Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63515.roa
File: AS63515.roa (raw, json)
Hash identifier: zCK/LYj8NZn29bm0iK46B/8SoaRYfXE2QzLCaKe8EOk=
Subject key identifier: 9E:49:F5:16:A5:80:FF:B3:41:72:7F:0F:82:04:39:AA:36:BB:FD:69
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 7854B0B61055C1B07E1BA0C4072803A604FB5FE2
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63515.roa
Signing time: Sat 02 May 2026 21:35:35 +0000
ROA not before: Sat 02 May 2026 21:30:35 +0000
ROA not after: Sat 01 May 2027 21:35:35 +0000
asID: 63515
IP address blocks: 103.10.192.0/23 maxlen: 24
116.193.188.0/24 maxlen: 24
116.193.189.0/24 maxlen: 24
2404:ef00::/32 maxlen: 48
2406:6cc0::/32 maxlen: 48
2406:6cc0:a300::/48 maxlen: 48
2406:6cc0:a400::/48 maxlen: 48
2406:6cc0:a600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:54:b0:b6:10:55:c1:b0:7e:1b:a0:c4:07:28:03:a6:04:fb:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:30:35 2026 GMT
Not After : May 1 21:35:35 2027 GMT
Subject: CN=9E49F516A580FFB341727F0F820439AA36BBFD69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:59:46:a9:07:30:34:a4:bd:49:d7:b8:2f:
80:7a:6e:d7:da:80:20:a7:8f:be:31:19:d0:a6:fe:
67:1e:44:81:b8:a0:a2:5e:8e:fe:dd:65:64:54:7c:
d1:fe:9b:31:7b:cd:69:6e:50:80:20:d2:6b:42:ff:
aa:b5:cc:ad:bd:b3:a6:d5:fe:74:d3:47:d9:58:01:
de:ea:e6:8b:32:74:9f:30:a9:3a:99:67:10:0a:c7:
a5:c6:47:88:cc:a1:32:01:e3:ec:40:da:db:e3:42:
25:33:be:a7:56:35:17:e5:3f:b0:7c:6c:0f:4f:ae:
ce:e5:2d:0f:8c:2c:5b:23:41:d3:a7:e4:1c:cf:f3:
86:40:c9:70:bd:2c:05:99:c4:60:73:d4:97:85:9b:
bf:66:f8:56:01:51:d3:99:20:2b:b4:96:38:73:cc:
60:36:e6:2a:07:40:42:2c:e4:9a:6d:4b:8a:34:cd:
c8:4d:a6:7e:ad:a8:b2:33:4b:18:e9:4c:6a:d3:e5:
35:a3:8d:b5:0a:51:e9:f0:fc:6e:5c:3a:8c:56:ce:
a0:d6:f2:37:f7:83:3d:eb:f5:49:46:93:a7:ce:92:
9d:13:63:ed:db:2a:f1:39:b2:4b:26:ac:c8:3b:25:
71:98:b8:e9:51:07:d3:dc:26:65:84:52:9a:13:5e:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:F5:16:A5:80:FF:B3:41:72:7F:0F:82:04:39:AA:36:BB:FD:69
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.192.0/23
116.193.188.0/23
IPv6:
2404:ef00::/32
2406:6cc0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:7e:33:ed:1d:79:e9:9e:a4:9a:37:92:1b:47:7a:ea:ed:c9:
d4:dc:d7:a5:fa:07:f7:42:3b:59:b3:cd:95:e9:71:d3:f0:93:
bc:65:6c:55:c4:03:98:37:48:90:85:18:c1:20:35:3d:90:1f:
cc:43:77:aa:eb:5a:42:80:53:b5:bf:84:c9:37:9f:69:08:a9:
d7:08:84:25:c1:f0:a2:d2:8a:e5:94:f2:25:0f:12:24:98:57:
6e:bd:71:b1:c9:90:cc:15:48:92:81:02:61:08:93:1b:f0:81:
f5:8d:25:4a:3a:d4:73:d9:8a:da:77:0b:03:74:c3:31:d8:90:
c5:4e:28:84:58:28:06:c1:b2:fe:4f:a5:2e:43:00:6f:52:cf:
73:44:6f:f3:37:79:ab:e6:8b:0d:f4:4d:83:b6:ca:c7:50:b5:
e4:9a:af:df:cc:5d:fc:fd:5d:e0:7a:2f:21:bc:30:35:74:fc:
54:5d:f3:18:f5:d6:e5:6e:99:93:5f:0c:97:4f:a3:61:ed:d7:
52:61:b6:55:b7:d4:d9:36:31:a4:2f:96:da:d8:a6:f0:df:4e:
a4:c9:1a:e6:68:97:d4:62:ae:1f:2d:d9:60:fa:61:04:9e:a4:
bd:64:a8:d3:d4:c9:96:3b:ea:ea:1a:59:2c:bc:1e:6b:b7:20:
be:48:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:36 2026 by rpki-client