Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa
File: AS64300.roa (raw, json)
Hash identifier: zpaHRfuIhmWSbi815uVDtato5rFs2rIi2vPw4ijx54E=
Subject key identifier: AE:35:45:BC:2D:D1:56:13:FF:CB:FC:4E:36:00:64:95:D3:CC:A3:56
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 02F80A2752D8016C5EB7B89C99193407040DA67C
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa
Signing time: Fri 25 Sep 2026 04:40:36 +0000
ROA not before: Fri 25 Sep 2026 04:35:36 +0000
ROA not after: Fri 24 Sep 2027 04:40:36 +0000
asID: 64300
IP address blocks: 103.13.204.0/23 maxlen: 24
103.18.232.0/23 maxlen: 24
103.46.8.0/23 maxlen: 24
103.67.46.0/23 maxlen: 24
103.80.80.0/22 maxlen: 22
163.61.225.0/24 maxlen: 24
2400:4ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f8:0a:27:52:d8:01:6c:5e:b7:b8:9c:99:19:34:07:04:0d:a6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Sep 25 04:35:36 2026 GMT
Not After : Sep 24 04:40:36 2027 GMT
Subject: CN=AE3545BC2DD15613FFCBFC4E36006495D3CCA356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:23:0e:8d:35:64:e4:56:57:47:29:4e:79:
ab:d6:07:f8:20:87:09:a2:2f:65:b5:fc:18:07:cc:
43:b3:c0:d4:61:bb:03:54:35:01:0c:20:c3:3e:12:
f4:b3:c4:53:49:ea:61:e4:7a:6e:38:c3:ca:b3:1a:
cc:76:05:83:89:e7:03:43:7b:d5:7a:cf:5b:55:a2:
e0:b3:e1:c6:45:71:04:64:aa:d8:b8:73:ef:8c:66:
81:f5:99:f6:0a:95:91:33:c5:f2:e3:60:7e:9e:b3:
45:d8:02:48:27:eb:08:0b:7d:17:76:67:9c:29:e9:
da:fb:0c:c0:d2:e7:8f:ae:cf:c3:19:05:e3:d6:50:
32:75:7e:0d:cd:f4:fe:aa:9a:f5:3c:ab:fa:29:d4:
d0:bf:6f:e9:5d:7d:79:26:7d:09:ee:28:b4:15:75:
d2:df:7d:9c:d0:10:21:3d:35:ba:3a:cd:bc:b8:3b:
17:d7:54:49:77:7c:0a:3e:66:96:8e:8d:ee:fd:3b:
35:3f:66:7c:ca:bc:55:ad:3f:3f:f2:54:09:c6:6a:
10:eb:0a:e2:6c:3c:72:31:60:c4:79:8d:a4:85:89:
19:62:63:33:b2:52:69:e7:6a:17:ac:41:1c:72:d4:
61:2d:8c:ed:5d:d4:23:17:e8:5a:16:e7:63:ac:99:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:45:BC:2D:D1:56:13:FF:CB:FC:4E:36:00:64:95:D3:CC:A3:56
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.204.0/23
103.18.232.0/23
103.46.8.0/23
103.67.46.0/23
103.80.80.0/22
163.61.225.0/24
IPv6:
2400:4ec0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:01:a9:18:7d:36:76:9a:35:83:ec:8d:08:16:1c:9b:36:0f:
5b:2e:06:f8:4e:aa:fc:df:eb:af:43:dc:e9:4e:6a:83:2e:ab:
cf:43:4a:a4:f2:62:8e:85:34:28:1b:3b:ca:e8:c6:fc:b9:9d:
bf:97:ff:bb:68:9e:2f:60:79:fb:0f:1c:4a:6d:a6:cd:75:9c:
93:85:b7:6f:59:3d:27:98:03:9b:20:e7:99:67:d2:ac:16:0b:
dc:64:97:b2:3e:e3:9c:e3:aa:71:f6:d6:b0:f7:24:ef:73:0d:
56:b9:c6:4c:41:21:d5:0e:4a:61:34:3e:ef:ab:b6:eb:ec:52:
35:a3:3a:c9:03:2c:70:05:71:f9:64:21:b8:9e:8e:df:0e:c6:
19:2d:3f:a1:82:6e:6f:ce:7b:29:86:30:32:3c:60:54:d5:20:
23:29:9d:38:ee:24:c2:f4:4c:08:8c:da:8b:f7:c9:8c:e4:59:
e0:ae:5a:18:92:25:31:af:d5:f9:fb:36:b5:7e:b6:78:9c:34:
98:fd:f2:0e:12:73:1e:45:0a:35:79:0e:7d:a8:6a:ba:ef:90:
e3:89:59:10:b9:05:53:6e:29:91:86:5f:97:d5:7e:ff:d1:97:
de:b2:ab:03:fd:3e:72:96:96:11:bc:9a:53:e7:da:a0:23:08:
60:97:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:23:27 2026 by rpki-client