Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa
File: AS63490.roa (raw, json)
Hash identifier: 6VxZ1aOoYj10YeIesDZSlki8kWQ5svAUIL3lB+rrF6w=
Subject key identifier: 5D:76:F8:F9:F6:81:06:4A:42:8B:08:D7:05:4D:8C:5B:27:B0:7D:BF
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 06026413880FBF27779D01D3F7524E4EABABCBAD
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa
Signing time: Tue 13 Oct 2026 04:09:18 +0000
ROA not before: Tue 13 Oct 2026 04:04:18 +0000
ROA not after: Tue 12 Oct 2027 04:09:18 +0000
asID: 63490
IP address blocks: 103.93.236.0/24 maxlen: 24
103.93.237.0/24 maxlen: 24
103.235.66.0/24 maxlen: 24
103.235.67.0/24 maxlen: 24
202.46.156.0/22 maxlen: 24
202.57.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:02:64:13:88:0f:bf:27:77:9d:01:d3:f7:52:4e:4e:ab:ab:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 13 04:04:18 2026 GMT
Not After : Oct 12 04:09:18 2027 GMT
Subject: CN=5D76F8F9F681064A428B08D7054D8C5B27B07DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:68:91:07:a9:57:07:9a:d8:2b:ef:5e:38:
a5:55:5d:b4:25:dd:19:a7:32:ac:d8:00:90:c9:6b:
f8:d5:5c:3b:e6:8d:94:ad:fe:2b:67:d3:60:e7:40:
d2:75:49:4c:b8:ce:2e:49:23:28:5b:ce:5f:0c:4c:
60:21:5e:4c:d2:83:e1:b8:bd:b6:d2:8a:e5:e2:ac:
aa:bd:0a:6a:fe:1a:a7:91:01:47:fa:6f:3c:4c:07:
2d:5c:31:1c:bc:56:0a:f7:8f:e4:0f:63:b8:7e:51:
92:40:8d:c3:80:35:6b:9f:e5:0d:fe:3e:7d:87:99:
f4:d7:9a:c6:43:b8:9a:cd:07:86:08:f6:36:cc:38:
6d:6c:90:8f:b3:c8:d6:be:d0:eb:f3:2d:f7:2a:95:
e6:58:f6:d9:e3:9a:75:36:6b:1b:91:17:6e:62:3b:
6c:b5:e1:de:a6:44:a8:98:51:3f:5c:4a:1c:bb:0a:
58:15:aa:f8:1f:b1:26:0d:aa:ef:c1:56:a8:4a:06:
6f:8e:2b:65:31:22:85:5c:ee:52:10:04:65:46:36:
c1:57:50:18:a7:d1:e2:2d:a9:d4:80:6f:aa:73:c8:
95:3a:a6:e7:3a:c4:d1:0f:ee:f1:d0:0b:52:8d:29:
59:ff:5f:7c:ae:94:4f:29:08:b4:a5:b7:30:78:88:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:F8:F9:F6:81:06:4A:42:8B:08:D7:05:4D:8C:5B:27:B0:7D:BF
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.93.236.0/23
103.235.66.0/23
202.46.156.0/22
202.57.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e2:e3:a5:e7:a2:f6:02:94:23:b9:4a:8e:61:98:ca:f2:83:
65:12:09:11:d3:85:a3:cf:9a:93:d3:30:fb:76:a3:5e:32:9e:
f2:7e:8b:37:a2:e3:a9:f4:43:7b:2e:1d:ca:9d:cd:b2:38:8a:
a1:91:d3:94:31:b0:c2:84:fe:63:d2:07:7c:46:e8:07:fc:ca:
5f:17:b1:af:51:f1:e9:a2:5d:38:19:57:ba:e5:b3:aa:3d:fc:
74:78:91:31:be:56:77:b6:5d:dc:a8:4c:86:f6:80:a2:5d:55:
2d:01:6d:73:7a:46:23:16:fa:c4:80:7b:47:1a:12:fd:c9:09:
da:dd:18:4e:6b:92:77:8d:a4:e7:0f:b5:d9:16:b2:5b:f9:f9:
80:14:d3:b1:af:e8:b4:e1:78:fd:69:bb:60:84:63:87:10:92:
49:64:a5:71:63:33:bd:5f:c8:bb:3a:42:88:93:b5:09:0b:ce:
9b:7e:01:ea:d6:03:8f:69:b3:81:2b:8d:4a:54:23:52:b9:92:
56:84:53:8e:20:37:d8:37:ff:54:bc:2f:e2:14:f5:11:8f:44:
a4:47:3c:11:42:75:d9:00:78:09:6d:ee:e8:1e:19:bd:fa:53:
2b:9f:6e:5f:7e:42:d5:aa:4f:76:3e:05:aa:00:37:5d:05:a9:
44:a6:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:50:17 2026 by rpki-client