Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55685.roa
File: AS55685.roa (raw, json)
Hash identifier: THI0sPxX8S3N3GYpZFv30F1x94/8aVnvIDNDyxSG178=
Subject key identifier: 93:71:F5:BB:85:33:53:79:49:15:42:B5:2F:40:32:19:24:1D:0A:85
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 1E767A2B469FD7920E8DA875FFD3386AD72AAD5E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55685.roa
Signing time: Sat 02 May 2026 21:28:30 +0000
ROA not before: Sat 02 May 2026 21:23:30 +0000
ROA not after: Sat 01 May 2027 21:28:30 +0000
asID: 55685
IP address blocks: 103.247.40.0/24 maxlen: 24
103.247.41.0/24 maxlen: 24
103.247.42.0/24 maxlen: 24
103.247.43.0/24 maxlen: 24
202.51.192.0/21 maxlen: 24
202.51.192.0/22 maxlen: 24
202.51.196.0/23 maxlen: 24
202.51.200.0/24 maxlen: 24
202.51.201.0/24 maxlen: 24
202.51.202.0/24 maxlen: 24
202.51.203.0/24 maxlen: 24
202.51.204.0/22 maxlen: 24
202.51.208.0/24 maxlen: 24
202.51.209.0/24 maxlen: 24
202.51.210.0/23 maxlen: 24
202.51.212.0/24 maxlen: 24
202.51.213.0/24 maxlen: 24
202.51.215.0/24 maxlen: 24
202.51.216.0/24 maxlen: 24
202.51.217.0/24 maxlen: 24
202.51.220.0/24 maxlen: 24
202.51.221.0/24 maxlen: 24
202.145.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:76:7a:2b:46:9f:d7:92:0e:8d:a8:75:ff:d3:38:6a:d7:2a:ad:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:23:30 2026 GMT
Not After : May 1 21:28:30 2027 GMT
Subject: CN=9371F5BB85335379491542B52F403219241D0A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:29:b2:ab:9f:cd:83:aa:e9:6c:95:75:39:
ee:67:28:d1:c5:0e:eb:2d:5f:71:bf:1c:0f:2f:fb:
94:67:27:df:4c:dd:a9:5e:37:e9:a0:3f:79:eb:8c:
56:4d:1e:55:88:76:10:10:9d:03:42:da:8b:d9:69:
cb:89:98:09:f9:d3:e9:cd:80:94:ff:31:5b:d5:d0:
dc:cd:e0:a5:86:fe:7b:81:12:0e:7d:69:fd:36:34:
6c:ae:bd:88:a6:65:7f:32:7a:a6:32:93:fa:04:09:
55:01:78:dd:d6:b2:68:19:d7:f4:04:9b:1d:85:ed:
e9:68:f1:a1:2d:6c:35:97:62:aa:39:dc:99:10:73:
01:a7:bb:f8:cc:68:54:6b:66:5b:b8:23:ca:91:8a:
82:5c:fe:95:29:86:94:f1:4d:8a:97:4b:3e:03:ea:
c4:6c:1a:a9:3d:5d:cc:06:2a:04:1e:9f:be:13:0a:
27:6e:9e:d5:7f:ef:e1:93:95:bf:bf:7a:7f:08:84:
6f:70:51:7d:10:0c:f3:2b:bd:92:79:eb:e5:97:fa:
11:8d:73:b8:87:45:29:0d:06:9c:b6:b3:c6:3b:57:
28:fb:b7:e2:3d:97:8c:a1:2d:de:dd:41:cb:43:41:
0d:d8:27:bb:4b:a4:e7:0e:6f:c9:2e:a0:99:b7:23:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:F5:BB:85:33:53:79:49:15:42:B5:2F:40:32:19:24:1D:0A:85
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.40.0/22
202.51.192.0-202.51.213.255
202.51.215.0-202.51.217.255
202.51.220.0/23
202.145.4.0/23
Signature Algorithm: sha256WithRSAEncryption
45:45:2d:72:53:ea:81:4c:ac:a3:46:7c:97:78:0b:aa:a1:ba:
02:17:3a:30:77:35:51:21:b1:1d:ae:98:6f:e7:37:b4:31:f4:
05:fa:15:08:45:e0:31:b9:a3:86:e1:31:e6:48:18:fe:ca:aa:
57:0e:f3:23:80:89:52:22:03:57:c5:33:9b:28:41:e1:62:44:
87:c9:74:55:7b:20:4b:58:be:b1:5c:63:2c:95:2e:c4:61:47:
d1:2b:8a:0b:e1:8e:e8:2c:46:0f:90:9f:46:8e:a1:e3:d3:95:
39:d5:7f:fd:e6:fb:71:82:44:60:4a:20:85:8b:d2:20:33:0c:
db:60:00:f8:4d:50:76:b7:8f:e1:22:33:5b:7c:48:60:7b:6b:
29:56:27:1e:64:dc:71:56:40:1b:e3:aa:7c:ba:59:a7:c6:00:
e7:7d:7b:bb:16:df:da:48:5f:0b:18:62:11:91:ba:b8:1b:47:
19:76:46:88:bf:35:c4:b0:01:2d:fa:c8:ba:63:c1:de:7b:86:
0d:94:2f:8c:70:6c:cb:ec:3c:c8:bc:62:0f:b3:c1:c0:40:6a:
53:fd:4f:33:8b:71:40:e8:cd:b3:c0:eb:ec:85:23:31:7b:ad:
08:13:c1:c3:7c:a2:1e:7f:6c:56:98:1d:f6:49:52:18:d6:65:
d9:48:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:39:47 2026 by rpki-client