Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45732.roa
File: AS45732.roa (raw, json)
Hash identifier: PRQZulbOGUpJA0k42URfixBr2w7FuwRgOtyN5r8Awfc=
Subject key identifier: E6:31:C4:A6:06:F1:A1:B1:42:D4:0F:47:88:DE:B8:D5:2D:D4:89:CF
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 349D2E218138850B7F212A9ADF519D7354D77B85
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45732.roa
Signing time: Sat 02 May 2026 21:28:59 +0000
ROA not before: Sat 02 May 2026 21:23:59 +0000
ROA not after: Sat 01 May 2027 21:28:59 +0000
asID: 45732
IP address blocks: 103.93.188.0/24 maxlen: 24
103.165.248.0/24 maxlen: 24
103.196.166.0/23 maxlen: 24
202.61.126.0/24 maxlen: 24
202.137.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9d:2e:21:81:38:85:0b:7f:21:2a:9a:df:51:9d:73:54:d7:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:23:59 2026 GMT
Not After : May 1 21:28:59 2027 GMT
Subject: CN=E631C4A606F1A1B142D40F4788DEB8D52DD489CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:16:9f:e3:63:61:92:81:62:06:c7:77:80:
48:9b:41:df:cb:13:aa:28:8e:89:43:a1:5c:6a:7e:
b6:12:6e:bd:5e:85:54:9e:fb:4b:94:e9:78:b8:22:
df:e1:89:56:c8:01:29:20:9e:a8:ef:cc:bf:76:9d:
ae:88:ad:0e:74:03:66:ea:4a:fa:37:9f:95:45:95:
99:2e:f6:b6:57:00:39:6b:67:ce:53:5a:7a:0c:45:
c5:aa:46:48:82:ff:1a:2d:42:c0:22:d5:9d:f0:63:
b7:73:b0:ce:a3:1b:3a:53:db:fd:76:84:9a:77:23:
a7:b8:36:1e:38:cf:69:7a:d0:c9:28:a5:7d:59:f6:
41:6f:7d:b2:41:71:35:98:51:c7:a5:e1:51:31:31:
3c:75:e7:8a:9f:2a:05:00:4a:67:0a:e8:d7:6e:53:
0e:49:99:30:13:3b:75:75:a7:4d:bc:e5:b6:7d:e2:
84:04:3f:82:9c:0f:2a:da:a1:fc:fe:6f:c8:b8:ff:
fb:74:bc:b7:44:1f:08:f4:47:fe:2a:bd:e2:31:9c:
9e:e3:94:6a:52:84:4d:ce:a7:52:35:87:51:76:a0:
75:56:5a:33:5c:93:d5:59:70:1c:0a:5e:0a:e9:cd:
e3:7c:40:98:54:04:e5:74:63:4c:1e:84:20:95:a8:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:C4:A6:06:F1:A1:B1:42:D4:0F:47:88:DE:B8:D5:2D:D4:89:CF
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.93.188.0/24
103.165.248.0/24
103.196.166.0/23
202.61.126.0/24
202.137.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:81:7a:d3:7e:de:43:13:cc:7b:5d:a9:c4:4e:2f:9e:b0:1a:
f7:16:4f:a0:c3:cc:70:36:ac:d3:1c:ca:e0:c0:15:1c:9f:11:
23:96:2e:3e:06:13:f6:b4:f7:6c:9b:35:df:36:bc:ea:39:38:
55:80:aa:80:b9:2c:3e:4f:73:2d:7f:e9:08:f9:20:7f:33:b6:
6d:d3:b2:62:78:c4:aa:62:f9:fc:ed:25:c0:29:f7:3a:b8:b4:
f5:87:05:92:4e:0e:73:e7:f6:68:56:4d:4f:5e:70:9e:9f:6c:
62:e9:ae:f8:f3:c8:20:7f:4d:c8:a6:0a:14:c4:c6:d4:0d:b7:
53:32:21:04:5f:bf:b6:52:4f:26:1d:ec:5c:cf:bd:19:e2:88:
56:e6:7c:0b:57:11:10:a7:55:89:ba:97:c3:ca:4f:70:55:ef:
64:9a:34:15:b9:71:fe:9b:41:15:09:09:92:84:bf:35:ea:1a:
1a:fa:88:e2:58:cd:5c:c2:75:e5:37:8b:a7:5a:18:6f:b1:ed:
e4:b7:cd:4d:ad:b0:4e:b8:08:e8:d3:89:53:7f:31:d2:6d:6a:
2f:22:e4:e7:1c:1b:2e:1f:e8:5f:98:0c:8c:f5:79:6e:ad:88:
08:a7:41:3a:45:c4:b9:01:15:76:db:54:b7:d4:4a:bb:89:1d:
f6:35:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:29 2026 by rpki-client