Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS63859.roa
File: AS63859.roa (raw, json)
Hash identifier: 3YVWcNIJ286BJoy+HZyYlaJUdAJblC19YbZAufVTtKo=
Subject key identifier: 11:FA:BC:74:34:49:0C:43:52:99:B2:C9:0C:FD:BA:58:45:F6:B8:FD
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 5D5B983AB6D0C99FAA6DB4AAA65A0F4C43F5E647
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63859.roa
Signing time: Fri 05 Jun 2026 09:15:02 +0000
ROA not before: Fri 05 Jun 2026 09:10:02 +0000
ROA not after: Fri 04 Jun 2027 09:15:02 +0000
asID: 63859
IP address blocks: 9.154.220.0/24 maxlen: 24
9.154.221.0/24 maxlen: 24
9.154.222.0/24 maxlen: 24
9.154.223.0/24 maxlen: 24
9.154.224.0/24 maxlen: 24
9.154.225.0/24 maxlen: 24
9.154.226.0/24 maxlen: 24
9.154.227.0/24 maxlen: 24
9.154.228.0/24 maxlen: 24
9.154.229.0/24 maxlen: 24
9.154.230.0/24 maxlen: 24
9.154.231.0/24 maxlen: 24
9.154.232.0/24 maxlen: 24
9.154.233.0/24 maxlen: 24
9.154.234.0/24 maxlen: 24
9.154.235.0/24 maxlen: 24
9.154.236.0/24 maxlen: 24
9.154.237.0/24 maxlen: 24
9.154.238.0/24 maxlen: 24
9.154.239.0/24 maxlen: 24
157.66.208.0/23 maxlen: 24
157.66.208.0/24 maxlen: 24
157.66.209.0/24 maxlen: 24
157.66.210.0/23 maxlen: 24
157.66.210.0/24 maxlen: 24
157.66.211.0/24 maxlen: 24
158.140.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:5b:98:3a:b6:d0:c9:9f:aa:6d:b4:aa:a6:5a:0f:4c:43:f5:e6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Jun 5 09:10:02 2026 GMT
Not After : Jun 4 09:15:02 2027 GMT
Subject: CN=11FABC7434490C435299B2C90CFDBA5845F6B8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:fe:e0:96:34:75:ff:0f:67:46:36:24:dd:
01:38:66:0c:9c:ec:e6:7a:98:cb:5f:e6:b8:7a:6b:
ba:1d:90:6d:17:3f:96:c3:88:a5:c9:7b:36:a3:91:
ac:fd:f6:ab:4f:5d:53:f4:4f:bc:97:43:84:2e:35:
bb:3f:e3:31:35:fc:57:73:65:13:b0:72:d0:42:64:
8d:33:48:f0:94:41:04:ac:22:6b:02:8a:6a:a9:84:
cf:dd:2d:08:59:c2:34:43:62:03:21:1c:0d:cb:8d:
ac:10:d6:87:74:e4:89:71:78:c8:e5:4f:24:3d:39:
c8:88:5d:c4:8b:4e:4f:f2:56:14:30:9c:17:35:f0:
91:81:4a:e0:d4:4f:6a:91:18:7a:f3:43:d0:c4:b9:
99:37:9b:c3:5d:fc:1d:6e:34:46:c0:26:c2:71:8e:
cd:08:7e:95:4d:94:6c:3a:37:0f:90:b1:83:9b:1d:
9a:b8:a2:c2:d4:2e:d8:7c:cd:f0:07:64:4f:b4:19:
a3:28:25:e2:8b:5e:97:6d:c9:88:78:2c:a8:2a:0a:
29:b7:ab:ee:06:60:ea:af:6f:04:ee:f2:68:db:5f:
10:b4:e1:60:90:be:63:cd:c7:0c:f4:b3:71:af:92:
d9:80:99:42:70:e8:51:63:4d:d5:1d:f2:f1:cb:e7:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FA:BC:74:34:49:0C:43:52:99:B2:C9:0C:FD:BA:58:45:F6:B8:FD
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.154.220.0-9.154.239.255
157.66.208.0/22
158.140.160.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:e9:0a:f8:00:33:fa:36:29:96:78:8f:ff:25:ab:8b:a7:58:
a5:ea:c4:86:c6:2a:af:34:a9:63:e0:58:cf:d2:0f:17:f0:87:
b2:bc:18:4c:8c:02:18:fc:76:ee:81:a9:f7:24:ae:0f:9d:27:
a2:ec:66:cf:b3:c4:e1:81:78:ea:e3:a8:bd:1d:b2:21:04:3d:
30:f7:94:94:90:a6:28:c1:0f:33:93:9a:e1:c4:5a:ec:7b:9b:
75:ce:88:99:7c:65:22:e1:96:46:f7:08:18:d4:6d:d9:cd:2e:
ce:ab:0f:6c:4f:c9:2d:a8:3d:39:23:91:e2:58:e3:d1:b8:1a:
ca:f8:f5:0d:04:cc:3a:c3:cd:6b:f6:fa:93:03:5c:1c:74:53:
61:1b:11:2f:40:b8:e7:a5:f2:9b:b1:4e:6d:a7:f7:54:a0:9c:
db:e8:fa:35:61:70:06:66:ce:69:32:cb:df:5a:5c:4a:b6:55:
df:62:2b:b4:1d:bd:53:77:6d:30:f8:79:49:0d:b4:d4:86:64:
94:77:97:5b:fe:29:4a:c3:51:7a:8c:c9:dc:0a:4f:0d:ff:73:
49:9d:55:9b:a9:f6:a1:61:84:ab:fd:f6:a4:57:ad:b4:e0:d2:
e0:6e:39:16:8d:5a:00:0b:b5:1f:7c:e6:52:99:5e:35:a8:36:
76:1a:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:48:24 2026 by rpki-client