Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55699.roa
File: AS55699.roa (raw, json)
Hash identifier: /6dfJBT2eHfqIXyBUDFhX2nGNft1aGWjH5LtMQtB6wA=
Subject key identifier: 4D:21:BA:45:BE:C6:82:88:AF:0A:A4:FC:DB:42:DC:29:5F:3A:AE:D0
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 43ED58C80073B716CFF064CF4976588A84BD79A1
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55699.roa
Signing time: Sat 02 May 2026 21:21:43 +0000
ROA not before: Sat 02 May 2026 21:16:43 +0000
ROA not after: Sat 01 May 2027 21:21:43 +0000
asID: 55699
IP address blocks: 45.127.204.0/22 maxlen: 24
103.14.16.0/22 maxlen: 24
103.57.36.0/22 maxlen: 24
103.73.60.0/22 maxlen: 24
103.77.48.0/22 maxlen: 24
103.78.216.0/22 maxlen: 24
103.81.220.0/22 maxlen: 24
103.84.140.0/22 maxlen: 24
103.84.144.0/22 maxlen: 24
103.84.228.0/22 maxlen: 24
103.85.120.0/22 maxlen: 24
103.100.128.0/22 maxlen: 24
103.100.132.0/22 maxlen: 24
103.139.10.0/23 maxlen: 24
103.139.30.0/23 maxlen: 24
103.139.32.0/23 maxlen: 24
103.139.36.0/23 maxlen: 24
103.147.8.0/23 maxlen: 24
103.247.196.0/23 maxlen: 24
192.144.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ed:58:c8:00:73:b7:16:cf:f0:64:cf:49:76:58:8a:84:bd:79:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:16:43 2026 GMT
Not After : May 1 21:21:43 2027 GMT
Subject: CN=4D21BA45BEC68288AF0AA4FCDB42DC295F3AAED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:74:34:7c:45:26:40:6f:a4:dc:65:54:37:
7b:f8:7f:22:c4:a1:e5:05:f7:ad:5f:a4:d4:5c:53:
7e:b4:14:64:5a:f8:96:f4:2a:7b:4b:60:9e:2c:ba:
c2:96:ef:87:aa:97:42:55:a2:a2:22:69:c0:b6:fa:
f8:64:6d:d5:e0:5b:cc:42:5c:bc:06:47:9f:78:0d:
8f:f4:a6:cf:8f:cf:55:25:9f:8b:f0:15:5d:36:c6:
2e:b8:77:c3:27:5a:72:ca:27:93:95:ce:96:b5:89:
39:e5:a1:77:89:07:b4:71:82:aa:f8:8e:f8:e4:39:
95:1d:e9:93:3a:3f:a7:e1:7b:5d:fe:9a:19:a7:be:
1d:4f:24:b9:a7:2d:34:3a:ba:8b:49:d7:a0:75:16:
38:ef:3c:b6:ec:f8:6a:6c:1b:2a:b4:fd:df:9d:30:
d1:bf:0c:20:96:6e:3c:77:b3:53:59:4b:c6:53:ac:
62:a2:e9:03:92:7f:08:b2:92:95:7c:23:a7:c2:2e:
14:e5:29:b8:f3:ab:7c:93:f9:21:32:0f:08:d6:37:
3c:29:b1:30:59:af:78:12:ea:11:de:e3:3f:a8:61:
44:8a:91:c2:44:05:ec:de:45:6e:83:3d:c7:59:b2:
c1:0a:b4:45:e8:ad:1a:0b:9f:85:b6:ea:92:73:af:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:BA:45:BE:C6:82:88:AF:0A:A4:FC:DB:42:DC:29:5F:3A:AE:D0
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55699.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.204.0/22
103.14.16.0/22
103.57.36.0/22
103.73.60.0/22
103.77.48.0/22
103.78.216.0/22
