Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149359.roa
File: AS149359.roa (raw, json)
Hash identifier: 3jC0n/yktoR1httv9eH2AKxo0SRO9u2pJnO6HX3MkhU=
Subject key identifier: EC:C0:99:B6:47:65:0E:45:3B:2F:B3:8B:0B:AB:C6:AE:9F:EE:B7:AB
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 59EC7B48916AEA59CD7CC41E71669707B231BB75
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149359.roa
Signing time: Wed 23 Sep 2026 22:30:29 +0000
ROA not before: Wed 23 Sep 2026 22:25:29 +0000
ROA not after: Wed 22 Sep 2027 22:30:29 +0000
asID: 149359
IP address blocks: 49.0.26.0/23 maxlen: 24
103.19.78.0/23 maxlen: 24
103.176.107.0/24 maxlen: 24
103.180.118.0/23 maxlen: 24
103.215.71.0/24 maxlen: 24
2401:5ee0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ec:7b:48:91:6a:ea:59:cd:7c:c4:1e:71:66:97:07:b2:31:bb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Sep 23 22:25:29 2026 GMT
Not After : Sep 22 22:30:29 2027 GMT
Subject: CN=ECC099B647650E453B2FB38B0BABC6AE9FEEB7AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:3d:b1:11:cb:ac:b0:6b:92:b5:ac:f7:c3:
de:37:ef:2e:5d:47:70:26:dd:2b:1d:02:a8:56:4f:
2a:dd:33:97:26:bc:c5:0c:18:64:dd:bc:ff:d4:b8:
5c:b4:c6:0e:1e:ff:d8:0b:db:8c:d2:df:44:d3:03:
80:1e:6e:bc:94:e1:aa:d1:e5:41:65:c1:9b:39:27:
68:89:f1:8b:88:f9:bc:ed:d4:e5:07:73:80:b2:7b:
1f:d9:65:dc:22:25:5c:8e:b6:da:d1:79:18:c2:54:
5e:6a:3f:e0:56:23:ec:15:47:77:91:88:48:e2:17:
2b:2b:25:f9:c4:ae:c7:81:78:b6:f1:be:1c:72:54:
0b:1d:57:aa:17:74:18:4f:56:fb:0f:5f:e4:c4:c5:
18:de:9c:31:81:cc:10:30:d2:34:9b:c5:e3:cc:99:
e4:bd:1e:dd:fc:1b:d6:8a:62:66:b1:05:fd:db:87:
2a:78:68:66:d5:65:40:ce:e5:48:83:03:cb:c6:d6:
82:06:f3:fb:9e:99:1d:a5:9b:d1:d2:77:f2:0e:49:
ee:c5:97:56:f6:d5:48:51:44:db:4a:44:89:dd:2c:
61:30:c8:d9:1b:70:15:0f:f4:06:50:0a:c7:94:4d:
35:db:2b:ec:29:8e:32:36:85:98:af:3b:a8:15:3f:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:99:B6:47:65:0E:45:3B:2F:B3:8B:0B:AB:C6:AE:9F:EE:B7:AB
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.0.26.0/23
103.19.78.0/23
103.176.107.0/24
103.180.118.0/23
103.215.71.0/24
IPv6:
2401:5ee0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:60:51:04:03:40:ac:5b:ed:60:ce:f7:4c:12:3b:3d:02:2d:
e4:b1:d9:4f:cc:bb:6c:89:ca:0a:ee:09:0b:de:ec:10:c9:e3:
ea:b4:8b:fc:06:c6:d1:dc:d4:31:57:78:cc:65:d5:04:6d:ff:
ef:b1:65:48:c9:de:8c:7e:ee:ef:f4:9b:b1:10:e7:b9:48:a4:
25:01:6b:1e:a8:62:7d:42:fd:9d:dd:86:6b:69:10:2a:55:a1:
ae:24:51:68:69:31:f0:1a:59:e1:4f:3c:3b:93:61:f7:20:7e:
89:08:3c:83:95:c2:64:aa:5a:9a:fd:88:7f:0a:7c:4c:45:30:
62:5e:1a:71:de:5d:2c:ba:83:64:c8:00:99:60:26:4d:71:0e:
0c:51:19:25:5c:62:ec:7f:d6:66:55:e0:fc:d1:85:12:88:60:
f9:f9:9c:df:df:94:d1:34:d8:a2:54:2d:69:77:ff:90:01:96:
99:4d:cd:d5:4b:5d:99:2f:0c:65:b8:d7:3e:63:95:90:5e:27:
f1:2f:e4:bb:3b:ac:be:a6:10:5b:a6:77:f8:f4:71:c5:87:6a:
d8:09:20:30:84:79:22:62:63:b3:f6:be:e5:46:47:6a:fe:68:
62:20:9c:5c:bc:6b:b7:d4:02:e9:ea:cf:75:c9:e0:e7:fd:a4:
fa:96:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:50:17 2026 by rpki-client