Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
File: AS45305.roa (raw, json)
Hash identifier: Am/40VpFy9FOg4039bh/MpWECnRiIkOhIist77zBYN4=
Subject key identifier: 35:DD:DA:8F:DE:99:84:6C:73:A8:97:60:5E:98:31:9F:48:63:6E:CD
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4C9CF6160F5B6BAFE0156B86D8E00E245E8C32C2
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
Signing time: Thu 22 Oct 2026 11:21:45 +0000
ROA not before: Thu 22 Oct 2026 11:16:45 +0000
ROA not after: Thu 21 Oct 2027 11:21:45 +0000
asID: 45305
IP address blocks: 103.22.99.0/24 maxlen: 24
103.46.10.0/23 maxlen: 24
103.51.204.0/24 maxlen: 24
103.51.205.0/24 maxlen: 24
103.54.80.0/23 maxlen: 24
103.56.146.0/23 maxlen: 24
103.83.98.0/24 maxlen: 24
103.87.148.0/23 maxlen: 24
103.98.122.0/24 maxlen: 24
103.100.180.0/24 maxlen: 24
103.100.181.0/24 maxlen: 24
103.114.52.0/24 maxlen: 24
103.130.116.0/24 maxlen: 24
103.130.117.0/24 maxlen: 24
103.134.223.0/24 maxlen: 24
103.162.60.0/24 maxlen: 24
103.162.61.0/24 maxlen: 24
103.164.228.0/24 maxlen: 24
103.175.240.0/24 maxlen: 24
103.175.241.0/24 maxlen: 24
103.183.94.0/24 maxlen: 24
103.183.254.0/24 maxlen: 24
103.184.180.0/23 maxlen: 24
103.189.96.0/24 maxlen: 24
103.189.97.0/24 maxlen: 24
103.190.114.0/23 maxlen: 24
103.191.94.0/24 maxlen: 24
103.220.22.0/23 maxlen: 24
103.251.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9c:f6:16:0f:5b:6b:af:e0:15:6b:86:d8:e0:0e:24:5e:8c:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 22 11:16:45 2026 GMT
Not After : Oct 21 11:21:45 2027 GMT
Subject: CN=35DDDA8FDE99846C73A897605E98319F48636ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:df:8c:44:4d:43:61:64:1c:9b:50:71:ff:
de:e1:e6:62:b5:b0:df:b9:db:e3:02:f8:68:d1:fc:
a5:2a:a8:79:a9:53:e0:5c:88:72:40:4f:7e:2d:93:
2e:da:04:9b:dd:eb:24:d2:4e:38:9e:67:b8:cf:bf:
be:58:72:e6:26:16:0d:f1:58:4e:0a:2e:96:b4:31:
d9:27:46:9a:c6:ca:96:2f:82:06:97:55:03:23:5b:
5a:0e:e6:af:4a:b2:ba:ce:4d:33:cf:87:22:8b:ae:
a1:85:c4:05:99:ad:1f:3a:94:2d:29:5a:09:dc:f1:
c9:cf:81:2f:9e:51:c6:e8:67:fb:68:d6:a5:9b:2f:
24:7d:fb:a0:fb:4a:84:de:a1:50:27:a8:e2:62:79:
af:bc:eb:b0:58:a7:f2:38:f7:c5:c2:df:c2:0d:54:
be:e7:06:63:0f:85:9b:20:0d:1f:40:d2:0b:88:2c:
ed:2e:55:89:3e:82:b4:3d:d6:dc:e8:a9:36:e0:31:
c9:d0:6b:cd:df:c1:63:c9:d0:02:a3:54:15:bb:2a:
07:54:db:60:9f:c5:9f:35:77:ec:3e:a0:a3:6e:1c:
d5:af:be:49:6d:1e:a1:09:47:f1:83:d9:6e:07:f6:
56:63:7b:c6:13:63:8e:2d:6c:07:25:7f:dd:84:cb:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:DA:8F:DE:99:84:6C:73:A8:97:60:5E:98:31:9F:48:63:6E:CD
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.99.0/24
103.46.10.0/23
103.51.204.0/23
103.54.80.0/23
103.56.146.0/23
103.83.98.0/24
103.87.148.0/23
103.98.122.0/24
103.100.180.0/23
103.114.52.0/24
103.130.116.0/23
103.134.223.0/24
103.162.60.0/23
103.164.228.0/24
103.175.240.0/23
103.183.94.0/24
103.183.254.0/24
103.184.180.0/23
103.189.96.0/23
103.190.114.0/23
103.191.94.0/24
103.220.22.0/23
103.251.153.0/24
Signature Algorithm: sha256WithRSAEncryption
21:77:6b:6d:dc:f4:0f:83:b3:93:39:47:83:35:9f:61:fa:43:
a8:e1:07:19:ca:77:29:aa:07:e8:71:b7:a8:d7:03:71:81:b4:
b4:cc:57:eb:6d:70:3a:a5:f6:6c:5e:75:d0:57:65:08:5f:a9:
fc:e7:18:f4:51:b1:82:d7:b0:75:c0:81:0d:cd:92:63:4e:8e:
e6:69:76:25:a2:8b:78:af:4f:b9:ca:22:3f:a9:7e:36:1a:50:
f9:ac:51:fd:e5:d1:dd:97:1c:f8:72:f2:76:0e:29:e9:0e:e4:
ef:de:64:c4:bd:8a:ac:3f:cb:00:d3:4c:c0:10:e9:9a:42:2d:
13:46:8b:57:e1:5c:0a:32:41:35:dd:8e:dc:b0:73:59:77:ae:
66:6c:73:3a:5b:f5:d0:ff:be:67:f9:dc:93:c4:5f:82:5d:d7:
9e:8a:87:0d:0a:7d:e2:c3:e9:8d:ee:71:aa:fd:7d:02:d6:f7:
50:ae:df:e5:fb:fc:90:a1:77:54:ad:55:15:45:2e:71:e5:af:
34:c5:a9:d6:96:36:d7:39:23:ff:13:58:33:2a:78:1e:08:ff:
96:c3:d7:dc:28:9f:36:0f:ea:8b:85:49:4b:91:21:5c:47:84:
72:56:73:16:2b:a0:f2:b5:94:0d:87:d8:52:3e:36:13:b9:e4:
13:0f:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:17:44 2026 by rpki-client