Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
File: AS23679.roa (raw, json)
Hash identifier: iMlu2CAREJXvdnDjzRJ+boxqZSfr6XG248+W/3u76ow=
Subject key identifier: 62:85:A1:C0:61:40:73:77:92:2F:EA:EB:C3:F9:94:74:23:EB:F1:08
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1845B9DA11F92F33CEB41382534ACE62C8D72C5B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
Signing time: Mon 30 Mar 2026 02:31:06 +0000
ROA not before: Mon 30 Mar 2026 02:26:06 +0000
ROA not after: Mon 29 Mar 2027 02:31:06 +0000
asID: 23679
IP address blocks: 27.121.112.0/23 maxlen: 24
103.31.46.0/24 maxlen: 24
103.114.76.0/24 maxlen: 24
103.114.77.0/24 maxlen: 24
103.114.78.0/24 maxlen: 24
103.157.136.0/23 maxlen: 24
103.196.116.0/24 maxlen: 24
110.232.65.0/24 maxlen: 24
110.232.68.0/23 maxlen: 24
110.232.70.0/24 maxlen: 24
110.232.91.0/24 maxlen: 24
124.158.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 05:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:45:b9:da:11:f9:2f:33:ce:b4:13:82:53:4a:ce:62:c8:d7:2c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 30 02:26:06 2026 GMT
Not After : Mar 29 02:31:06 2027 GMT
Subject: CN=6285A1C061407377922FEAEBC3F9947423EBF108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:49:ac:13:2c:be:bf:44:60:ec:71:85:13:
d2:3a:12:1c:e5:76:50:99:48:6b:85:2f:7f:b1:a4:
70:b0:40:18:03:fc:1f:02:12:da:70:5f:3e:ec:26:
45:74:b9:9e:f4:9f:34:b8:41:9c:98:eb:67:98:6d:
c7:ed:64:f4:80:fc:d5:95:2e:eb:33:01:47:0a:c3:
68:cc:da:2e:07:0a:22:0e:3b:c9:18:7a:83:ee:61:
8e:34:f8:00:07:e9:5e:85:0e:8b:ea:a4:c4:33:d3:
15:06:d2:d6:9c:7e:58:c7:0d:58:40:95:05:8a:f6:
eb:89:67:d3:76:39:57:3e:b2:81:07:5a:ae:83:1b:
6e:65:68:a7:e2:7b:0e:96:63:fa:31:5a:f3:3f:fd:
bd:23:a8:79:86:fa:b6:49:69:64:5e:18:3b:30:54:
6a:f0:34:fe:ed:d0:ca:0c:21:9b:84:be:ae:a4:d8:
6c:48:47:9a:88:10:7d:f9:17:16:32:b6:54:48:4d:
a8:ce:29:3d:6a:f7:8f:f1:6c:09:e3:d5:05:aa:00:
cf:32:95:a2:35:28:1e:70:4b:5a:21:e7:7f:f4:28:
2f:b0:97:37:19:b1:ea:ee:85:f7:32:07:2b:58:02:
f6:f1:a1:b8:80:79:7a:a6:e0:5f:ae:c7:bc:dd:02:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:A1:C0:61:40:73:77:92:2F:EA:EB:C3:F9:94:74:23:EB:F1:08
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.121.112.0/23
103.31.46.0/24
103.114.76.0-103.114.78.255
103.157.136.0/23
103.196.116.0/24
110.232.65.0/24
110.232.68.0-110.232.70.255
110.232.91.0/24
124.158.116.0/23
Signature Algorithm: sha256WithRSAEncryption
11:96:4a:2b:9f:77:32:bc:15:d9:19:a5:b2:1f:74:b4:b0:d1:
16:34:61:ff:d5:33:d2:8b:86:b6:ef:a0:34:d7:7b:8b:c9:31:
78:e2:ef:75:e6:1f:51:1b:d9:6c:37:96:4c:7c:b4:61:e0:c1:
08:fd:7f:04:69:cd:3e:dc:dd:06:cb:dd:82:2a:dc:f7:33:4a:
de:a6:9a:1a:84:a9:21:a3:28:a4:63:06:60:cb:d7:50:3c:2e:
2b:e2:b3:49:4d:3b:de:7f:b8:3d:2a:61:45:15:93:ba:0a:34:
35:55:af:98:c2:16:0e:8f:c8:46:36:13:c3:03:a1:46:4b:1c:
a7:f6:7c:f5:32:25:8d:8c:e8:cc:f9:77:e4:b2:ca:70:80:6f:
3b:9d:91:f6:cf:80:48:f8:0d:a2:ad:fa:71:81:7c:72:a4:22:
d1:76:ae:40:be:5d:a3:9d:b3:3b:32:44:30:9b:22:01:bd:e9:
17:21:9c:01:e4:22:5c:18:f9:56:e2:92:2c:ce:9a:a1:7c:fd:
c8:df:1c:c2:9c:d7:9d:c4:45:fa:5c:22:05:92:0d:68:7e:af:
c2:0b:8f:42:cd:04:64:dd:ea:d7:77:2a:2a:af:6d:77:99:e6:
d0:3c:55:ce:d8:da:f2:a3:ae:81:e9:c7:dc:82:66:55:69:3c:
a5:3f:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:16:36 2026 by rpki-client