Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS9326.roa
File: AS9326.roa (raw, json)
Hash identifier: Mx4FDmUEtooqrXYh7NQjDhAShUyngda1K7FpjaV1AGU=
Subject key identifier: 94:84:03:DC:D0:A8:22:A1:BA:97:C0:6E:E7:00:D0:F9:B1:1C:17:79
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3668FED93D6E27FC261E80216EE087EE0933D43D
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9326.roa
Signing time: Sat 02 May 2026 21:36:03 +0000
ROA not before: Sat 02 May 2026 21:31:03 +0000
ROA not after: Sat 01 May 2027 21:36:03 +0000
asID: 9326
IP address blocks: 113.11.128.0/19 maxlen: 24
124.153.0.0/18 maxlen: 24
202.57.0.0/20 maxlen: 24
202.146.224.0/19 maxlen: 24
203.166.192.0/20 maxlen: 24
2402:4100::/32 maxlen: 48
2406:b200::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:68:fe:d9:3d:6e:27:fc:26:1e:80:21:6e:e0:87:ee:09:33:d4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:31:03 2026 GMT
Not After : May 1 21:36:03 2027 GMT
Subject: CN=948403DCD0A822A1BA97C06EE700D0F9B11C1779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:c3:6e:2d:95:2d:f9:4d:91:ff:da:6a:68:
49:ac:05:96:d6:48:5b:ae:ce:4c:cb:fc:87:9e:89:
9a:df:a7:88:ce:25:0e:ed:81:ad:d2:40:aa:35:ce:
0b:26:6a:e0:c5:4a:af:ae:fc:79:5c:b6:d4:7d:41:
38:2e:fa:23:6a:bc:36:0b:fe:3b:72:59:46:fa:6f:
eb:82:bf:56:4b:2e:6c:31:04:e0:3f:6c:91:2b:0a:
bd:17:f5:75:b2:54:73:57:98:5a:b0:b9:2e:8f:65:
b4:93:85:d9:c0:00:39:dd:89:08:86:7f:96:e4:4f:
09:a2:94:b7:4b:6c:e7:66:f7:42:f7:d8:30:d1:10:
56:ee:df:39:46:b1:87:d4:bf:9e:1b:2e:89:d0:b1:
61:7c:78:0f:4b:a0:8d:b2:fa:d0:4a:62:e5:33:5c:
43:ed:1b:0f:ae:0a:e5:21:ea:34:aa:40:d4:b5:7b:
28:de:1f:41:6e:0a:c7:91:36:ed:d6:62:29:0f:64:
56:9b:9a:07:78:b7:f2:fe:c8:79:e9:f8:a2:2f:83:
3a:de:cc:4f:d9:cd:3f:d9:c4:84:18:66:80:aa:37:
e6:fa:c7:73:07:b9:0f:19:8e:fd:94:08:46:27:89:
0c:65:e5:69:9a:35:51:20:1d:3c:a0:52:87:d2:58:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:84:03:DC:D0:A8:22:A1:BA:97:C0:6E:E7:00:D0:F9:B1:1C:17:79
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.11.128.0/19
124.153.0.0/18
202.57.0.0/20
202.146.224.0/19
203.166.192.0/20
IPv6:
2402:4100::/32
2406:b200::/32
Signature Algorithm: sha256WithRSAEncryption
02:44:2e:94:b3:ab:75:43:46:a1:e7:78:ab:a7:6e:6b:18:41:
f4:aa:5c:00:28:09:41:35:4a:25:e8:c0:50:bd:59:29:43:fa:
54:9e:2c:d4:7a:d4:13:82:36:a6:28:0b:e6:f1:55:ff:8b:8c:
2b:37:40:81:4b:d2:c2:01:a7:ae:77:9f:0f:21:6f:8e:19:ad:
4f:9d:ee:29:24:ea:bc:29:b5:55:32:a6:69:51:5b:cf:9a:e5:
38:1c:26:9a:c9:05:a5:23:34:24:79:8a:71:96:b6:61:0e:d8:
4c:82:b8:2b:f7:97:68:64:e0:1f:9e:7b:38:fe:90:ce:d1:6c:
7d:16:68:c2:db:ec:91:a6:eb:53:83:f7:f5:f5:f3:f9:f5:39:
5a:f5:6c:01:e9:d5:f7:28:12:21:89:d7:e8:cf:59:cf:b9:c9:
18:26:7f:5c:9d:d2:70:f1:19:d0:81:36:aa:15:04:a6:95:91:
2e:e9:50:98:3c:f2:a2:06:31:55:b5:50:bd:b2:16:4d:09:f0:
5b:fb:d0:3d:e9:29:d6:fe:89:70:5c:bf:fb:7e:dd:fe:52:3a:
41:d5:55:b2:a6:31:4d:2f:8b:b8:31:07:b5:29:d5:5f:e2:65:
bc:e2:76:f7:aa:98:4b:c7:f2:bc:5a:6d:11:ca:7c:cc:88:91:
d0:bc:b2:e0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUNmj+2T1uJ/wmHoAhbuCH7gkz1D0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzEwM1oX
DTI3MDUwMTIxMzYwM1owMzExMC8GA1UEAxMoOTQ4NDAzRENEMEE4MjJBMUJBOTdD
MDZFRTcwMEQwRjlCMTFDMTc3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANBlw24tlS35TZH/2mpoSawFltZIW67OTMv8h56Jmt+niM4lDu2BrdJAqjXO
CyZq4MVKr678eVy21H1BOC76I2q8Ngv+O3JZRvpv64K/VksubDEE4D9skSsKvRf1
dbJUc1eYWrC5Lo9ltJOF2cAAOd2JCIZ/luRPCaKUt0ts52b3QvfYMNEQVu7fOUax
h9S/nhsuidCxYXx4D0ugjbL60Epi5TNcQ+0bD64K5SHqNKpA1LV7KN4fQW4Kx5E2
7dZiKQ9kVpuaB3i38v7Ieen4oi+DOt7MT9nNP9nEhBhmgKo35vrHcwe5DxmO/ZQI
RieJDGXlaZo1USAdPKBSh9JY/0MCAwEAAaOCAfgwggH0MB0GA1UdDgQWBBSUhAPc
0KgiobqXwG7nAND5sRwXeTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBQBggrBgEFBQcBCwREMEIwQAYIKwYBBQUHMAuGNHJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTOTMyNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjBNBggrBgEFBQcBBwEB/wQ+MDwwJAQCAAEw
HgMEBXELgAMEBnyZAAMEBMo5AAMEBcqS4AMEBMumwDAUBAIAAjAOAwUAJAJBAAMF
ACQGsgAwDQYJKoZIhvcNAQELBQADggEBAAJELpSzq3VDRqHneKunbmsYQfSqXAAo
CUE1SiXowFC9WSlD+lSeLNR61BOCNqYoC+bxVf+LjCs3QIFL0sIBp653nw8hb44Z
rU+d7ikk6rwptVUypmlRW8+a5TgcJprJBaUjNCR5inGWtmEO2EyCuCv3l2hk4B+e
ezj+kM7RbH0WaMLb7JGm61OD9/X18/n1OVr1bAHp1fcoEiGJ1+jPWc+5yRgmf1yd
0nDxGdCBNqoVBKaVkS7pUJg88qIGMVW1UL2yFk0J8Fv70D3pKdb+iXBcv/t+3f5S
OkHVVbKmMU0vi7gxB7Up1V/iZbzidveqmEvH8rxabRHKfMyIkdC8suA=
-----END CERTIFICATE-----
Generated at Sun May 3 00:40:25 2026 by rpki-client