Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38511.roa
File: AS38511.roa (raw, json)
Hash identifier: 7aaaZDjHHaMKR/KDYClENmQvYFXGav52crW9jhStsEk=
Subject key identifier: 9F:8D:75:A5:6D:36:74:9B:A0:7D:74:DF:F8:64:5E:70:12:0A:3D:F3
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 710FC2B8520CB574778FA8B1984187A4262B4967
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38511.roa
Signing time: Sat 02 May 2026 18:37:28 +0000
ROA not before: Sat 02 May 2026 18:32:28 +0000
ROA not after: Sat 01 May 2027 18:37:28 +0000
asID: 38511
IP address blocks: 45.251.4.0/22 maxlen: 24
101.255.0.0/16 maxlen: 24
103.15.172.0/22 maxlen: 24
103.26.212.0/22 maxlen: 24
115.124.64.0/19 maxlen: 24
202.182.48.0/21 maxlen: 24
2404:cf00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0f:c2:b8:52:0c:b5:74:77:8f:a8:b1:98:41:87:a4:26:2b:49:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 18:32:28 2026 GMT
Not After : May 1 18:37:28 2027 GMT
Subject: CN=9F8D75A56D36749BA07D74DFF8645E70120A3DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:36:99:ec:df:87:53:cc:96:04:00:9d:2d:
9c:b5:34:ae:b8:54:84:9c:ad:15:6f:90:74:e4:27:
55:46:5e:38:1e:ac:45:04:c3:8d:18:bc:57:2a:50:
a1:b5:55:b7:f5:30:78:d1:21:11:9d:08:7f:09:50:
e1:15:0e:50:32:56:f5:31:50:f8:e8:13:02:b2:08:
34:61:55:2d:2a:2f:b0:ad:60:3b:50:b9:02:31:c7:
1e:19:47:dc:9e:04:76:27:15:57:6e:de:7f:2c:42:
f6:67:39:0c:1e:8e:c6:fe:44:ad:78:64:06:cf:dd:
75:a1:0f:64:79:61:b3:50:7d:b3:d2:b1:c2:ea:a9:
2d:e4:87:24:59:0b:6e:59:4e:7e:c7:7e:ca:dd:ab:
b1:8d:c4:13:33:59:e1:e6:2f:5a:13:c9:35:20:34:
53:6b:3f:3e:b7:d2:0a:b0:24:04:b7:93:c7:ec:05:
cd:9b:a5:3f:88:0b:81:ec:d4:16:72:8d:bc:7c:32:
fa:aa:75:00:4a:9a:9c:74:5e:d6:da:6a:ed:8d:59:
da:a6:74:fe:f2:ff:a6:11:b2:5a:69:f6:72:ff:b1:
ee:22:2b:28:ab:62:74:51:16:fa:f2:d8:77:9c:40:
96:b3:f8:b1:56:fe:6e:d8:73:52:86:89:c8:80:16:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:75:A5:6D:36:74:9B:A0:7D:74:DF:F8:64:5E:70:12:0A:3D:F3
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.4.0/22
101.255.0.0/16
103.15.172.0/22
103.26.212.0/22
115.124.64.0/19
202.182.48.0/21
IPv6:
2404:cf00::/32
Signature Algorithm: sha256WithRSAEncryption
37:e3:45:b7:a7:e5:cc:ae:97:2b:74:99:94:61:2d:f0:f8:4d:
28:85:9e:9d:de:ac:70:80:be:2a:58:f5:19:74:d3:33:b6:86:
9f:a9:08:fb:28:e1:35:2b:6a:7f:4a:e6:2d:e4:c7:9e:fe:4f:
fb:7f:a6:ca:bc:ed:66:b2:7d:e7:60:5c:49:92:96:1c:98:36:
ee:5f:45:2c:6d:3c:e9:16:92:54:a2:93:0b:8a:e2:4c:cf:29:
18:16:55:9f:d8:a1:6a:bf:7f:9d:6f:2e:7a:04:ca:b4:e6:39:
e7:60:5c:c7:eb:40:fb:20:60:05:f3:da:d8:25:d1:5c:eb:0b:
09:96:f1:08:cd:c0:f2:22:e4:d4:17:f8:9d:df:b9:ca:f6:8d:
43:42:aa:fd:aa:a6:c6:c8:48:f3:91:9e:73:23:9a:37:ad:f5:
15:2c:d8:9b:e3:73:57:a6:da:f5:31:fa:58:fa:29:bd:c7:f9:
27:4d:9f:ad:e8:d5:b3:f8:34:4f:da:88:61:5f:a9:89:16:f7:
85:b8:ae:ec:35:6b:5a:79:b3:c7:df:23:b6:8f:34:e7:8c:23:
5a:2f:f4:b0:04:ba:b7:bc:2e:7e:66:60:ea:70:3c:d7:dc:55:
81:34:b4:d5:15:f7:54:00:ef:c0:4d:10:b1:07:66:79:69:b1:
0b:b5:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:30 2026 by rpki-client