Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38758.roa
File: AS38758.roa (raw, json)
Hash identifier: mTDFPwNOMZdit80QBPJCzp909KNKE3NkLUZGk3uUaBI=
Subject key identifier: C2:53:41:A8:A6:D3:D5:5F:B3:79:52:3A:11:2D:47:BE:97:DA:8C:8B
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 33AA9452FF9F42AE8D6808C6B12A6F00EDDA46C3
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38758.roa
Signing time: Sat 02 May 2026 21:16:29 +0000
ROA not before: Sat 02 May 2026 21:11:29 +0000
ROA not after: Sat 01 May 2027 21:16:29 +0000
asID: 38758
IP address blocks: 103.142.110.0/23 maxlen: 24
103.149.226.0/24 maxlen: 24
103.166.190.0/23 maxlen: 24
103.166.194.0/23 maxlen: 24
103.166.196.0/23 maxlen: 24
103.166.200.0/23 maxlen: 24
103.183.4.0/23 maxlen: 24
103.233.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:aa:94:52:ff:9f:42:ae:8d:68:08:c6:b1:2a:6f:00:ed:da:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:11:29 2026 GMT
Not After : May 1 21:16:29 2027 GMT
Subject: CN=C25341A8A6D3D55FB379523A112D47BE97DA8C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:05:b4:6a:87:15:6f:b6:6b:d0:71:8f:4f:
a3:c5:c4:73:48:79:2b:2c:b8:f8:08:a3:e2:69:2b:
5f:f8:e7:71:1d:19:61:2f:56:c2:65:31:d2:cd:44:
c7:0c:e8:0d:6d:bf:63:c7:52:8c:19:48:44:d2:0d:
7d:b0:52:46:95:b9:bd:52:39:cd:5f:dd:8c:c0:ab:
df:6e:33:88:42:95:8c:53:ff:ef:7e:93:3c:e5:45:
16:61:1a:b9:48:d4:9b:c9:4a:47:93:8e:23:31:5b:
5c:39:28:51:2f:68:60:16:a4:93:73:55:11:b0:db:
44:e8:7e:73:e9:bc:a7:30:fd:72:6a:e5:e3:ee:bf:
77:b1:1c:a3:47:fb:7e:42:32:b3:f8:2d:6e:49:d3:
ef:a1:15:e0:38:18:39:89:ce:15:40:02:32:27:23:
47:9c:5d:ac:3c:27:b3:7f:15:9a:b0:4e:86:60:5c:
ce:ef:c3:35:83:cd:fb:f7:23:56:b5:68:dd:09:5d:
b8:30:4b:78:de:ae:c8:cc:09:3d:0b:64:7a:e6:e5:
b6:99:43:53:69:b5:81:14:ee:63:24:f5:76:fa:5b:
f6:90:34:fe:d2:6b:cc:47:51:70:79:73:9b:8d:2c:
a6:d1:45:d5:36:a2:a6:12:2b:a4:5b:6e:0e:cd:ab:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:53:41:A8:A6:D3:D5:5F:B3:79:52:3A:11:2D:47:BE:97:DA:8C:8B
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.110.0/23
103.149.226.0/24
103.166.190.0/23
103.166.194.0-103.166.197.255
103.166.200.0/23
103.183.4.0/23
103.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:8b:25:b8:00:f0:70:65:b5:60:16:1f:bf:e8:e8:45:79:18:
95:83:f4:2f:64:c9:cb:62:52:e7:60:44:bc:7d:f4:75:fc:24:
d0:95:32:36:bc:8f:5b:a9:ad:90:cc:35:a2:23:11:37:f0:5e:
5c:09:7c:64:e8:7f:d8:24:bc:81:e3:0c:54:33:a0:4a:c4:46:
07:56:1e:7d:fb:9e:22:99:45:51:6a:cc:79:ff:e8:35:66:99:
d6:8c:61:e5:98:99:4c:74:8c:61:3a:df:a7:5e:f4:83:2d:bb:
50:5b:8e:a3:24:7d:d4:14:37:70:bd:ae:61:a7:c2:49:13:b3:
6b:9a:65:c5:d0:40:3e:57:3d:38:18:9c:d3:d3:b8:78:c0:e5:
a1:a1:29:5c:d9:89:4d:66:2b:76:d2:1e:89:b2:a0:5c:70:c5:
77:67:67:06:17:56:17:b1:29:02:49:7b:be:3a:63:70:fb:2d:
95:82:30:b0:8f:be:c2:c0:1d:2d:4d:56:d7:28:72:33:ae:85:
6d:e3:fa:da:99:5c:af:a9:49:7e:55:c6:d9:da:da:10:ba:a7:
c5:57:c1:28:04:8d:19:cc:09:7f:bf:f7:ca:5e:00:2b:d6:b9:
70:14:3f:23:c9:b7:df:b6:32:81:b7:80:5e:40:78:a3:2f:ab:
dd:73:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:41 2026 by rpki-client