Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
File: AS45305.roa (raw, json)
Hash identifier: rUfBx1Y2y7EdevK1pFTkD2bu5iUFyQOuSwsN8qKZ1ok=
Subject key identifier: 10:DF:B5:41:82:4B:CB:FD:E5:E3:C1:3C:31:06:67:15:E7:21:3B:81
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 34BF0E21FC5F121C4B9F99C9E12864B1EBDDA5E7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
Signing time: Tue 03 Feb 2026 06:23:21 +0000
ROA not before: Tue 03 Feb 2026 06:18:21 +0000
ROA not after: Tue 02 Feb 2027 06:23:21 +0000
asID: 45305
IP address blocks: 103.22.99.0/24 maxlen: 24
103.46.10.0/23 maxlen: 24
103.54.80.0/23 maxlen: 24
103.83.98.0/24 maxlen: 24
103.87.148.0/23 maxlen: 24
103.98.122.0/24 maxlen: 24
103.164.228.0/24 maxlen: 24
103.183.254.0/24 maxlen: 24
103.184.180.0/23 maxlen: 24
103.190.114.0/23 maxlen: 24
103.220.22.0/23 maxlen: 24
103.251.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:bf:0e:21:fc:5f:12:1c:4b:9f:99:c9:e1:28:64:b1:eb:dd:a5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 3 06:18:21 2026 GMT
Not After : Feb 2 06:23:21 2027 GMT
Subject: CN=10DFB541824BCBFDE5E3C13C31066715E7213B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:92:a6:54:d2:5b:8c:e7:1b:43:3d:52:2f:
9f:ed:7c:f4:df:e5:31:fc:29:6f:ec:59:fd:5b:73:
07:65:90:2d:14:2d:e2:d8:85:bc:d8:f0:7d:8e:64:
a5:a9:c7:87:a2:89:03:10:da:69:a0:3a:f9:6d:a7:
f7:25:00:bd:52:6a:1b:23:85:26:b7:c0:f7:54:b1:
dd:ef:b4:4f:65:30:5f:73:7c:d2:7b:55:ce:6d:d4:
64:e6:e1:74:a5:7f:3b:e8:ba:45:66:fb:39:ac:85:
16:ae:50:2a:64:a5:93:0d:9c:23:8b:68:13:32:72:
02:50:48:1a:3e:d4:f2:b0:be:9e:41:26:d0:7b:ac:
3f:1a:f3:aa:f8:12:9c:fa:31:f6:e5:ba:df:c2:8e:
29:94:a1:71:5b:f0:16:b9:9a:53:df:a1:e4:58:8e:
9f:a0:0a:e2:62:45:80:04:45:d0:c9:aa:19:2a:14:
a0:28:41:90:81:aa:c3:88:7f:4d:64:4d:41:21:5b:
27:b2:c2:52:b2:7e:f0:d1:0b:e2:ac:25:f7:53:8c:
7e:70:5f:dc:ca:0d:11:dc:fa:06:f5:93:21:89:72:
2b:1a:31:ee:27:3f:3b:3d:f8:75:17:8a:72:69:e6:
bb:8e:45:99:5e:79:77:63:0e:77:01:1f:45:33:3d:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DF:B5:41:82:4B:CB:FD:E5:E3:C1:3C:31:06:67:15:E7:21:3B:81
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.99.0/24
103.46.10.0/23
103.54.80.0/23
103.83.98.0/24
103.87.148.0/23
103.98.122.0/24
103.164.228.0/24
103.183.254.0/24
103.184.180.0/23
103.190.114.0/23
