Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
File: AS63859.roa (raw, json)
Hash identifier: Rk4glgZWy2iP3XsoiWIx/9qsBOhjnxx+ZEaqaYgWaAc=
Subject key identifier: 44:45:84:60:E8:FB:0A:46:E7:C2:0D:7B:9E:3B:37:8B:A6:94:78:B7
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5B8A342F52529AEDF8E61F6CE32B1930721F0CC8
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
Signing time: Sat 02 May 2026 21:37:08 +0000
ROA not before: Sat 02 May 2026 21:32:08 +0000
ROA not after: Sat 01 May 2027 21:37:08 +0000
asID: 63859
IP address blocks: 36.50.112.0/23 maxlen: 24
36.50.114.0/23 maxlen: 24
36.50.138.0/23 maxlen: 24
36.50.142.0/23 maxlen: 24
36.50.150.0/23 maxlen: 24
103.119.48.0/22 maxlen: 24
103.119.52.0/22 maxlen: 24
103.119.60.0/22 maxlen: 24
103.119.64.0/22 maxlen: 24
103.120.168.0/22 maxlen: 24
103.120.172.0/22 maxlen: 24
103.121.16.0/22 maxlen: 24
103.121.20.0/22 maxlen: 24
103.125.36.0/22 maxlen: 24
103.125.40.0/22 maxlen: 24
103.125.48.0/22 maxlen: 24
103.125.56.0/22 maxlen: 24
103.129.16.0/23 maxlen: 24
103.129.92.0/22 maxlen: 24
103.129.150.0/23 maxlen: 24
103.129.172.0/23 maxlen: 24
103.129.174.0/23 maxlen: 24
103.130.16.0/23 maxlen: 24
103.130.18.0/23 maxlen: 24
103.130.128.0/22 maxlen: 24
103.130.164.0/22 maxlen: 24
103.156.112.0/23 maxlen: 24
103.156.114.0/23 maxlen: 24
103.156.118.0/23 maxlen: 24
103.156.160.0/23 maxlen: 24
103.156.164.0/23 maxlen: 24
103.156.218.0/23 maxlen: 24
103.157.48.0/23 maxlen: 24
103.157.58.0/23 maxlen: 24
103.157.60.0/23 maxlen: 24
103.171.146.0/23 maxlen: 24
103.171.148.0/23 maxlen: 24
103.171.150.0/23 maxlen: 24
103.171.152.0/23 maxlen: 24
103.171.154.0/23 maxlen: 24
103.171.156.0/23 maxlen: 24
103.171.158.0/23 maxlen: 24
103.171.160.0/23 maxlen: 24
103.171.162.0/23 maxlen: 24
103.171.164.0/23 maxlen: 24
103.175.222.0/23 maxlen: 24
103.175.224.0/23 maxlen: 24
103.175.226.0/23 maxlen: 24
103.175.228.0/23 maxlen: 24
103.175.230.0/23 maxlen: 24
202.59.192.0/20 maxlen: 24
203.83.32.0/20 maxlen: 24
210.87.88.0/23 maxlen: 24
210.87.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:8a:34:2f:52:52:9a:ed:f8:e6:1f:6c:e3:2b:19:30:72:1f:0c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:32:08 2026 GMT
Not After : May 1 21:37:08 2027 GMT
Subject: CN=44458460E8FB0A46E7C20D7B9E3B378BA69478B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:32:d4:ea:9b:10:38:7d:29:ab:8b:36:ea:
