Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
File: AS9341.roa (raw, json)
Hash identifier: b/j1n6LDaFuTRrRRnbFyggKCY789JCz1wjfK+SvVnc8=
Subject key identifier: E0:38:86:70:16:2D:0B:0F:2F:1A:FE:8A:19:BA:94:AE:C4:85:59:3A
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 730E42BDAA9448C6BAFBA0995CC4CDB6DC2CF833
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
Signing time: Sat 02 May 2026 21:30:12 +0000
ROA not before: Sat 02 May 2026 21:25:12 +0000
ROA not after: Sat 01 May 2027 21:30:12 +0000
asID: 9341
IP address blocks: 43.240.80.0/22 maxlen: 24
103.17.172.0/22 maxlen: 24
103.17.172.0/23 maxlen: 24
103.17.174.0/23 maxlen: 24
103.49.188.0/22 maxlen: 24
103.55.220.0/22 maxlen: 24
103.76.168.0/22 maxlen: 24
103.76.172.0/22 maxlen: 24
103.78.72.0/22 maxlen: 24
103.78.140.0/22 maxlen: 24
103.88.196.0/22 maxlen: 24
103.88.200.0/22 maxlen: 24
103.88.204.0/22 maxlen: 24
103.88.208.0/22 maxlen: 24
103.88.244.0/22 maxlen: 24
103.88.248.0/22 maxlen: 24
103.88.252.0/22 maxlen: 24
103.89.32.0/22 maxlen: 24
103.91.14.0/23 maxlen: 24
103.94.0.0/22 maxlen: 24
103.94.124.0/22 maxlen: 24
103.101.22.0/23 maxlen: 24
103.145.150.0/24 maxlen: 24
103.181.244.0/23 maxlen: 24
103.210.230.0/23 maxlen: 24
103.215.178.0/23 maxlen: 24
103.229.164.0/22 maxlen: 24
103.238.138.0/23 maxlen: 24
160.202.40.0/22 maxlen: 24
202.46.64.0/19 maxlen: 24
202.57.18.0/24 maxlen: 24
202.57.28.0/22 maxlen: 24
202.74.43.0/24 maxlen: 24
202.74.72.0/23 maxlen: 24
202.146.48.0/20 maxlen: 24
202.154.176.0/21 maxlen: 24
202.164.216.0/22 maxlen: 24
202.171.236.0/24 maxlen: 24
203.171.216.0/23 maxlen: 24
203.171.216.0/24 maxlen: 24
203.171.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0e:42:bd:aa:94:48:c6:ba:fb:a0:99:5c:c4:cd:b6:dc:2c:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:25:12 2026 GMT
Not After : May 1 21:30:12 2027 GMT
Subject: CN=E0388670162D0B0F2F1AFE8A19BA94AEC485593A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:2c:74:e4:79:71:ae:c1:6a:b8:f4:0d:54:
e4:8f:26:98:d2:84:b1:88:eb:92:7b:7a:8e:a0:b6:
b2:af:7c:9d:56:fc:e6:af:66:3c:86:16:68:77:4a:
43:2d:e3:0a:6a:33:30:19:ac:1e:d6:cf:cb:b8:57:
cd:ed:b9:1a:6b:32:dc:70:4b:99:06:cf:3e:e2:7a:
12:c5:c6:11:71:24:d7:49:30:07:db:b2:1e:8e:2e:
66:fd:61:29:fe:7d:b5:8f:65:f1:c0:96:d8:65:cf:
b5:c6:bb:70:87:14:33:94:cd:e9:7c:9b:fe:a6:38:
74:c5:78:57:18:1b:ed:b5:d7:07:dc:8d:a4:c6:74:
8d:c1:3f:8e:3c:f1:bf:8f:66:b5:7c:39:d7:53:4e:
8c:68:a3:68:46:42:7c:50:91:e6:3b:2e:31:ab:ed:
35:b9:51:87:03:24:fd:e5:10:4e:92:1a:14:94:89:
bf:ad:84:24:d4:ac:49:4a:8b:aa:10:5a:06:93:35:
30:2d:99:61:37:61:48:f6:b7:fc:b7:75:5c:ea:aa:
bd:8d:5b:a8:f7:78:49:59:75:b3:ed:89:c8:2c:70:
9f:d8:f3:de:7f:56:7a:35:71:11:1f:f5:5b:35:d4:
77:1a:17:48:d5:bc:2f:bf:89:98:b9:a7:54:2f:bd:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:38:86:70:16:2D:0B:0F:2F:1A:FE:8A:19:BA:94:AE:C4:85:59:3A
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.80.0/22
103.17.172.0/22
103.49.188.0/22
103.55.220.0/22
