Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141898.roa
File: AS141898.roa (raw, json)
Hash identifier: 5wMPaUA95VLEZRC/ciNr39lg0dWnUf0oyenPBO/u1is=
Subject key identifier: 33:AE:FE:0E:3C:D1:0E:22:87:08:19:FB:35:BD:3E:31:F2:BB:BD:16
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 156B90835D3E0C8F6058D11B5ADC6E6A8BB6E579
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141898.roa
Signing time: Mon 30 Mar 2026 07:00:00 +0000
ROA not before: Mon 30 Mar 2026 06:55:00 +0000
ROA not after: Mon 29 Mar 2027 07:00:00 +0000
asID: 141898
IP address blocks: 103.51.206.0/23 maxlen: 24
103.52.110.0/23 maxlen: 24
103.164.12.0/23 maxlen: 24
103.177.176.0/23 maxlen: 24
103.184.52.0/23 maxlen: 24
103.206.72.0/23 maxlen: 24
202.180.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 05:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6b:90:83:5d:3e:0c:8f:60:58:d1:1b:5a:dc:6e:6a:8b:b6:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 30 06:55:00 2026 GMT
Not After : Mar 29 07:00:00 2027 GMT
Subject: CN=33AEFE0E3CD10E22870819FB35BD3E31F2BBBD16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:87:30:67:38:78:e4:a0:33:4c:54:c4:9b:
53:92:03:08:a9:cf:5b:a9:1b:8a:65:b0:a6:1a:60:
ff:73:e4:e0:58:c4:67:93:17:f9:87:8c:fb:b1:82:
5c:0a:f1:bd:55:a9:f7:02:79:35:0b:6d:72:b3:79:
41:54:40:4c:13:99:bf:a8:90:02:44:9d:08:85:29:
a5:f7:b9:3a:21:b5:47:85:76:4c:f0:b0:9e:93:4c:
92:5a:b2:9a:19:8f:d2:56:42:ae:39:86:49:c3:b9:
13:12:50:1c:56:2f:2a:b4:79:59:f8:af:0e:21:9e:
3e:0c:19:59:40:cc:48:ed:9c:ad:da:05:c2:2e:ee:
26:fb:d2:3f:68:94:0e:84:8e:99:a0:13:30:c3:44:
26:87:f9:6c:f2:ab:48:b4:fb:c4:b8:32:ce:2e:fe:
2d:2b:a9:e4:5c:73:1c:a1:d2:c7:9a:e5:ba:af:81:
9d:47:2c:b1:90:e5:12:4c:c8:0f:e6:1a:24:37:1e:
ef:92:a0:17:f1:36:5e:7d:40:93:e8:bf:cb:29:9b:
9c:14:d5:ec:ba:bc:e6:fb:75:ec:6b:3c:4b:6c:0c:
f2:74:b8:cb:da:2c:c0:82:1c:6c:be:2e:25:3b:40:
4d:50:c4:00:62:8c:e4:ab:78:db:fd:a1:a3:91:4f:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:FE:0E:3C:D1:0E:22:87:08:19:FB:35:BD:3E:31:F2:BB:BD:16
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.206.0/23
103.52.110.0/23
103.164.12.0/23
103.177.176.0/23
103.184.52.0/23
103.206.72.0/23
202.180.12.0/22
Signature Algorithm: sha256WithRSAEncryption
26:97:c9:06:54:a2:8b:35:63:8e:ce:a5:80:bc:2a:7b:14:0d:
f0:7b:a0:f3:29:d7:1c:46:9a:01:45:89:db:b2:c4:56:e9:ff:
d7:55:4a:52:8a:02:d2:44:ed:b4:e2:e7:66:d3:a1:b5:1b:23:
f4:43:2a:46:cf:c7:d4:10:57:bf:55:f4:f0:35:c8:1e:88:88:
e9:b4:d0:b0:60:6b:1c:8f:c0:f2:1e:f3:78:f6:19:25:30:b4:
34:37:d9:ce:c6:a7:cc:28:3d:ca:f4:1a:7c:e4:52:5d:56:51:
f6:62:b0:eb:0d:4e:c2:f4:1c:24:91:90:6e:37:ae:0e:e3:11:
50:f9:5a:81:5a:7b:64:0c:68:a0:1c:02:1f:ab:b6:63:b1:ab:
89:8e:21:07:4f:ed:5d:74:a9:88:0d:1b:e6:85:0c:a6:0e:15:
3c:26:4e:45:e6:d8:4a:3b:bb:bc:55:5c:b8:53:93:3e:6b:0d:
bf:05:bb:3e:ee:bc:e9:11:ac:ff:60:6f:b4:4f:95:33:c9:8c:
ad:2f:9a:97:73:e6:a0:14:71:08:74:42:ed:59:da:db:6b:70:
05:ed:76:ed:63:8e:ff:0d:b6:62:48:7f:10:a7:be:5e:d7:13:
16:0d:8f:ba:9e:86:5e:13:49:5a:f6:8b:f7:e2:a4:92:86:5b:
fb:31:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:24 2026 by rpki-client