e5:cb:2e:07:cd:50:4c:bd:ba:9a:c4:0a:3d:e3:06:
8d:9b:fc:de:b6:fa:ab:23:70:3d:54:b3:08:e3:63:
33:79:f1:16:a1:42:ae:8f:7a:56:9c:6c:bb:2c:57:
04:03:34:49:c7:00:8a:7b:eb:ac:9d:27:10:60:4c:
dd:c3:4e:b0:d6:a3:29:a4:54:71:1a:ca:e3:de:7b:
39:00:fb:6e:77:57:c9:fe:1a:ed:8e:49:77:51:1f:
15:d4:d4:1a:da:13:46:ae:6e:44:ff:74:a9:17:c5:
37:8d:4e:89:90:07:78:9c:2a:16:85:51:2a:85:1a:
59:a2:03:6b:3a:ed:96:29:70:60:a2:37:1d:f4:22:
4f:17:5a:6a:76:51:ed:9e:ba:44:f1:af:d0:05:10:
5a:21:7e:b3:d6:9d:3f:1a:db:72:53:07:e1:3d:a7:
06:d8:ca:16:1c:12:fd:e3:7d:1d:4c:d3:82:9d:6a:
1d:eb:5c:bc:eb:64:a0:11:fe:3c:37:62:cf:7f:3e:
53:f5:72:7f:db:d6:03:9d:7e:b7:5d:55:3b:24:6b:
08:d7:d3:34:39:e5:a4:56:39:84:02:76:76:f1:ae:
d2:14:d0:f7:6a:d6:c6:a2:92:14:a6:59:09:fa:66:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:84:60:E8:FB:0A:46:E7:C2:0D:7B:9E:3B:37:8B:A6:94:78:B7
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.112.0/22
36.50.138.0/23
36.50.142.0/23
36.50.150.0/23
103.119.48.0/21
103.119.60.0-103.119.67.255
103.120.168.0/21
103.121.16.0/21
103.125.36.0-103.125.43.255
103.125.48.0/22
103.125.56.0/22
103.129.16.0/23
103.129.92.0/22
103.129.150.0/23
103.129.172.0/22
103.130.16.0/22
103.130.128.0/22
103.130.164.0/22
103.156.112.0/22
103.156.118.0/23
103.156.160.0/23
103.156.164.0/23
103.156.218.0/23
103.157.48.0/23
103.157.58.0-103.157.61.255
103.171.146.0-103.171.165.255
103.175.222.0-103.175.231.255
202.59.192.0/20
203.83.32.0/20
210.87.88.0/22
Signature Algorithm: sha256WithRSAEncryption
32:63:bf:15:6e:80:32:45:2c:7e:25:a6:7d:87:1a:79:b8:14:
2f:7e:20:00:dd:c8:21:82:e2:bb:5f:e6:1e:9e:1b:e4:bf:d4:
ef:4a:cd:e9:a8:b3:5c:b6:d0:d9:bd:71:ae:81:43:43:c2:a3:
1e:fc:66:21:5c:40:23:a6:96:d5:f6:89:a5:3d:68:a0:19:4e:
e8:e3:8a:11:27:93:1a:92:61:f0:27:05:81:61:3c:19:c9:50:
b6:a4:50:eb:8a:8a:e4:ad:a7:5d:0c:8e:9d:d2:c5:53:71:ec:
49:3c:0e:5c:c4:fe:92:cd:49:9a:af:3f:13:a8:6c:eb:3c:1c:
75:b7:1d:46:d6:ed:4f:af:71:22:b3:bf:04:18:1e:06:ae:3b:
92:de:a2:75:1e:44:a0:23:31:08:21:15:0d:76:07:38:04:36:
be:33:d1:f6:04:3d:09:f7:c1:e1:42:c6:17:d0:92:a2:ce:3e:
00:3a:ee:d1:7a:d4:0f:5e:fb:e1:82:9d:36:20:24:ca:10:15:
d2:78:85:a3:a0:ef:0b:f9:f8:73:80:ef:95:f3:83:37:87:36:
f3:52:6c:2c:38:9b:5f:55:0b:47:0e:63:d7:af:e0:3e:4c:cf:
9b:6d:de:ac:81:d4:c2:ef:54:f7:f0:d5:8a:08:5f:3c:91:e3:
71:97:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:41:46 2026 by rpki-client