Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS4800.roa
File: AS4800.roa (raw, json)
Hash identifier: kiPv2SbvwaPRuT3K8UFLnh0yTm/VBmN2tyYm6MxIeTw=
Subject key identifier: C4:4C:7F:F6:BE:7C:AA:31:AE:31:48:98:BC:B4:B4:28:D8:73:23:18
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6BE239AC342239718758942671047A9268A3D130
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS4800.roa
Signing time: Sat 02 May 2026 21:37:38 +0000
ROA not before: Sat 02 May 2026 21:32:38 +0000
ROA not after: Sat 01 May 2027 21:37:38 +0000
asID: 4800
IP address blocks: 36.50.64.0/23 maxlen: 24
36.50.66.0/23 maxlen: 24
36.50.68.0/23 maxlen: 24
36.50.70.0/23 maxlen: 24
36.50.120.0/23 maxlen: 24
36.50.126.0/23 maxlen: 24
36.50.136.0/23 maxlen: 24
36.50.242.0/23 maxlen: 24
36.50.244.0/23 maxlen: 24
36.50.246.0/23 maxlen: 24
103.1.156.0/23 maxlen: 24
103.7.194.0/23 maxlen: 24
103.8.64.0/23 maxlen: 24
103.8.66.0/23 maxlen: 24
103.8.184.0/23 maxlen: 24
103.8.186.0/23 maxlen: 24
103.8.192.0/23 maxlen: 24
103.8.194.0/23 maxlen: 24
103.9.140.0/23 maxlen: 24
103.12.206.0/23 maxlen: 24
103.12.224.0/23 maxlen: 24
103.12.226.0/23 maxlen: 24
103.13.4.0/23 maxlen: 24
103.39.198.0/23 maxlen: 24
103.40.0.0/23 maxlen: 24
103.42.246.0/23 maxlen: 24
103.43.56.0/23 maxlen: 24
103.43.58.0/23 maxlen: 24
103.43.60.0/23 maxlen: 24
103.43.62.0/23 maxlen: 24
103.44.8.0/23 maxlen: 24
103.44.10.0/23 maxlen: 24
103.44.92.0/23 maxlen: 24
103.44.94.0/23 maxlen: 24
103.44.152.0/23 maxlen: 24
103.44.154.0/23 maxlen: 24
103.55.248.0/23 maxlen: 24
103.55.250.0/23 maxlen: 24
103.60.92.0/23 maxlen: 24
103.60.94.0/23 maxlen: 24
103.65.120.0/23 maxlen: 24
103.65.122.0/23 maxlen: 24
103.65.124.0/23 maxlen: 24
103.65.126.0/23 maxlen: 24
103.101.40.0/23 maxlen: 24
103.101.164.0/23 maxlen: 24
103.102.48.0/23 maxlen: 24
103.102.54.0/23 maxlen: 24
103.103.4.0/23 maxlen: 24
103.103.216.0/23 maxlen: 24
103.104.8.0/23 maxlen: 24
103.106.12.0/23 maxlen: 24
103.108.80.0/23 maxlen: 24
103.108.84.0/23 maxlen: 24
103.142.104.0/23 maxlen: 24
103.149.24.0/23 maxlen: 24
103.152.80.0/23 maxlen: 24
103.168.122.0/23 maxlen: 24
103.168.124.0/23 maxlen: 24
103.168.126.0/23 maxlen: 24
103.168.128.0/23 maxlen: 24
103.168.130.0/23 maxlen: 24
103.168.132.0/23 maxlen: 24
103.168.136.0/23 maxlen: 24
103.169.16.0/23 maxlen: 24
103.169.18.0/23 maxlen: 24
103.169.20.0/23 maxlen: 24
103.169.22.0/23 maxlen: 24
103.169.24.0/23 maxlen: 24
103.169.26.0/23 maxlen: 24
103.169.28.0/23 maxlen: 24
103.169.30.0/23 maxlen: 24
103.175.210.0/23 maxlen: 24
103.183.60.0/23 maxlen: 24
103.183.186.0/23 maxlen: 24
103.187.150.0/23 maxlen: 24
103.187.152.0/23 maxlen: 24
103.187.154.0/23 maxlen: 24
103.187.156.0/23 maxlen: 24
103.187.184.0/23 maxlen: 24
103.187.186.0/23 maxlen: 24
103.187.188.0/23 maxlen: 24
103.187.218.0/23 maxlen: 24
103.187.220.0/23 maxlen: 24
103.187.234.0/23 maxlen: 24
103.187.236.0/23 maxlen: 24
103.188.32.0/23 maxlen: 24
103.188.34.0/23 maxlen: 24
103.188.36.0/23 maxlen: 24
103.188.38.0/23 maxlen: 24
103.190.222.0/23 maxlen: 24
103.190.224.0/23 maxlen: 24
103.191.0.0/23 maxlen: 24
103.191.2.0/23 maxlen: 24
103.191.4.0/23 maxlen: 24
103.191.6.0/23 maxlen: 24
103.191.8.0/23 maxlen: 24
103.191.10.0/23 maxlen: 24
103.191.12.0/23 maxlen: 24
103.200.204.0/23 maxlen: 24
103.200.206.0/23 maxlen: 24
103.203.68.0/23 maxlen: 24
103.203.70.0/23 maxlen: 24
103.203.204.0/23 maxlen: 24
103.203.206.0/23 maxlen: 24
103.252.86.0/23 maxlen: 24
103.253.164.0/23 maxlen: 24
