Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45325.roa
File: AS45325.roa (raw, json)
Hash identifier: VfuJ0tfblv5H/zxN5Xu8bTSK7ecT7dUCgB1nTG/VQKQ=
Subject key identifier: 05:82:94:A4:A7:41:D0:8F:12:5F:35:63:ED:90:62:EA:59:88:A4:21
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 54D1FC4BB613018D9AF26C898B520AEFCAFD362E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45325.roa
Signing time: Fri 25 Sep 2026 04:59:21 +0000
ROA not before: Fri 25 Sep 2026 04:54:21 +0000
ROA not after: Fri 24 Sep 2027 04:59:21 +0000
asID: 45325
IP address blocks: 103.3.68.0/23 maxlen: 24
103.151.140.0/24 maxlen: 24
103.151.141.0/24 maxlen: 24
122.248.35.0/24 maxlen: 24
122.248.42.0/24 maxlen: 24
122.248.44.0/24 maxlen: 24
2001:df7:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d1:fc:4b:b6:13:01:8d:9a:f2:6c:89:8b:52:0a:ef:ca:fd:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Sep 25 04:54:21 2026 GMT
Not After : Sep 24 04:59:21 2027 GMT
Subject: CN=058294A4A741D08F125F3563ED9062EA5988A421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:79:83:66:cf:53:43:92:a0:a5:e1:62:bc:
9d:0a:22:fb:1a:19:33:b3:5f:82:f2:0f:81:22:c2:
71:9c:de:28:3a:e1:db:81:3e:1c:aa:6e:43:b0:1d:
6d:29:4d:d2:df:e5:54:34:ae:fd:af:3a:a9:2a:bb:
6d:25:3c:dc:a1:84:91:6a:1e:1d:0d:71:c7:2e:32:
47:24:dd:69:41:37:d6:f0:81:14:11:bd:9a:94:2c:
dc:1f:99:f2:88:3f:40:b0:f0:6b:31:c7:ca:b8:98:
ea:ef:9a:7a:88:ef:df:68:6b:d3:81:bd:35:4a:44:
5b:52:6a:cb:22:dc:23:79:9c:a9:bb:cb:79:a9:9b:
f7:59:03:19:0b:3b:02:b5:f9:e7:61:22:49:f3:94:
cb:c1:65:32:3c:c2:6a:16:f9:86:2b:5f:74:fd:95:
65:05:33:7f:83:b0:a2:b6:a8:7b:6b:a3:cb:c3:c2:
27:19:5c:f2:bd:64:7b:a4:b2:09:6e:a0:f9:d9:c1:
c4:ec:af:24:6b:0d:86:46:68:61:82:78:2c:77:5f:
55:7c:ab:3b:97:06:db:1f:28:15:c8:a4:f5:2a:9d:
29:e3:20:9d:18:60:09:b3:88:b0:7c:f3:6b:69:2d:
ea:d6:ad:74:75:d6:11:5c:1b:19:32:04:16:90:de:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:94:A4:A7:41:D0:8F:12:5F:35:63:ED:90:62:EA:59:88:A4:21
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.68.0/23
103.151.140.0/23
122.248.35.0/24
122.248.42.0/24
122.248.44.0/24
IPv6:
2001:df7:880::/48
Signature Algorithm: sha256WithRSAEncryption
56:60:05:ba:42:b8:45:94:d8:f3:ee:ad:9e:e0:57:15:d9:d3:
d9:b7:d9:d4:1d:82:b7:4f:eb:d3:1f:85:a8:5c:5f:0f:90:47:
4d:93:8a:67:a5:1f:c0:0d:5a:38:5c:eb:1f:79:6c:83:4b:f2:
91:ad:61:d7:a5:88:25:ab:16:70:84:02:3d:94:10:b0:c4:02:
96:f7:66:c6:30:ac:69:55:34:6a:3d:8b:2a:6a:62:4b:06:0f:
64:8d:05:b0:a9:48:aa:55:dc:32:37:33:a2:83:c5:65:bd:76:
de:06:2c:e2:0a:1d:00:58:c7:f9:9c:24:68:4d:20:f2:f1:e3:
b9:71:db:57:0f:4f:85:9b:38:17:a4:1c:ee:8e:a3:85:9a:e9:
e3:da:44:1b:b5:68:d0:de:39:dc:00:e1:2e:56:a3:1c:cf:0d:
65:1d:a6:2e:5c:4e:e4:b6:f5:db:aa:2b:88:d6:e7:95:44:55:
62:2e:fd:94:61:8a:c2:02:29:d7:f8:6a:dc:19:98:6e:ed:8d:
56:aa:fd:6d:98:d3:81:70:6f:75:ac:cf:96:e9:31:49:5a:7d:
16:95:b2:0a:07:f0:6d:10:ce:54:ec:6f:73:9c:f7:f1:e0:ea:
93:19:21:d9:9f:b5:40:0a:96:af:14:7a:4a:6d:9a:16:1d:85:
ea:c9:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:58:08 2026 by rpki-client