Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141898.roa
File: AS141898.roa (raw, json)
Hash identifier: l/23In67epzl45meHnuuDz4eN32qc7eakFXLbXzcQqY=
Subject key identifier: 71:32:BF:F8:60:C9:D4:BA:47:0C:78:05:1D:65:42:00:9D:73:53:88
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 32FFC9A64C2A4FE8B449D4EE9E4A3CCFDA59ED2E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141898.roa
Signing time: Sat 02 May 2026 21:27:22 +0000
ROA not before: Sat 02 May 2026 21:22:22 +0000
ROA not after: Sat 01 May 2027 21:27:22 +0000
asID: 141898
IP address blocks: 103.51.206.0/23 maxlen: 24
103.52.110.0/23 maxlen: 24
103.164.12.0/23 maxlen: 24
103.177.176.0/23 maxlen: 24
103.184.52.0/23 maxlen: 24
103.206.72.0/23 maxlen: 24
202.180.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ff:c9:a6:4c:2a:4f:e8:b4:49:d4:ee:9e:4a:3c:cf:da:59:ed:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:22:22 2026 GMT
Not After : May 1 21:27:22 2027 GMT
Subject: CN=7132BFF860C9D4BA470C78051D6542009D735388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:43:da:cf:3c:fe:12:42:fb:b5:cb:6c:77:
4c:78:29:ca:0b:56:59:20:6c:f6:f2:c4:04:f8:be:
0d:7a:96:6d:dd:60:35:63:d1:22:f1:10:92:09:41:
a2:e8:15:06:80:ee:f6:d9:94:5e:e0:bb:0d:a4:c8:
2c:16:d8:26:30:81:97:70:93:97:5e:54:b6:e6:de:
43:61:f8:9f:a0:0c:e4:22:7e:a8:b4:53:b5:16:74:
5c:e9:81:e0:48:f2:5e:77:77:8f:25:73:2d:ac:74:
d0:c5:70:65:58:43:75:d4:32:20:17:f9:91:68:21:
7b:9f:2a:04:a3:56:55:f6:8a:26:c9:40:60:cf:d6:
d4:56:e5:90:53:7d:c1:bf:03:4a:b9:fb:0d:a9:b3:
bd:24:d6:0e:cf:42:ab:4a:cb:c7:7c:8b:fb:f4:ed:
44:81:ee:16:d9:b0:08:b7:49:32:7b:23:a1:ef:0f:
2d:da:cd:07:cc:7a:ea:19:e8:19:0e:27:f3:9e:97:
4b:06:3f:ca:46:75:8f:97:ee:78:7d:6f:d6:31:d4:
42:9f:aa:34:99:eb:6e:88:b2:df:01:06:2f:f0:d9:
83:dc:ea:72:81:7f:6a:cf:8c:b0:6b:75:7c:6f:7e:
db:da:f2:18:1d:14:29:c1:8e:08:4c:3d:a1:ca:cf:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:32:BF:F8:60:C9:D4:BA:47:0C:78:05:1D:65:42:00:9D:73:53:88
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.206.0/23
103.52.110.0/23
103.164.12.0/23
103.177.176.0/23
103.184.52.0/23
103.206.72.0/23
202.180.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:8a:23:7d:82:c9:93:21:0b:ae:e2:0d:5a:c0:57:3c:61:d0:
1e:04:d7:c0:50:da:4a:1d:21:e5:02:ef:d7:f4:62:f2:5e:8e:
48:c4:bf:62:c4:1b:05:df:5f:57:d0:fe:b8:ad:ab:5e:c6:19:
de:2d:72:81:d1:cd:d3:b5:f8:a3:1c:35:d1:78:8a:40:00:92:
85:b1:6b:06:f9:2c:2f:d5:04:0a:92:24:85:af:35:aa:66:9a:
61:35:fd:13:3f:09:3b:ef:03:c6:27:78:4a:93:0e:2a:79:58:
83:7b:66:20:44:f2:cb:21:78:75:3a:ae:61:e5:70:bd:6d:f3:
1b:b1:92:44:e5:a9:aa:69:74:4a:ed:91:78:cc:eb:7b:30:97:
ef:f5:b9:6b:ba:f9:22:6f:9f:e7:39:fb:52:0c:b0:70:3a:51:
1f:7f:d0:f9:0e:c8:3a:ee:34:77:64:1b:ca:2d:17:26:35:84:
3f:57:bf:7f:eb:c9:94:98:46:f1:5a:d6:00:d6:c8:7c:09:50:
2d:22:e5:d8:7c:a6:01:63:ba:c1:50:d4:36:e3:9a:9c:3f:6d:
1e:37:e7:e0:f8:01:2c:fe:30:7a:0a:67:da:7d:29:b6:58:3d:
fa:57:b6:a0:52:b5:88:14:ce:bd:9c:e0:ff:5a:e1:c4:d7:a1:
77:92:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:17 2026 by rpki-client