Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38513.roa
File: AS38513.roa (raw, json)
Hash identifier: MxEll+ooDon8kPbAynfAJK7MrRVsRGDHX0/XpUPqWsA=
Subject key identifier: 7F:19:35:68:E0:F5:9B:36:99:55:1F:B8:F8:93:4D:A1:AF:77:61:24
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 49DB64A37DC83383CC1D42D1883BCA741197A0FC
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38513.roa
Signing time: Sat 02 May 2026 21:19:21 +0000
ROA not before: Sat 02 May 2026 21:14:21 +0000
ROA not after: Sat 01 May 2027 21:19:21 +0000
asID: 38513
IP address blocks: 103.42.244.0/23 maxlen: 24
103.67.40.0/23 maxlen: 24
103.67.42.0/23 maxlen: 24
103.125.90.0/23 maxlen: 24
103.125.100.0/23 maxlen: 24
103.125.102.0/23 maxlen: 24
103.190.214.0/23 maxlen: 24
103.191.14.0/23 maxlen: 24
103.191.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:db:64:a3:7d:c8:33:83:cc:1d:42:d1:88:3b:ca:74:11:97:a0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:14:21 2026 GMT
Not After : May 1 21:19:21 2027 GMT
Subject: CN=7F193568E0F59B3699551FB8F8934DA1AF776124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:dd:a8:71:f3:ce:c7:b8:59:25:0b:b2:60:
1f:77:03:f9:5b:4e:03:c6:65:71:db:10:d6:f8:2c:
57:94:f2:d9:e2:c8:a1:eb:9d:46:ee:53:3a:da:ba:
b7:2e:02:fc:93:9a:b1:2a:a8:38:2a:0d:d9:25:b5:
fe:97:fc:8e:67:c4:00:77:44:51:7d:c9:68:a5:17:
8b:4a:24:9f:ae:90:87:99:02:39:cb:be:fd:c5:98:
06:52:86:e1:57:1b:13:4a:35:a4:5a:09:e0:c6:e3:
b9:37:64:f9:b9:1a:dc:52:be:e8:75:c2:49:5e:c7:
02:02:98:d3:13:7a:04:32:af:37:9e:f8:1b:3a:cc:
f7:87:86:99:4c:90:41:b5:84:77:f2:bb:3b:0a:5a:
d9:5f:ec:37:a9:40:b9:99:49:f2:a4:2d:6b:17:5f:
d1:53:8e:0d:fa:af:06:1b:43:b2:aa:f0:e9:cb:7e:
b5:1a:29:1a:91:c8:1f:32:79:99:a9:7e:f2:63:73:
2a:37:53:b5:7f:a3:98:5d:e3:d3:7c:b6:17:22:b2:
ff:dd:a5:12:82:e5:82:d1:f9:4f:f9:45:14:8b:7f:
76:f4:fe:bf:b7:3f:a2:76:85:7d:72:60:a0:21:6d:
41:b4:92:01:3a:58:bc:e5:79:33:d8:f0:ed:7d:48:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:19:35:68:E0:F5:9B:36:99:55:1F:B8:F8:93:4D:A1:AF:77:61:24
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.244.0/23
103.67.40.0/22
103.125.90.0/23
103.125.100.0/22
103.190.214.0/23
103.191.14.0-103.191.17.255
Signature Algorithm: sha256WithRSAEncryption
5c:ae:9a:a7:be:80:fa:f0:66:2d:ba:56:2d:49:12:b9:86:0d:
b1:e1:a0:f0:df:80:69:d3:82:d3:a4:b3:63:c5:11:45:13:b3:
16:3b:6c:1c:2d:c3:73:48:b9:72:29:88:1f:d9:3c:cc:cf:48:
e8:0b:d4:18:31:c7:80:c2:06:47:b1:f6:5c:99:92:0d:fb:d8:
30:e7:b7:36:e4:a0:57:9a:fb:86:eb:59:e0:5e:f4:d0:44:71:
33:1b:b6:44:b1:72:b5:89:7d:3a:a8:74:d5:00:95:5d:e1:19:
91:1e:47:77:1b:46:ce:86:03:4d:9b:7c:5b:ea:de:6b:5f:0c:
d6:59:22:81:2d:39:06:75:d0:9e:b4:d4:80:07:76:89:bb:fc:
79:aa:c4:04:a8:63:b2:3a:e2:48:09:f2:87:d7:a1:5f:12:3f:
5f:ee:e6:08:03:8e:40:74:bd:e4:a3:9e:3c:7c:0e:b0:34:fa:
17:31:29:3b:ee:2c:6c:b6:69:5d:3c:ec:d6:68:1a:14:f5:fb:
19:1b:dc:a5:88:4b:9d:aa:c6:44:1c:19:fa:8e:49:14:9f:2e:
9d:3b:e3:9b:be:6c:64:5f:cc:31:d0:c4:e1:c5:8e:be:a5:46:
4f:eb:a3:b6:a4:7c:fc:93:8d:ff:fd:cf:27:a2:55:78:9a:60:
1e:c6:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:23 2026 by rpki-client