/wf3ItKdLVyeqb09ZGfybEtsmfiGLR8yFRYLOityccY
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:31 2026 by rpki-client