Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58821.roa
File: AS58821.roa (raw, json)
Hash identifier: gNN/p/JLsWXpH8F9fKIjoDhWmR6ugJclIPlDreLKVuY=
Subject key identifier: DA:48:92:35:B1:9B:B2:44:24:05:8E:00:F0:30:DA:C3:1F:41:EB:B5
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3598D77F57D28B756FD53A7BD7BA0BE92460F533
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58821.roa
Signing time: Mon 31 Aug 2026 03:14:39 +0000
ROA not before: Mon 31 Aug 2026 03:09:39 +0000
ROA not after: Mon 30 Aug 2027 03:14:39 +0000
asID: 58821
IP address blocks: 103.156.248.0/23 maxlen: 24
103.172.35.0/24 maxlen: 24
103.188.168.0/24 maxlen: 24
2001:df5:9f80::/48 maxlen: 48
2001:df5:b8c0::/48 maxlen: 48
2406:9140::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 11:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:98:d7:7f:57:d2:8b:75:6f:d5:3a:7b:d7:ba:0b:e9:24:60:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Aug 31 03:09:39 2026 GMT
Not After : Aug 30 03:14:39 2027 GMT
Subject: CN=DA489235B19BB24424058E00F030DAC31F41EBB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:24:c4:be:40:dd:46:49:61:57:17:ad:21:
81:dc:48:82:f8:81:ce:e1:18:a5:2b:62:37:44:77:
84:9a:69:24:29:7a:61:69:24:05:be:03:03:8a:4b:
01:17:00:19:2d:21:06:f9:c0:b7:b2:26:09:2d:39:
cb:b0:72:45:bc:e0:52:22:8c:56:72:59:02:9f:b8:
88:7e:14:fa:e6:8a:eb:b7:ec:cf:36:66:0d:e6:1a:
c7:09:da:30:39:79:41:9d:e4:eb:42:9d:d0:bf:40:
a5:4c:11:16:d7:c9:a8:2a:cc:b8:37:16:4e:52:64:
33:2a:63:a8:ee:66:13:9c:80:63:d9:9d:be:67:dd:
2c:54:6e:1a:68:10:25:72:fe:6f:47:b0:4b:47:ba:
8e:c0:1e:02:6f:a3:fe:ab:de:30:4b:a8:7d:65:4a:
d1:7b:87:67:0b:a9:85:12:c1:74:e8:a5:69:a1:b6:
b9:77:63:9a:85:51:29:14:59:b1:0a:ae:1b:0b:cc:
28:80:55:94:e1:c7:cb:cc:4d:0e:08:03:f7:fd:77:
89:4c:55:67:18:94:7f:b1:fe:9c:1d:68:40:fe:8f:
e6:91:cc:8e:0c:fa:ee:71:5e:86:0f:e0:f0:2d:c6:
04:42:d6:bf:c7:7b:7d:0c:3e:4b:e2:17:5b:99:5e:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:92:35:B1:9B:B2:44:24:05:8E:00:F0:30:DA:C3:1F:41:EB:B5
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58821.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.248.0/23
103.172.35.0/24
103.188.168.0/24
IPv6:
2001:df5:9f80::/48
2001:df5:b8c0::/48
2406:9140::/32
Signature Algorithm: sha256WithRSAEncryption
6d:dd:6a:f4:3d:8f:11:83:7b:45:66:ef:0a:c3:84:a0:01:44:
88:fb:72:be:97:51:e1:12:9e:44:eb:9b:08:47:a2:fa:ff:56:
65:03:ae:22:f3:7a:ad:f2:60:14:d7:c2:9b:34:61:b3:2e:2e:
c7:83:47:65:d2:a8:31:58:48:a4:da:f6:3f:bd:cd:c0:68:95:
22:de:34:72:6e:3f:33:00:db:30:41:3c:ae:a8:35:7d:cd:36:
99:f5:77:7f:83:50:19:c5:a4:79:de:70:1c:4f:5f:bb:ba:89:
70:02:8f:9b:7f:1e:9e:85:c6:d2:e0:ce:2b:fe:82:af:4c:13:
1b:0a:4c:b6:0a:4b:17:40:04:75:0f:b1:17:ca:e0:16:dc:9e:
d0:56:94:ec:ae:ac:a1:76:7e:d4:bf:fe:ac:93:06:e9:8b:37:
2c:f1:2d:b6:14:c6:df:56:ef:f4:5d:7a:7b:42:8a:fc:59:df:
07:09:d1:75:ba:ec:70:e8:64:01:1f:74:3d:4f:44:d7:7b:91:
5e:74:0f:8c:18:dc:24:2b:98:e1:71:72:af:55:7b:17:b7:8f:
a5:4b:c3:36:71:62:a0:a8:ad:89:e0:f5:58:d8:d9:47:46:ee:
27:1c:c7:07:42:fe:26:06:71:2a:63:cf:47:4e:7a:fa:ba:e3:
96:05:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:44:43 2026 by rpki-client