Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23693.roa
File: AS23693.roa (raw, json)
Hash identifier: awZMRG6/zV044kuWhxgJ2LC6guN3BE67169ppalmNYU=
Subject key identifier: 9E:61:11:8A:F3:BB:AB:97:E5:45:37:0A:2D:B6:83:77:6B:B9:0D:39
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6559BD6B6517FFC3E48AD8646DB22B8EEF1C9F7E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23693.roa
Signing time: Tue 07 Jul 2026 02:36:29 +0000
ROA not before: Tue 07 Jul 2026 02:31:29 +0000
ROA not after: Tue 06 Jul 2027 02:36:29 +0000
asID: 23693
IP address blocks: 202.158.128.0/24 maxlen: 24
202.158.129.0/24 maxlen: 24
202.158.130.0/24 maxlen: 24
202.158.131.0/24 maxlen: 24
202.158.134.0/24 maxlen: 24
202.158.135.0/24 maxlen: 24
202.158.140.0/24 maxlen: 24
202.158.141.0/24 maxlen: 24
2404:c0:c000::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 20:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:59:bd:6b:65:17:ff:c3:e4:8a:d8:64:6d:b2:2b:8e:ef:1c:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 7 02:31:29 2026 GMT
Not After : Jul 6 02:36:29 2027 GMT
Subject: CN=9E61118AF3BBAB97E545370A2DB683776BB90D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:e4:3c:ae:cd:21:28:5c:7b:31:2a:1a:cc:
88:06:5c:3e:b4:40:10:48:84:1d:20:5e:7e:02:2e:
5a:20:2a:71:4c:8e:ab:d8:4f:f7:26:be:3d:58:f3:
5c:4e:19:21:1c:ab:d0:bd:d0:cb:a1:5b:d2:ea:93:
3b:46:28:58:13:94:af:04:de:de:b0:db:76:83:1d:
82:eb:4b:cd:84:e0:6a:a6:d4:5f:ee:de:e1:32:14:
99:11:ec:e9:3b:07:17:9e:69:e9:ef:da:8a:38:00:
5b:2c:69:91:48:e0:c8:29:bc:45:3f:1a:ba:80:3b:
c2:71:a2:7f:50:22:d3:20:7e:1e:5b:13:a5:78:40:
4a:1c:9b:55:8c:ab:ef:c0:b8:ea:9f:85:c2:1d:07:
9f:22:fb:95:9b:c6:36:60:34:e1:57:8e:41:d4:b0:
3d:c5:7e:af:0b:6b:84:c2:8b:bc:b6:e5:08:70:5e:
f9:34:c9:34:07:83:76:ae:51:ab:85:36:f8:9f:86:
4f:a6:c5:7a:20:d3:92:1d:c5:e9:b0:00:3e:d8:50:
93:a2:ac:48:0b:cd:47:49:6d:fc:e6:bd:11:17:02:
71:0b:c8:88:9e:6c:4e:76:b1:99:4c:7c:4d:ca:71:
60:84:92:19:34:3a:79:0e:b4:e5:ac:27:16:4b:0b:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:11:8A:F3:BB:AB:97:E5:45:37:0A:2D:B6:83:77:6B:B9:0D:39
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.158.128.0/22
202.158.134.0/23
202.158.140.0/23
IPv6:
2404:c0:c000::/39
Signature Algorithm: sha256WithRSAEncryption
8d:2c:df:35:e8:56:49:7f:bd:82:72:ed:1c:49:4f:a4:71:1d:
e8:b2:79:2b:27:ac:a2:56:7f:14:88:8d:e2:55:91:9d:d7:82:
a6:ae:b9:07:6a:03:9a:5f:a6:60:37:f8:e7:ca:6a:8b:12:ca:
9f:d0:0a:a3:e2:ec:b6:4f:85:bf:e5:27:c2:7c:aa:49:d8:fa:
d5:48:92:b7:54:a6:6d:33:74:09:ff:06:dc:eb:63:75:33:b5:
b1:d9:fd:13:24:b8:e9:0a:77:04:9b:10:31:bb:b6:99:20:7c:
78:32:82:1f:14:b9:d2:1a:48:1a:c6:2e:1d:3c:24:ce:dd:de:
07:eb:de:17:a0:fa:e0:19:03:32:b0:49:9c:66:ec:18:f5:f9:
d9:f2:c2:86:db:8b:3a:1e:ab:ce:d3:5f:f5:92:6d:11:5c:03:
a2:29:1a:72:78:dc:86:00:ac:38:8b:4d:2a:42:6e:b9:49:b6:
23:56:33:45:30:d4:bb:c9:fb:a7:21:71:bb:dc:43:c5:55:b8:
02:f7:6d:36:9b:13:58:bb:92:9a:09:73:4c:d5:8b:1f:56:44:
2e:d3:c5:80:38:40:fc:ac:50:c4:ef:18:fa:28:d6:84:2b:0e:
0c:fa:09:c6:f5:cb:e2:83:8e:02:e1:45:ee:4a:bb:83:7d:f6:
a4:96:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:37 2026 by rpki-client