103.220.22.0/23
103.251.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:81:94:ae:2f:9e:ff:c7:1c:32:23:e3:e5:ad:7b:c7:9b:76:
cc:4c:64:70:d6:a8:9a:33:71:7e:93:4a:44:93:03:d8:89:cf:
f1:55:5c:90:b3:a0:22:db:42:65:15:91:d9:bf:9c:b6:78:1b:
7b:8c:b1:96:ae:ef:79:6b:cd:27:0c:11:0e:95:79:2f:f3:46:
41:fa:25:a8:ac:51:cb:46:59:16:9b:09:1b:96:41:65:49:53:
0d:7a:21:52:04:9f:d2:bb:64:e7:a1:2e:dd:17:e7:b5:49:72:
ca:22:f8:dd:f8:95:19:fb:57:80:aa:25:f9:48:1d:27:5e:04:
e4:3e:4a:07:5f:2b:fc:42:5c:82:1c:5e:53:c6:ec:02:bd:ce:
ec:da:da:b9:70:5b:6f:a4:94:f3:ba:a3:64:61:70:fa:1d:7b:
29:c7:38:9e:d1:8d:18:f5:00:67:f8:9d:06:90:85:2e:1f:6e:
b1:37:bb:dc:a5:c8:2f:f6:98:67:58:82:45:60:68:1b:f2:af:
d8:f7:02:73:d3:7c:ef:af:e2:77:a1:17:ee:4a:43:17:10:4a:
5e:aa:01:e4:98:d3:4d:d3:96:cf:73:b4:53:f4:8d:10:a5:1b:
48:42:fd:45:c3:b1:bb:5c:88:74:6d:7f:36:c3:13:57:e3:45:
3c:6d:18:2c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUNL8OIfxfEhxLn5nJ4ShksevdpecwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwMzA2MTgyMVoX
DTI3MDIwMjA2MjMyMVowMzExMC8GA1UEAxMoMTBERkI1NDE4MjRCQ0JGREU1RTND
MTNDMzEwNjY3MTVFNzIxM0I4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOR5kqZU0luM5xtDPVIvn+189N/lMfwpb+xZ/VtzB2WQLRQt4tiFvNjwfY5k
panHh6KJAxDaaaA6+W2n9yUAvVJqGyOFJrfA91Sx3e+0T2UwX3N80ntVzm3UZObh
dKV/O+i6RWb7OayFFq5QKmSlkw2cI4toEzJyAlBIGj7U8rC+nkEm0HusPxrzqvgS
nPox9uW638KOKZShcVvwFrmaU9+h5FiOn6AK4mJFgARF0MmqGSoUoChBkIGqw4h/
TWRNQSFbJ7LCUrJ+8NEL4qwl91OMfnBf3MoNEdz6BvWTIYlyKxox7ic/Oz34dReK
cmnmu45FmV55d2MOdwEfRTM9a0kCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQQ37VB
gkvL/eXjwTwxBmcV5yE7gTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1MzA1LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBO
BAIAATBIAwQAZxZjAwQBZy4KAwQBZzZQAwQAZ1NiAwQBZ1eUAwQAZ2J6AwQAZ6Tk
AwQAZ7f+AwQBZ7i0AwQBZ75yAwQBZ9wWAwQAZ/uZMA0GCSqGSIb3DQEBCwUAA4IB
AQB/gZSuL57/xxwyI+PlrXvHm3bMTGRw1qiaM3F+k0pEkwPYic/xVVyQs6Ai20Jl
FZHZv5y2eBt7jLGWru95a80nDBEOlXkv80ZB+iWorFHLRlkWmwkblkFlSVMNeiFS
BJ/Su2TnoS7dF+e1SXLKIvjd+JUZ+1eAqiX5SB0nXgTkPkoHXyv8QlyCHF5TxuwC
vc7s2tq5cFtvpJTzuqNkYXD6HXspxzie0Y0Y9QBn+J0GkIUuH26xN7vcpcgv9phn
WIJFYGgb8q/Y9wJz03zvr+J3oRfuSkMXEEpeqgHkmNNN05bPc7RT9I0QpRtIQv1F
w7G7XIh0bX82wxNX40U8bRgs
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:01:29 2026 by rpki-client