Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS9422.roa
File: AS9422.roa (raw, json)
Hash identifier: +1MidvhgCO6G2FkM5AwpwG8KHAAUqGKazvLrdDRqXek=
Subject key identifier: D0:D1:7B:91:BB:2F:B5:75:F1:EB:A1:16:7C:93:09:FB:4A:ED:7F:3C
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5DDE158CD3F4D3365B561F70EC593A6C3AFEFE0A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9422.roa
Signing time: Sat 02 May 2026 21:36:27 +0000
ROA not before: Sat 02 May 2026 21:31:27 +0000
ROA not after: Sat 01 May 2027 21:36:27 +0000
asID: 9422
IP address blocks: 103.173.128.0/24 maxlen: 24
103.248.217.0/24 maxlen: 24
103.248.218.0/24 maxlen: 24
2407:7c0:100::/40 maxlen: 48
2407:7c0:9422::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:de:15:8c:d3:f4:d3:36:5b:56:1f:70:ec:59:3a:6c:3a:fe:fe:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:31:27 2026 GMT
Not After : May 1 21:36:27 2027 GMT
Subject: CN=D0D17B91BB2FB575F1EBA1167C9309FB4AED7F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:56:03:df:b0:1f:aa:e7:05:a0:99:a8:95:
d5:d0:46:8e:a8:f3:5d:e2:61:5b:f5:f6:de:8a:c8:
2d:ce:02:f0:c2:b4:f3:1c:c5:83:46:13:05:57:8d:
73:97:d7:04:e6:7d:ee:cf:8a:74:62:09:89:a4:fa:
d8:fc:fa:c7:99:7c:87:54:0d:47:36:ce:29:52:95:
65:67:a8:68:93:94:c4:2b:8a:bd:21:7c:0c:b4:ca:
0f:23:86:a9:24:b7:08:3f:f7:1c:64:b9:32:c1:7c:
bc:c7:e1:19:e6:8b:10:c9:3d:c0:6a:a2:25:da:5c:
f7:fa:a1:20:fa:31:6b:d6:eb:fa:47:2e:c3:f7:9c:
1d:cf:87:34:29:04:19:b9:24:c5:e5:ec:34:28:b3:
5c:87:3b:ad:ea:9a:96:fb:49:d6:78:87:fd:72:96:
ff:28:73:41:d0:5e:95:46:4d:77:ea:76:c4:35:a6:
46:e3:33:2b:96:b4:77:61:d0:f1:20:92:f7:e5:b8:
64:78:7a:0c:ad:ce:27:83:5f:15:02:02:56:75:1b:
3d:98:be:f8:a3:6b:3c:cb:d8:39:35:c3:7f:d9:ce:
d8:ea:a6:40:e3:ee:0a:93:34:d4:cf:6a:fc:95:4c:
cd:45:ce:f5:0a:36:be:ba:d1:f2:9b:40:0d:71:8c:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:7B:91:BB:2F:B5:75:F1:EB:A1:16:7C:93:09:FB:4A:ED:7F:3C
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9422.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.128.0/24
103.248.217.0-103.248.218.255
IPv6:
2407:7c0:100::/40
2407:7c0:9422::/48
Signature Algorithm: sha256WithRSAEncryption
68:3a:77:3f:a3:da:88:56:ab:1f:66:0a:13:e1:7a:47:c1:92:
92:ba:e1:09:f8:bc:a7:80:e0:84:a3:20:46:d7:56:6b:ec:65:
7e:d2:a4:c5:31:ba:69:f5:c4:8e:0b:ce:36:1a:48:3e:43:3d:
ee:6d:0f:56:72:17:fb:27:92:dc:be:15:64:b7:32:e9:ad:44:
1d:5f:07:70:4a:39:ed:3c:c3:c3:37:97:16:83:2f:f4:8c:7f:
d2:b8:69:3a:fb:0c:c0:96:b1:d1:e1:57:69:79:28:a5:56:6a:
21:3c:53:fa:9c:30:c7:7e:83:e9:b2:8d:43:0a:45:dc:1c:93:
ba:59:95:f6:cc:f8:91:18:b9:af:53:16:61:6e:03:c7:cd:40:
f8:2b:bd:f2:a4:40:a6:74:d1:88:49:fd:dc:95:e6:31:ec:2f:
25:75:b5:00:bc:2c:77:1f:1e:cf:ce:12:99:b3:38:89:46:c9:
fd:48:68:ac:5f:27:76:c3:11:b0:91:43:e2:62:07:d8:9a:f2:
ae:07:d0:de:7d:81:79:4d:41:ab:33:42:8f:a9:43:03:dd:39:
75:ef:88:46:1b:7d:6b:ee:60:3a:cc:fc:b3:62:48:cb:b5:0e:
ac:e0:8b:86:e3:b3:b9:a8:d0:28:fa:a8:39:c0:c1:0a:89:ca:
ac:0d:4e:03
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUXd4VjNP00zZbVh9w7Fk6bDr+/gowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzEyN1oX
DTI3MDUwMTIxMzYyN1owMzExMC8GA1UEAxMoRDBEMTdCOTFCQjJGQjU3NUYxRUJB
MTE2N0M5MzA5RkI0QUVEN0YzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXsVgPfsB+q5wWgmaiV1dBGjqjzXeJhW/X23orILc4C8MK08xzFg0YTBVeN
c5fXBOZ97s+KdGIJiaT62Pz6x5l8h1QNRzbOKVKVZWeoaJOUxCuKvSF8DLTKDyOG
qSS3CD/3HGS5MsF8vMfhGeaLEMk9wGqiJdpc9/qhIPoxa9br+kcuw/ecHc+HNCkE
GbkkxeXsNCizXIc7reqalvtJ1niH/XKW/yhzQdBelUZNd+p2xDWmRuMzK5a0d2HQ
8SCS9+W4ZHh6DK3OJ4NfFQICVnUbPZi++KNrPMvYOTXDf9nO2OqmQOPuCpM01M9q
/JVMzUXO9Qo2vrrR8ptADXGMjP0CAwEAAaOCAfEwggHtMB0GA1UdDgQWBBTQ0XuR
uy+1dfHroRZ8kwn7Su1/PDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBQBggrBgEFBQcBCwREMEIwQAYIKwYBBQUHMAuGNHJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTOTQyMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwGgQCAAEw
FAMEAGetgDAMAwQAZ/jZAwQAZ/jaMBcEAgACMBEDBgAkBwfAAQMHACQHB8CUIjAN
BgkqhkiG9w0BAQsFAAOCAQEAaDp3P6PaiFarH2YKE+F6R8GSkrrhCfi8p4DghKMg
RtdWa+xlftKkxTG6afXEjgvONhpIPkM97m0PVnIX+yeS3L4VZLcy6a1EHV8HcEo5
7TzDwzeXFoMv9Ix/0rhpOvsMwJax0eFXaXkopVZqITxT+pwwx36D6bKNQwpF3ByT
ulmV9sz4kRi5r1MWYW4Dx81A+Cu98qRApnTRiEn93JXmMewvJXW1ALwsdx8ez84S
mbM4iUbJ/UhorF8ndsMRsJFD4mIH2JryrgfQ3n2BeU1BqzNCj6lDA905de+IRht9
a+5gOsz8s2JIy7UOrOCLhuOzuajQKPqoOcDBConKrA1OAw==
-----END CERTIFICATE-----
Generated at Sun May 3 00:40:22 2026 by rpki-client