Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
File: AS131111.roa (raw, json)
Hash identifier: cjAcFFh1s9n9/UCd75KVn/CmiDVN1ATc1+eLvlbqk6A=
Subject key identifier: 3F:97:0B:E3:29:C5:DD:EA:46:C6:70:10:2E:75:8A:9F:E0:68:DD:CB
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 389C05D3A9544580A2C5A0AD4DF44FABDA151BDE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
Signing time: Mon 03 Nov 2025 08:45:44 +0000
ROA not before: Mon 03 Nov 2025 08:40:44 +0000
ROA not after: Mon 02 Nov 2026 08:45:44 +0000
asID: 131111
IP address blocks: 103.75.24.0/22 maxlen: 24
103.75.208.0/22 maxlen: 24
103.76.24.0/22 maxlen: 24
103.78.80.0/22 maxlen: 24
103.78.96.0/22 maxlen: 24
103.78.212.0/22 maxlen: 24
103.81.132.0/22 maxlen: 24
103.82.12.0/22 maxlen: 24
103.83.4.0/22 maxlen: 24
103.83.92.0/22 maxlen: 24
103.85.60.0/22 maxlen: 24
103.85.64.0/22 maxlen: 24
103.117.157.0/24 maxlen: 24
103.122.32.0/24 maxlen: 24
103.122.33.0/24 maxlen: 24
103.122.34.0/24 maxlen: 24
103.122.35.0/24 maxlen: 24
103.123.64.0/24 maxlen: 24
103.123.65.0/24 maxlen: 24
103.123.66.0/24 maxlen: 24
103.123.67.0/24 maxlen: 24
103.123.68.0/24 maxlen: 24
103.123.69.0/24 maxlen: 24
103.123.70.0/24 maxlen: 24
103.123.71.0/24 maxlen: 24
103.123.248.0/24 maxlen: 24
103.123.249.0/24 maxlen: 24
103.123.250.0/24 maxlen: 24
103.123.251.0/24 maxlen: 24
103.124.112.0/24 maxlen: 24
103.124.113.0/24 maxlen: 24
103.124.114.0/24 maxlen: 24
103.124.115.0/24 maxlen: 24
103.124.118.0/24 maxlen: 24
103.124.119.0/24 maxlen: 24
103.125.208.0/24 maxlen: 24
103.125.209.0/24 maxlen: 24
103.125.210.0/24 maxlen: 24
103.125.211.0/24 maxlen: 24
103.135.212.0/24 maxlen: 24
103.135.213.0/24 maxlen: 24
103.135.214.0/24 maxlen: 24
103.135.215.0/24 maxlen: 24
103.135.220.0/22 maxlen: 24
103.135.222.0/24 maxlen: 24
103.135.223.0/24 maxlen: 24
103.136.56.0/24 maxlen: 24
103.136.57.0/24 maxlen: 24
103.136.58.0/24 maxlen: 24
103.136.59.0/24 maxlen: 24
103.154.78.0/24 maxlen: 24
103.154.79.0/24 maxlen: 24
103.154.80.0/24 maxlen: 24
103.154.81.0/24 maxlen: 24
103.154.82.0/24 maxlen: 24
103.154.83.0/24 maxlen: 24
103.154.84.0/24 maxlen: 24
103.154.85.0/24 maxlen: 24
103.154.86.0/24 maxlen: 24
103.154.87.0/24 maxlen: 24
103.154.88.0/24 maxlen: 24
103.154.89.0/24 maxlen: 24
103.154.90.0/24 maxlen: 24
103.154.91.0/24 maxlen: 24
103.154.92.0/24 maxlen: 24
103.154.93.0/24 maxlen: 24
103.154.108.0/24 maxlen: 24
103.154.109.0/24 maxlen: 24
103.154.110.0/24 maxlen: 24
103.154.111.0/24 maxlen: 24
103.154.112.0/24 maxlen: 24
103.154.113.0/24 maxlen: 24
103.154.114.0/24 maxlen: 24
103.154.115.0/24 maxlen: 24
103.154.116.0/24 maxlen: 24
103.154.117.0/24 maxlen: 24
103.154.118.0/24 maxlen: 24
103.154.119.0/24 maxlen: 24
103.154.120.0/24 maxlen: 24
103.154.121.0/24 maxlen: 24
103.154.122.0/24 maxlen: 24
103.154.123.0/24 maxlen: 24
103.154.124.0/24 maxlen: 24
103.154.125.0/24 maxlen: 24
103.154.126.0/24 maxlen: 24
103.154.127.0/24 maxlen: 24
103.154.128.0/24 maxlen: 24
103.154.129.0/24 maxlen: 24
103.154.130.0/24 maxlen: 24
103.154.131.0/24 maxlen: 24
103.154.134.0/24 maxlen: 24
103.154.135.0/24 maxlen: 24
103.154.136.0/24 maxlen: 24
103.154.137.0/24 maxlen: 24
103.154.138.0/24 maxlen: 24
103.154.139.0/24 maxlen: 24
103.154.140.0/24 maxlen: 24
103.154.141.0/24 maxlen: 24
103.154.142.0/24 maxlen: 24
103.154.143.0/24 maxlen: 24
103.154.144.0/24 maxlen: 24
103.154.145.0/24 maxlen: 24
103.154.146.0/24 maxlen: 24
103.154.147.0/24 maxlen: 24
