Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23679.roa
File: AS23679.roa (raw, json)
Hash identifier: Pw9gUc753gpjIcp7zOZVVX01mV5HktkVq+D8/2ACgZs=
Subject key identifier: 9D:83:77:72:70:52:93:C9:D7:FE:11:DF:94:F4:A9:46:B2:7C:6B:1F
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 25E986C247D54FAF57711E7AF1867CA217820377
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23679.roa
Signing time: Sat 02 May 2026 21:36:49 +0000
ROA not before: Sat 02 May 2026 21:31:49 +0000
ROA not after: Sat 01 May 2027 21:36:49 +0000
asID: 23679
IP address blocks: 27.121.112.0/23 maxlen: 24
43.230.128.0/22 maxlen: 24
103.31.46.0/24 maxlen: 24
103.114.76.0/24 maxlen: 24
103.114.77.0/24 maxlen: 24
103.114.78.0/24 maxlen: 24
103.157.136.0/23 maxlen: 24
103.196.116.0/24 maxlen: 24
110.232.65.0/24 maxlen: 24
110.232.68.0/23 maxlen: 24
110.232.70.0/24 maxlen: 24
110.232.91.0/24 maxlen: 24
124.158.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e9:86:c2:47:d5:4f:af:57:71:1e:7a:f1:86:7c:a2:17:82:03:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:31:49 2026 GMT
Not After : May 1 21:36:49 2027 GMT
Subject: CN=9D837772705293C9D7FE11DF94F4A946B27C6B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:5b:f0:17:56:c0:ff:3e:fc:29:9e:e9:fb:
d6:fc:e4:2b:7d:9f:c9:31:95:a9:68:dc:8a:6a:e4:
05:50:29:96:5b:1a:7c:60:e3:d5:19:d5:26:2a:7e:
8a:69:9f:77:f1:22:83:6e:47:c8:33:33:b9:8d:b0:
45:5b:10:aa:33:79:6b:4e:7d:b3:7b:0f:9d:c1:c4:
4a:be:cb:aa:26:c0:a8:31:1a:32:27:c5:51:3c:bd:
c9:a1:d7:d3:26:e8:38:38:0c:27:54:69:0d:6e:25:
8a:f2:c9:d5:18:75:92:92:0c:f3:24:e5:4a:6e:1e:
40:f6:f7:63:15:63:5c:af:41:6c:ce:32:89:45:0e:
ba:40:14:69:e2:5b:43:e1:20:ff:68:3f:28:c6:1c:
92:1f:63:57:d5:c6:4d:53:3a:8b:79:22:a8:cb:7d:
85:bd:52:99:66:42:ed:3d:c1:a6:e8:70:91:e4:03:
f9:e8:d0:75:e7:a0:44:d7:7c:ff:8f:29:3c:5a:d9:
e0:81:a1:97:04:83:3b:a9:90:97:b4:ad:6a:e7:c5:
bf:2d:52:30:92:f9:77:f5:90:cf:25:e3:c7:65:51:
20:2d:86:57:12:9e:77:e9:5d:47:94:e2:ae:96:b8:
1e:7b:24:c4:98:0f:35:3e:fe:09:70:51:cb:73:ff:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:77:72:70:52:93:C9:D7:FE:11:DF:94:F4:A9:46:B2:7C:6B:1F
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.121.112.0/23
43.230.128.0/22
103.31.46.0/24
103.114.76.0-103.114.78.255
103.157.136.0/23
103.196.116.0/24
110.232.65.0/24
110.232.68.0-110.232.70.255
110.232.91.0/24
124.158.116.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ef:0b:30:ed:94:8f:a2:91:69:94:f2:1b:f1:1c:5d:43:96:
97:21:82:15:06:bf:ee:73:ad:33:c4:67:7f:e0:35:36:07:77:
f9:fd:e4:67:c4:ff:1e:79:0a:f2:80:2d:78:93:10:bf:2d:03:
aa:85:76:4e:91:22:6e:a6:d9:47:35:a3:df:cd:8e:ca:4c:60:
0e:5d:fb:cd:fb:12:17:c6:5f:fd:39:0a:d1:35:56:e1:c0:9f:
98:eb:7e:8b:50:ca:fb:22:1f:8a:73:46:fd:29:03:cb:16:f4:
9c:97:4d:11:28:bd:cc:a3:60:dc:a1:40:d2:57:e9:b1:cd:9c:
9c:39:52:1b:31:1c:11:3a:06:25:c6:fd:14:c4:79:19:40:15:
86:fd:45:94:28:72:a8:8b:b1:25:8c:14:f3:a2:63:b3:83:6c:
15:5b:d8:bb:ff:02:46:1b:b0:72:f3:b3:dd:34:69:2c:2d:15:
88:3e:23:f4:ef:f2:a6:09:8b:d9:4b:86:11:a8:fc:d3:b9:d1:
a0:58:ae:c2:6e:ff:ac:e4:7c:a6:e4:3e:71:f3:ca:d3:67:8b:
8e:d2:e4:33:9d:80:5a:bf:22:72:af:61:bd:31:9d:58:65:56:
0d:7b:97:0c:42:1d:fd:1d:fc:3e:44:c9:00:17:f6:7e:91:3e:
a5:57:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:25 2026 by rpki-client