103.76.168.0/21
103.78.72.0/22
103.78.140.0/22
103.88.196.0-103.88.211.255
103.88.244.0-103.88.255.255
103.89.32.0/22
103.91.14.0/23
103.94.0.0/22
103.94.124.0/22
103.101.22.0/23
103.145.150.0/24
103.181.244.0/23
103.210.230.0/23
103.215.178.0/23
103.229.164.0/22
103.238.138.0/23
160.202.40.0/22
202.46.64.0/19
202.57.18.0/24
202.57.28.0/22
202.74.43.0/24
202.74.72.0/23
202.146.48.0/20
202.154.176.0/21
202.164.216.0/22
202.171.236.0/24
203.171.216.0/23
Signature Algorithm: sha256WithRSAEncryption
92:a7:a4:f3:df:39:35:b6:6f:95:11:21:23:99:56:60:9e:2d:
28:2b:90:5c:9f:24:20:9e:fe:2c:00:dc:80:a7:58:ea:4c:39:
16:34:fe:5c:68:ca:7a:dc:32:c7:69:8e:f7:e3:11:25:e6:35:
5c:4d:d9:31:83:69:3f:a4:13:9c:17:e2:d0:f5:a3:10:1f:68:
d0:f3:fc:cb:72:09:42:4e:c0:c6:28:e6:65:ed:3d:cf:a1:41:
c3:36:25:6f:42:67:a2:51:36:b2:84:7e:df:28:43:2e:41:dc:
43:f4:7c:0f:1b:31:87:27:c0:3e:74:9a:9e:35:de:1c:50:9a:
78:ea:9b:64:8b:c0:12:7f:af:00:cb:ca:2f:74:41:90:7e:81:
2b:b4:72:c8:03:cc:89:b6:80:50:2f:86:2f:96:c6:a8:28:84:
e0:8f:8b:eb:6b:71:2e:1b:8e:30:e1:5d:f2:d7:28:f8:97:7b:
a7:bd:0c:5c:c6:d1:c9:79:d9:c6:2a:1c:67:a2:16:2a:d6:f3:
4d:6b:71:d0:91:b5:b7:b5:ee:0c:e8:0e:81:cc:f8:91:9a:a2:
22:89:4f:79:6a:85:4c:bf:35:1f:f8:af:55:69:b8:8b:88:6e:
f4:2b:8f:ab:97:70:51:92:f5:22:82:07:6c:fe:a4:20:69:e6:
9d:18:14:17
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUcw5CvaqUSMa6+6CZXMTNttws+DMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjUxMloX
DTI3MDUwMTIxMzAxMlowMzExMC8GA1UEAxMoRTAzODg2NzAxNjJEMEIwRjJGMUFG
RThBMTlCQTk0QUVDNDg1NTkzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOMNLHTkeXGuwWq49A1U5I8mmNKEsYjrknt6jqC2sq98nVb85q9mPIYWaHdK
Qy3jCmozMBmsHtbPy7hXze25Gmsy3HBLmQbPPuJ6EsXGEXEk10kwB9uyHo4uZv1h
Kf59tY9l8cCW2GXPtca7cIcUM5TN6Xyb/qY4dMV4Vxgb7bXXB9yNpMZ0jcE/jjzx
v49mtXw511NOjGijaEZCfFCR5jsuMavtNblRhwMk/eUQTpIaFJSJv62EJNSsSUqL
qhBaBpM1MC2ZYTdhSPa3/Ld1XOqqvY1bqPd4SVl1s+2JyCxwn9jz3n9WejVxER/1
WzXUdxoXSNW8L7+JmLmnVC+9afsCAwEAAaOCApIwggKOMB0GA1UdDgQWBBTgOIZw
Fi0LDy8a/ooZupSuxIVZOjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBQBggrBgEFBQcBCwREMEIwQAYIKwYBBQUHMAuGNHJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTOTM0MS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB5gYIKwYBBQUHAQcBAf8EgdYwgdMwgdAE
AgABMIHJAwQCK/BQAwQCZxGsAwQCZzG8AwQCZzfcAwQDZ0yoAwQCZ05IAwQCZ06M
MAwDBAJnWMQDBAJnWNAwCwMEAmdY9AMDAGdYAwQCZ1kgAwQBZ1sOAwQCZ14AAwQC
Z158AwQBZ2UWAwQAZ5GWAwQBZ7X0AwQBZ9LmAwQBZ9eyAwQCZ+WkAwQBZ+6KAwQC
oMooAwQFyi5AAwQAyjkSAwQCyjkcAwQAykorAwQBykpIAwQEypIwAwQDypqwAwQC
yqTYAwQAyqvsAwQBy6vYMA0GCSqGSIb3DQEBCwUAA4IBAQCSp6Tz3zk1tm+VESEj
mVZgni0oK5BcnyQgnv4sANyAp1jqTDkWNP5caMp63DLHaY734xEl5jVcTdkxg2k/
pBOcF+LQ9aMQH2jQ8/zLcglCTsDGKOZl7T3PoUHDNiVvQmeiUTayhH7fKEMuQdxD
9HwPGzGHJ8A+dJqeNd4cUJp46ptki8ASf68Ay8ovdEGQfoErtHLIA8yJtoBQL4Yv
lsaoKITgj4vra3EuG44w4V3y1yj4l3unvQxcxtHJednGKhxnohYq1vNNa3HQkbW3
te4M6A6BzPiRmqIiiU95aoVMvzUf+K9VabiLiG70K4+rl3BRkvUiggds/qQgaead
GBQX
-----END CERTIFICATE-----
Generated at Sun May 3 01:40:40 2026 by rpki-client