Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9875.roa
File: AS9875.roa (raw, json)
Hash identifier: YWm63EVvuprQT3XkFS9BNWoMDTohGp5YsO7aa7SjAGg=
Subject key identifier: 8D:A3:75:19:D1:7A:DE:15:6A:1A:01:2C:D9:05:12:88:E8:7F:F9:3F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 707EEB1036C7A8366260CEDD63719ED2592AB883
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9875.roa
Signing time: Fri 06 Feb 2026 05:00:00 +0000
ROA not before: Fri 06 Feb 2026 04:55:00 +0000
ROA not after: Fri 05 Feb 2027 05:00:00 +0000
asID: 9875
IP address blocks: 103.93.224.0/22 maxlen: 24
103.93.228.0/22 maxlen: 24
103.94.96.0/22 maxlen: 24
103.159.228.0/23 maxlen: 24
103.159.230.0/23 maxlen: 24
103.159.232.0/23 maxlen: 24
103.159.234.0/23 maxlen: 24
103.167.142.0/23 maxlen: 24
103.167.148.0/23 maxlen: 24
103.168.106.0/23 maxlen: 24
103.168.108.0/23 maxlen: 24
103.168.110.0/23 maxlen: 24
103.168.112.0/23 maxlen: 24
103.169.111.0/24 maxlen: 24
103.169.112.0/23 maxlen: 24
103.169.118.0/23 maxlen: 24
103.169.120.0/23 maxlen: 24
103.169.122.0/23 maxlen: 24
103.169.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7e:eb:10:36:c7:a8:36:62:60:ce:dd:63:71:9e:d2:59:2a:b8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 6 04:55:00 2026 GMT
Not After : Feb 5 05:00:00 2027 GMT
Subject: CN=8DA37519D17ADE156A1A012CD9051288E87FF93F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:66:33:a2:03:e2:63:29:63:53:03:c3:1b:e3:
06:e5:5d:37:50:ae:cc:21:d3:5d:7c:8a:47:2e:1c:
50:cb:f2:96:f4:fd:83:f7:0e:6c:2f:2d:6c:f0:0e:
da:9c:72:45:69:71:06:09:b6:e1:53:ab:ce:cb:65:
4e:f1:44:80:8d:e4:1a:02:a5:31:2e:e9:d0:08:93:
b4:4e:24:66:12:75:0b:7a:af:e5:71:b7:97:27:4a:
05:7a:2e:4b:df:dd:27:94:a0:29:03:c2:a2:41:7a:
d5:74:ef:5e:aa:03:4d:b2:60:7e:8c:b6:4f:31:49:
f7:49:cb:fa:d1:64:4d:b7:f2:07:99:6c:b9:60:d7:
95:6f:bf:c6:4a:37:b8:31:b1:a5:93:c4:75:52:61:
a3:aa:91:dd:d7:19:17:c6:64:ef:8c:46:58:31:76:
88:c1:e3:bc:59:7b:f5:d0:4b:2d:66:bd:2f:f2:99:
a9:00:53:47:a8:2a:26:f3:21:bb:89:25:55:b9:b9:
50:31:e0:be:58:3c:d0:75:cf:ed:36:fb:4d:3a:40:
93:13:3e:54:ed:c8:f4:cd:6d:ca:c7:dd:73:fb:6f:
e3:13:b4:a1:c3:cc:a9:a5:a5:5d:e4:82:be:f1:47:
5b:f8:e4:fe:23:b0:17:4e:09:d0:5b:5a:95:b4:e3:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A3:75:19:D1:7A:DE:15:6A:1A:01:2C:D9:05:12:88:E8:7F:F9:3F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9875.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.93.224.0/21
103.94.96.0/22
103.159.228.0-103.159.235.255
103.167.142.0/23
103.167.148.0/23
103.168.106.0-103.168.113.255
103.169.111.0-103.169.113.255
103.169.118.0-103.169.125.255
Signature Algorithm: sha256WithRSAEncryption
08:89:eb:72:b5:a5:b7:0c:bd:b9:57:52:2e:bb:82:5a:1b:6f:
4f:1a:ff:50:bd:0a:52:d6:77:be:07:f8:f6:db:7f:2b:f4:31:
7d:34:ea:6e:13:a3:9b:b3:ce:85:03:c4:c7:18:77:d5:1a:d4:
be:3d:a4:58:bf:cd:be:85:30:1f:bc:67:20:93:40:eb:94:53:
ab:ab:e7:8e:a9:1d:c9:6a:57:f8:fe:1b:de:fe:b6:57:f8:c6:
93:a6:16:08:e2:4e:16:04:2c:4b:36:41:be:03:44:ce:dd:11:
cf:bb:c5:6f:16:80:31:f1:ea:db:4d:9f:77:aa:b9:83:3b:8f:
66:43:40:74:b9:fa:68:04:a5:1e:39:3b:a7:88:88:3a:bf:08:
08:a3:f3:9b:6b:c8:49:65:5b:c6:b6:5a:4f:b3:f3:e0:87:95:
6a:80:43:98:a0:85:93:5d:22:be:32:23:c4:1f:4a:b8:6d:25:
c8:ca:15:7d:60:6e:b8:25:14:da:70:e9:20:f4:c5:b2:2e:bc:
02:be:53:20:3d:85:8e:e0:b4:b9:35:90:9c:09:d1:9d:b5:cb:
db:80:32:6b:b6:60:1a:c5:80:7c:9f:a0:9c:e6:c0:e4:24:4c:
e8:a9:db:b6:d3:36:91:c1:ca:36:c9:dc:fb:b0:2d:fd:a3:12:
04:9f:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:01:48 2026 by rpki-client