Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS24212.roa
File: AS24212.roa (raw, json)
Hash identifier: 4UhDtgEPMfsq3xgUq8iB62Qt+7iyHj8ZfOdMXtoqNX8=
Subject key identifier: D5:B2:15:74:A4:ED:F2:86:C2:9A:72:D7:C2:99:74:D8:68:8C:B5:51
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 53971D8C0A7912B2790EE8991404EB93F9920F05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24212.roa
Signing time: Sat 02 May 2026 21:27:00 +0000
ROA not before: Sat 02 May 2026 21:22:00 +0000
ROA not after: Sat 01 May 2027 21:27:00 +0000
asID: 24212
IP address blocks: 202.146.128.0/24 maxlen: 24
202.146.129.0/24 maxlen: 24
202.146.130.0/24 maxlen: 24
202.146.131.0/24 maxlen: 24
202.146.132.0/24 maxlen: 24
202.146.133.0/24 maxlen: 24
202.146.134.0/24 maxlen: 24
202.146.135.0/24 maxlen: 24
202.146.136.0/24 maxlen: 24
202.146.137.0/24 maxlen: 24
202.146.138.0/24 maxlen: 24
202.146.139.0/24 maxlen: 24
202.146.140.0/24 maxlen: 24
202.146.141.0/24 maxlen: 24
202.146.142.0/24 maxlen: 24
202.146.143.0/24 maxlen: 24
202.146.144.0/24 maxlen: 24
202.146.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:97:1d:8c:0a:79:12:b2:79:0e:e8:99:14:04:eb:93:f9:92:0f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:22:00 2026 GMT
Not After : May 1 21:27:00 2027 GMT
Subject: CN=D5B21574A4EDF286C29A72D7C29974D8688CB551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:3b:0a:8f:ff:47:4e:7b:1f:4f:68:39:44:
a2:a2:08:28:9b:76:4a:fe:4a:fa:5d:71:de:24:4b:
25:7d:a0:07:3d:1c:3f:ca:ff:94:9a:88:9e:d6:a1:
ce:2a:7d:66:eb:42:2c:d9:00:4d:27:0f:38:89:de:
a8:fc:8e:78:e9:2b:c7:cc:7f:d7:91:4c:a9:a8:bb:
84:68:9d:74:96:87:6f:ac:e0:aa:af:9f:ff:3c:ec:
1d:dc:42:47:fc:ab:a8:f7:d7:80:91:3c:e5:bb:a5:
e0:6e:70:86:ec:25:ef:ef:9c:94:5d:b9:db:95:95:
7c:69:3e:f2:20:14:13:3f:37:33:55:67:1f:24:75:
a0:16:5c:bf:37:7d:c8:4f:c1:0a:ec:e5:2d:71:7f:
fe:e6:ad:ba:01:e4:74:e6:e9:68:d0:ff:3c:ae:31:
06:1e:35:d1:07:9a:8d:d2:1b:82:56:c9:0d:c0:c2:
2a:ae:0d:95:0a:cb:73:ca:cf:a2:9c:fa:e8:86:ac:
f8:16:bd:72:e6:4c:8b:6d:96:4f:b4:a4:7d:f5:4a:
4d:56:30:eb:e5:fd:a9:3b:de:47:ab:2b:cb:0b:d8:
70:15:09:00:25:49:40:b3:0b:4d:e9:69:87:03:32:
e6:14:19:8b:c6:c1:9b:38:c0:67:40:23:d3:b0:bb:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:15:74:A4:ED:F2:86:C2:9A:72:D7:C2:99:74:D8:68:8C:B5:51
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.146.128.0-202.146.145.255
Signature Algorithm: sha256WithRSAEncryption
97:69:29:d5:6f:9c:3f:97:72:c2:de:3a:7c:24:02:16:56:32:
1e:63:e9:51:3e:58:a8:ba:6e:39:9b:e5:ef:39:ba:31:5d:d6:
6c:79:02:ed:40:7d:a5:a8:84:2f:19:f4:c2:8e:52:86:fd:dd:
4f:6a:67:be:77:32:22:e1:24:94:40:59:d2:6c:e0:2e:9e:8e:
ee:4c:a9:1a:ac:69:b8:65:68:72:24:0b:bd:82:5d:d5:0c:33:
49:60:29:8f:5a:3f:cb:67:f3:7d:f3:55:2e:6c:04:88:fc:2d:
44:08:4a:08:04:e8:ac:e3:e7:89:a2:81:eb:72:7c:0a:c1:19:
be:5b:68:e5:0d:db:ad:00:28:fe:bd:6c:47:d7:41:3c:5a:c7:
59:55:44:47:0a:18:f0:61:5b:f3:05:15:e4:85:95:ee:60:a8:
97:86:ab:64:b1:03:41:4a:46:1a:f8:f3:f3:0a:a3:4b:46:33:
04:b1:c9:5f:a8:5a:96:c2:f6:3c:42:3c:43:fc:f2:4b:4d:f1:
8b:80:2c:e0:df:aa:76:7f:71:bd:d2:eb:98:a4:2d:e2:ba:72:
b9:dd:6d:f7:8d:c1:ee:f5:88:d0:92:ca:e8:7a:49:09:46:af:
d5:e8:70:52:0d:a3:ce:30:df:62:eb:c8:49:8b:40:2d:ec:b2:
25:87:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:13 2026 by rpki-client