103.254.124.0/23 maxlen: 24
113.192.32.0/23 maxlen: 24
113.192.34.0/23 maxlen: 24
113.192.36.0/23 maxlen: 24
113.192.38.0/23 maxlen: 24
210.87.94.0/23 maxlen: 24
210.87.102.0/23 maxlen: 24
2400:8000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e2:39:ac:34:22:39:71:87:58:94:26:71:04:7a:92:68:a3:d1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:32:38 2026 GMT
Not After : May 1 21:37:38 2027 GMT
Subject: CN=C44C7FF6BE7CAA31AE314898BCB4B428D8732318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:9f:ed:91:37:e6:2d:a4:f0:c9:56:3f:c1:
91:38:41:bc:dd:fe:09:f5:d3:c6:35:c5:6d:e2:e4:
ba:0b:19:cb:e8:ce:b3:9e:90:12:66:e2:d4:64:58:
95:39:d9:d7:53:90:2c:aa:dd:0f:d6:1f:70:16:21:
2f:09:12:b6:37:08:9c:16:84:41:12:c7:c1:8a:cb:
d3:6b:bd:dc:7c:2d:08:de:72:43:a6:de:b2:9e:0f:
56:a9:b8:ba:9a:d3:39:6e:42:63:ba:70:97:62:69:
bf:a1:41:10:e7:19:47:2a:8e:bf:e8:52:24:16:19:
f4:a3:bc:9d:37:8f:55:61:33:91:16:fe:8c:52:eb:
38:6e:4a:71:2f:60:15:82:4f:83:f0:1e:a4:df:56:
99:40:0f:07:6e:9a:18:f9:ce:53:b6:ab:55:d7:ae:
4e:17:19:29:b1:ad:1c:c7:d1:89:85:4d:49:9e:29:
33:dd:67:59:b6:c3:6c:b9:a5:30:3c:b4:62:46:68:
64:37:b4:a6:ff:33:29:e4:d4:9d:24:7f:06:fc:0a:
42:3b:c5:56:9d:33:28:72:7d:5e:a6:f8:dd:fa:17:
5b:64:cb:cc:a9:2c:71:e7:2b:0b:e8:b3:77:9e:ee:
52:36:f7:1a:df:47:28:bb:81:a6:1c:de:69:93:31:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:7F:F6:BE:7C:AA:31:AE:31:48:98:BC:B4:B4:28:D8:73:23:18
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS4800.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.64.0/21
36.50.120.0/23
36.50.126.0/23
36.50.136.0/23
36.50.242.0-36.50.247.255
103.1.156.0/23
103.7.194.0/23
103.8.64.0/22
103.8.184.0/22
103.8.192.0/22
103.9.140.0/23
103.12.206.0/23
103.12.224.0/22
103.13.4.0/23
103.39.198.0/23
103.40.0.0/23
103.42.246.0/23
103.43.56.0/21
103.44.8.0/22
103.44.92.0/22
103.44.152.0/22
103.55.248.0/22
103.60.92.0/22
103.65.120.0/21
103.101.40.0/23
103.101.164.0/23
103.102.48.0/23
103.102.54.0/23
103.103.4.0/23
103.103.216.0/23
103.104.8.0/23
103.106.12.0/23
103.108.80.0/23
103.108.84.0/23
103.142.104.0/23
103.149.24.0/23
103.152.80.0/23
103.168.122.0-103.168.133.255
103.168.136.0/23
103.169.16.0/20
103.175.210.0/23
103.183.60.0/23
103.183.186.0/23
103.187.150.0-103.187.157.255
103.187.184.0-103.187.189.255
103.187.218.0-103.187.221.255
103.187.234.0-103.187.237.255
103.188.32.0/21
103.190.222.0-103.190.225.255
103.191.0.0-103.191.13.255
103.200.204.0/22
103.203.68.0/22
103.203.204.0/22
103.252.86.0/23
103.253.164.0/23
103.254.124.0/23
113.192.32.0/21
210.87.94.0/23
210.87.102.0/23
IPv6:
2400:8000::/32
Signature Algorithm: sha256WithRSAEncryption
73:68:36:2d:58:04:8f:02:a7:3a:51:c7:8b:a6:7e:f9:da:c9:
e9:49:73:c9:62:67:36:64:b0:e9:7f:e5:b6:9b:1c:5b:8d:d8:
94:79:94:41:a7:9e:7a:bb:89:18:d0:61:ec:b0:e9:da:4a:83:
3a:90:48:7f:fe:a3:81:67:ad:1b:19:b9:e3:17:80:3d:3d:51:
4e:ad:eb:8a:a1:36:66:ac:d9:96:9d:b2:4c:2c:ab:2a:05:c6:
7d:67:ac:2f:45:c8:c4:2c:25:d0:c1:ff:fe:35:6f:4d:14:17:
83:12:bd:59:c5:0c:8c:06:a7:34:26:8d:91:3f:cb:58:3b:42:
6a:a0:e3:69:bd:88:00:be:55:a2:02:8a:6e:9d:13:73:1d:56:
90:9b:80:4e:91:3b:0e:ed:f7:ac:62:26:5a:27:87:8f:38:bd:
5a:37:e9:c8:3b:a0:45:02:7e:41:db:cf:6f:c2:83:f5:91:55:
83:52:be:b9:83:ab:bb:9a:df:87:c4:88:ae:bc:5c:b6:0d:c5:
5b:e7:66:15:dc:c8:07:dc:88:86:a8:01:b3:e5:33:8e:ce:ef:
e0:08:e5:4c:35:05:5d:60:4d:4b:75:27:c2:ce:e9:eb:50:4c:
fe:8b:1f:a1:05:74:dd:e6:8d:21:31:25:7c:a5:cd:b5:b5:ed:
35:9a:53:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:25 2026 by rpki-client