Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS149746.roa
File: AS149746.roa (raw, json)
Hash identifier: ktyvo0AQEKxHW1dCmqsGjRYh4BenhPlcOQENk6Yi0OA=
Subject key identifier: 8E:48:51:80:E7:34:44:DC:2B:BD:DF:CB:AB:35:BE:FB:A2:D7:D6:E8
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 1C5A51E17A5BB53230A40D4395784CB7686D1DAC
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149746.roa
Signing time: Sat 02 May 2026 21:31:50 +0000
ROA not before: Sat 02 May 2026 21:26:50 +0000
ROA not after: Sat 01 May 2027 21:31:50 +0000
asID: 149746
IP address blocks: 103.189.62.0/24 maxlen: 24
103.189.63.0/24 maxlen: 24
202.46.152.0/22 maxlen: 24
202.46.152.0/24 maxlen: 24
202.46.153.0/24 maxlen: 24
202.46.154.0/24 maxlen: 24
202.46.155.0/24 maxlen: 24
2400:e660::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5a:51:e1:7a:5b:b5:32:30:a4:0d:43:95:78:4c:b7:68:6d:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:26:50 2026 GMT
Not After : May 1 21:31:50 2027 GMT
Subject: CN=8E485180E73444DC2BBDDFCBAB35BEFBA2D7D6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:b1:3f:cb:96:28:55:57:77:c3:e9:34:e7:
0b:f4:79:7b:a7:71:40:93:7a:8d:58:b1:09:96:63:
71:3e:e3:14:b7:46:08:4a:74:dc:c9:c8:03:4f:6f:
5c:8b:28:4b:d5:79:85:41:56:b6:0f:8b:72:5c:58:
17:80:62:2e:f1:6a:a2:0c:a8:89:e2:85:db:59:75:
e2:2e:a7:e0:67:07:05:0f:a0:76:3b:87:52:65:7f:
a4:ca:f6:bf:1a:8f:4c:d4:c0:01:99:aa:16:7a:ac:
bb:db:e8:04:33:66:90:97:96:62:60:4a:eb:cf:59:
ee:e4:c6:43:c7:ef:44:73:f1:a4:62:78:59:f8:d6:
c1:d7:c6:34:d6:38:30:d6:cc:33:97:cb:3e:c7:25:
bd:44:dd:cc:63:02:f7:81:9d:6d:85:8f:52:b2:69:
06:01:11:27:f6:85:45:b9:76:06:65:fd:7f:96:b8:
ce:6f:cc:bc:e3:e5:3e:6a:f9:31:26:ee:7c:c3:6c:
67:4d:01:04:1e:d4:47:93:c7:7a:15:08:2f:69:00:
3d:a6:cc:68:58:a2:c4:1a:81:50:30:e6:c4:27:cb:
0b:6e:20:c1:73:f6:54:81:43:4a:19:38:e8:d2:cd:
92:fa:d1:47:e0:3e:a2:24:26:5b:7c:36:02:8b:26:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:48:51:80:E7:34:44:DC:2B:BD:DF:CB:AB:35:BE:FB:A2:D7:D6:E8
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS149746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.62.0/23
202.46.152.0/22
IPv6:
2400:e660::/32
Signature Algorithm: sha256WithRSAEncryption
8f:ba:ed:58:92:44:77:78:c5:a0:a8:ff:fc:5e:76:6c:16:ec:
1f:7a:10:bd:f8:11:fb:1d:83:32:1c:d1:d4:b2:28:e1:97:59:
94:c8:44:73:60:66:d7:b2:86:d4:ea:12:3c:8a:e0:d2:35:27:
3d:3e:29:1c:21:a9:2b:46:62:6d:97:64:8e:72:8b:b5:64:87:
0d:8e:b4:23:a6:94:bf:04:06:0d:fa:84:81:ea:a5:65:75:26:
6d:c5:f3:3f:54:57:aa:a9:e4:68:5c:3f:01:f8:2d:71:9e:87:
31:b0:86:4d:5f:2b:0a:7e:f1:4d:06:d5:2a:e8:ed:9e:39:65:
f2:0a:d6:73:04:cb:4d:40:c4:61:b2:0b:be:4c:f2:e6:70:9d:
bd:98:6d:bb:11:3c:00:df:ce:f1:5f:29:d5:80:8a:5c:59:39:
e6:02:66:d1:1f:29:ca:1a:12:58:94:8c:a9:e1:3a:ba:06:12:
ba:fe:78:72:e2:05:81:c5:db:ee:06:d5:34:72:f2:f0:17:66:
65:b1:1a:f5:9b:ac:66:d7:ce:21:26:a8:45:61:15:2a:d8:05:
45:ca:6f:33:ff:3a:f0:99:c1:d9:16:32:4f:4d:ac:55:ee:1c:
7e:e9:39:93:f7:02:89:07:71:bc:0d:d3:8c:04:30:64:f8:b8:
43:b2:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:28 2026 by rpki-client