103.154.148.0/24 maxlen: 24
103.154.149.0/24 maxlen: 24
103.154.150.0/24 maxlen: 24
103.154.151.0/24 maxlen: 24
103.154.152.0/24 maxlen: 24
103.154.153.0/24 maxlen: 24
103.154.210.0/24 maxlen: 24
103.154.211.0/24 maxlen: 24
103.154.212.0/24 maxlen: 24
103.154.213.0/24 maxlen: 24
103.154.214.0/24 maxlen: 24
103.154.215.0/24 maxlen: 24
103.154.216.0/24 maxlen: 24
103.154.217.0/24 maxlen: 24
103.154.218.0/24 maxlen: 24
103.154.219.0/24 maxlen: 24
103.154.220.0/24 maxlen: 24
103.154.221.0/24 maxlen: 24
103.154.222.0/24 maxlen: 24
103.154.223.0/24 maxlen: 24
103.154.224.0/24 maxlen: 24
103.154.225.0/24 maxlen: 24
103.154.226.0/24 maxlen: 24
103.154.227.0/24 maxlen: 24
103.154.228.0/24 maxlen: 24
103.154.229.0/24 maxlen: 24
119.235.208.0/20 maxlen: 20
202.150.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:9c:05:d3:a9:54:45:80:a2:c5:a0:ad:4d:f4:4f:ab:da:15:1b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 3 08:40:44 2025 GMT
Not After : Nov 2 08:45:44 2026 GMT
Subject: CN=3F970BE329C5DDEA46C670102E758A9FE068DDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:48:32:f9:46:21:87:19:38:f8:df:44:10:
2c:8b:74:fc:54:48:33:2e:43:6a:4e:1d:d6:09:dc:
48:88:c8:cf:35:04:23:b7:64:a4:bf:7b:a6:69:d6:
8c:96:8d:7b:87:5e:3a:e9:0a:16:2f:6f:fa:3f:71:
ad:fe:8d:31:f1:c1:ad:15:55:7b:30:bc:bc:a4:0d:
b1:be:b9:ec:1f:35:f9:5b:5c:9b:b5:c0:45:90:88:
b4:6f:9c:b6:a5:a6:c3:00:e9:61:a0:39:ee:14:9c:
c9:6b:6a:d2:16:e2:79:59:15:fa:e7:49:2a:b2:71:
28:8e:44:f1:d0:b2:5a:81:4c:c7:f7:56:bf:1a:c9:
18:82:c3:17:75:7c:10:79:eb:7e:3d:35:0d:36:d7:
39:d1:f4:25:d7:a6:e5:f6:cb:f1:7e:c9:2c:c3:02:
1f:39:9d:24:a1:5c:81:dc:39:82:da:2c:ce:92:4f:
41:5e:54:d7:37:b9:ae:d6:ab:be:5e:0a:10:a1:78:
61:4e:03:02:89:28:53:de:dc:3d:ea:8e:c7:e3:69:
69:e2:e5:2c:5d:38:30:be:84:86:46:60:75:79:a8:
1f:7d:36:60:b1:09:7f:6b:60:ae:7b:4a:c4:48:8c:
8c:6f:c4:ad:b9:47:4f:2a:83:c6:40:72:78:88:e9:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:97:0B:E3:29:C5:DD:EA:46:C6:70:10:2E:75:8A:9F:E0:68:DD:CB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.24.0/22
103.75.208.0/22
103.76.24.0/22
103.78.80.0/22
103.78.96.0/22
103.78.212.0/22
103.81.132.0/22
103.82.12.0/22
103.83.4.0/22
103.83.92.0/22
103.85.60.0-103.85.67.255
103.117.157.0/24
103.122.32.0/22
103.123.64.0/21
103.123.248.0/22
103.124.112.0/22
103.124.118.0/23
103.125.208.0/22
103.135.212.0/22
103.135.220.0/22
103.136.56.0/22
103.154.78.0-103.154.93.255
103.154.108.0-103.154.131.255
103.154.134.0-103.154.153.255
103.154.210.0-103.154.229.255
119.235.208.0/20
202.150.64.0/19
Signature Algorithm: sha256WithRSAEncryption
67:de:51:84:76:c0:ba:93:fd:ca:48:73:79:46:c7:65:48:6c:
97:28:66:d9:46:87:1b:8d:8b:00:6c:32:35:4d:9f:79:f9:aa:
63:5c:2e:18:21:08:70:19:92:85:51:99:f7:bb:35:48:ad:33:
69:94:11:28:f2:32:e7:c8:01:a9:e3:5d:67:93:00:ca:de:1b:
6c:db:02:9b:98:a4:0d:9f:89:e9:da:a7:9b:9a:61:6d:d0:00:
4d:a1:5f:01:9b:bb:ad:3a:07:24:03:61:96:23:f9:bf:70:41:
a6:bd:4c:d9:1b:83:c9:29:89:48:2e:79:0f:a9:47:62:09:7e:
cb:bf:f5:dd:1a:ae:f3:e5:3a:2b:2d:0d:47:d9:8b:5b:2d:b6:
42:b7:cc:0c:d8:86:7d:b3:56:92:22:3c:49:79:d6:a4:77:06:
cf:61:03:2d:e5:20:62:eb:e7:83:0f:d4:95:ef:72:93:c3:f4:
f1:95:95:42:a0:f6:f8:c6:0f:0d:e0:42:92:ee:2c:8c:5c:fd:
f8:58:68:c9:1e:1a:c2:c2:88:bf:cf:3b:c9:de:b0:f4:80:ad:
f5:12:9d:b8:2f:0f:bf:22:f8:a5:0d:f5:b0:6c:34:f9:b8:ab:
db:07:0f:03:cb:d9:d1:63:71:18:ef:f9:9c:b6:5c:73:3d:68:
e2:80:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:00:33 2025 by rpki-client