103.81.220.0/22
103.84.140.0-103.84.147.255
103.84.228.0/22
103.85.120.0/22
103.100.128.0/21
103.139.10.0/23
103.139.30.0-103.139.33.255
103.139.36.0/23
103.147.8.0/23
103.247.196.0/23
192.144.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:2d:c4:b8:c3:7a:af:91:3a:a7:ec:5d:8e:80:ac:cf:cb:86:
b7:e8:11:00:7e:ad:da:d0:29:e0:be:98:e2:43:20:cb:9f:c1:
ea:4c:74:38:99:af:3c:0e:4a:6b:73:f6:35:2f:1f:6c:c0:f7:
a3:46:f8:75:ed:e5:d3:35:ab:e3:b3:8a:f2:40:60:0d:d9:f3:
b0:98:1e:39:c3:ab:76:fb:bf:16:22:29:84:10:9a:59:d5:e6:
a4:f6:95:68:f5:d4:00:a9:e9:17:f4:70:63:04:78:15:42:fc:
a6:39:11:bb:a8:7d:3b:fc:75:b5:5a:46:63:a5:14:99:4b:9f:
1e:92:ff:94:bb:fb:08:a8:80:d3:29:5a:fc:80:a5:a1:76:ed:
9c:e3:01:c8:61:6b:3d:45:0d:9e:09:44:a4:1a:a4:8b:fa:75:
cc:c5:3f:c3:99:0d:26:44:90:28:d0:f5:4e:99:7c:4b:08:33:
be:d2:56:91:c2:8f:41:fc:c8:cc:8a:1c:a2:24:aa:61:8f:a5:
fd:50:46:2a:35:a3:9f:82:c0:0c:6f:d7:e4:e2:90:c0:8e:39:
a8:e9:94:68:47:83:a5:b0:32:22:21:4d:88:d6:da:09:a5:a7:
a8:8c:c9:b2:06:5b:91:8b:a1:58:9b:36:29:e2:3b:d6:1b:0e:
8f:a4:2b:b5
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUQ+1YyABztxbP8GTPSXZYioS9eaEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTY0M1oX
DTI3MDUwMTIxMjE0M1owMzExMC8GA1UEAxMoNEQyMUJBNDVCRUM2ODI4OEFGMEFB
NEZDREI0MkRDMjk1RjNBQUVEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKIxdDR8RSZAb6TcZVQ3e/h/IsSh5QX3rV+k1FxTfrQUZFr4lvQqe0tgniy6
wpbvh6qXQlWioiJpwLb6+GRt1eBbzEJcvAZHn3gNj/Smz4/PVSWfi/AVXTbGLrh3
wydacsonk5XOlrWJOeWhd4kHtHGCqviO+OQ5lR3pkzo/p+F7Xf6aGae+HU8kuact
NDq6i0nXoHUWOO88tuz4amwbKrT9350w0b8MIJZuPHezU1lLxlOsYqLpA5J/CLKS
lXwjp8IuFOUpuPOrfJP5ITIPCNY3PCmxMFmveBLqEd7jP6hhRIqRwkQF7N5FboM9
x1mywQq0ReitGgufhbbqknOvZLkCAwEAAaOCAj0wggI5MB0GA1UdDgQWBBRNIbpF
vsaCiK8KpPzbQtwpXzqu0DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTU2OTkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZAGCCsGAQUFBwEHAQH/BIGAMH4wfAQC
AAEwdgMEAi1/zAMEAmcOEAMEAmc5JAMEAmdJPAMEAmdNMAMEAmdO2AMEAmdR3DAM
AwQCZ1SMAwQCZ1SQAwQCZ1TkAwQCZ1V4AwQDZ2SAAwQBZ4sKMAwDBAFnix4DBAFn
iyADBAFniyQDBAFnkwgDBAFn98QDBALAkFwwDQYJKoZIhvcNAQELBQADggEBAEst
xLjDeq+ROqfsXY6ArM/LhrfoEQB+rdrQKeC+mOJDIMufwepMdDiZrzwOSmtz9jUv
H2zA96NG+HXt5dM1q+OzivJAYA3Z87CYHjnDq3b7vxYiKYQQmlnV5qT2lWj11ACp
6Rf0cGMEeBVC/KY5EbuofTv8dbVaRmOlFJlLnx6S/5S7+wiogNMpWvyApaF27Zzj
Achhaz1FDZ4JRKQapIv6dczFP8OZDSZEkCjQ9U6ZfEsIM77SVpHCj0H8yMyKHKIk
qmGPpf1QRio1o5+CwAxv1+TikMCOOajplGhHg6WwMiIhTYjW2gmlp6iMybIGW5GL
oVibNiniO9YbDo+kK7U=
-----END CERTIFICATE-----
Generated at Sun May 3 00:40:27 2026 by rpki-client