Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55666.roa
File: AS55666.roa (raw, json)
Hash identifier: 0gkSyTxicPL3mYKQ9JPK9EhY9NEB820Gdcf8TM2Xuu0=
Subject key identifier: BD:F4:B0:27:40:30:CC:64:58:63:E5:CD:36:00:7C:28:F5:5D:50:D3
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 05D614C9620326B273842C63563BB01F4B13D20A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55666.roa
Signing time: Sat 02 May 2026 21:37:50 +0000
ROA not before: Sat 02 May 2026 21:32:50 +0000
ROA not after: Sat 01 May 2027 21:37:50 +0000
asID: 55666
IP address blocks: 43.245.184.0/22 maxlen: 24
43.252.157.0/24 maxlen: 24
43.252.158.0/24 maxlen: 24
43.252.159.0/24 maxlen: 24
49.128.178.0/24 maxlen: 24
103.4.52.0/23 maxlen: 24
103.4.54.0/24 maxlen: 24
103.17.245.0/24 maxlen: 24
103.17.246.0/24 maxlen: 24
103.17.247.0/24 maxlen: 24
103.31.224.0/22 maxlen: 24
103.247.121.0/24 maxlen: 24
103.255.242.0/24 maxlen: 24
111.68.28.0/24 maxlen: 24
112.78.38.0/24 maxlen: 24
119.2.49.0/24 maxlen: 24
119.2.51.0/24 maxlen: 24
202.46.148.0/22 maxlen: 24
2001:df1:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d6:14:c9:62:03:26:b2:73:84:2c:63:56:3b:b0:1f:4b:13:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:32:50 2026 GMT
Not After : May 1 21:37:50 2027 GMT
Subject: CN=BDF4B0274030CC645863E5CD36007C28F55D50D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:12:0c:a5:73:44:52:e5:30:f4:33:b4:28:
a5:3a:5e:fb:bf:ca:67:e8:27:98:27:ac:ec:2e:fa:
05:e5:92:52:67:de:81:85:2f:fc:c6:be:f1:0b:fe:
17:fe:36:03:39:d1:85:dc:42:2a:26:bc:e7:c3:01:
1b:af:2f:5b:82:bd:25:24:31:34:71:eb:77:8b:f6:
57:f0:31:fd:c7:7c:43:84:d3:ad:bf:7d:bd:5e:1e:
36:09:ba:56:c4:b9:d2:ea:6f:2b:6b:18:77:e9:d6:
0a:a1:90:7b:2e:0d:24:42:aa:0d:d4:37:16:40:ef:
09:1c:27:73:44:1d:43:28:21:66:d9:59:7d:c9:9f:
a1:b4:25:04:55:75:2e:64:d2:95:f1:a8:eb:47:15:
d3:ec:95:64:d8:17:62:e5:67:2b:ed:8d:ef:84:b3:
5e:ed:8b:cb:d1:fb:b8:ed:d1:59:9f:8a:96:b6:22:
2a:0f:26:1e:2e:62:1d:6b:27:2d:28:0e:2d:39:0e:
b3:92:38:34:9a:f0:50:6c:6c:2f:09:8e:89:41:73:
b1:90:77:9c:33:65:34:dc:65:47:81:cb:9e:aa:27:
0c:8d:f8:34:02:ec:49:4d:32:2b:60:de:1c:da:1f:
fe:b3:ac:20:d8:a3:fd:c3:d9:1e:c3:06:d5:9c:e1:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:B0:27:40:30:CC:64:58:63:E5:CD:36:00:7C:28:F5:5D:50:D3
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.184.0/22
43.252.157.0-43.252.159.255
49.128.178.0/24
103.4.52.0-103.4.54.255
103.17.245.0-103.17.247.255
103.31.224.0/22
103.247.121.0/24
103.255.242.0/24
111.68.28.0/24
112.78.38.0/24
119.2.49.0/24
119.2.51.0/24
202.46.148.0/22
IPv6:
2001:df1:e000::/48
Signature Algorithm: sha256WithRSAEncryption
92:43:d0:ce:6c:15:4b:13:95:8d:c7:a5:bb:da:76:8d:44:f5:
de:97:63:42:d1:93:79:18:57:35:48:60:f9:b8:2e:28:55:74:
00:5d:79:94:74:4d:c9:06:a1:a4:4d:54:d0:ad:ab:30:6e:24:
c1:4a:af:02:67:bb:e3:06:07:db:24:69:8f:92:9d:72:2e:c6:
12:d9:42:1b:4a:5f:27:af:53:15:07:c0:cc:cd:17:18:c7:99:
78:4a:53:8f:e2:c6:0f:5d:4b:ec:c1:d8:a0:54:09:0d:c5:7a:
35:fa:e9:a1:25:07:67:bf:38:9c:b1:1e:ca:2b:6a:62:55:56:
78:46:2a:81:9b:50:6e:52:f2:61:41:56:aa:c3:62:1b:a1:f4:
a1:c6:97:b6:cc:d1:03:18:8d:d2:54:e3:83:3f:75:e8:cb:5a:
f1:ba:bf:32:c7:73:1a:d9:9f:fa:1f:ae:52:70:33:20:ae:28:
32:1a:24:e8:2c:4b:54:9b:3b:ae:fe:42:4e:48:94:1d:b8:b7:
ed:c2:45:82:e5:6a:96:80:6f:07:89:fe:62:2b:e3:7d:88:4e:
b4:17:3f:e0:7d:d7:df:8e:d2:d1:bd:ac:b5:86:18:65:62:40:
df:e1:c2:d5:85:bd:f7:d4:b0:69:7a:a6:56:19:f1:bf:52:13:
7a:dd:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:22 2026 by rpki-client