Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133337.roa
File: AS133337.roa (raw, json)
Hash identifier: v+WWT9dsa1Trw6hAnLAjEuKZw2hdUXZrMC4bzwi1F9g=
Subject key identifier: 64:2E:92:12:EB:4C:D7:6B:E6:91:36:00:E0:EC:10:02:C8:93:93:AC
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 68D4551C5415365415F18CC4D6E4D2F500FA0F68
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133337.roa
Signing time: Mon 12 Oct 2026 04:01:52 +0000
ROA not before: Mon 12 Oct 2026 03:56:52 +0000
ROA not after: Mon 11 Oct 2027 04:01:52 +0000
asID: 133337
IP address blocks: 103.174.67.0/24 maxlen: 24
2001:df1:9e40::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d4:55:1c:54:15:36:54:15:f1:8c:c4:d6:e4:d2:f5:00:fa:0f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 12 03:56:52 2026 GMT
Not After : Oct 11 04:01:52 2027 GMT
Subject: CN=642E9212EB4CD76BE6913600E0EC1002C89393AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:16:1e:ae:90:e1:31:b1:51:5a:e8:57:25:
29:38:d1:ee:9a:cd:60:fc:32:7f:a2:4e:e4:e3:be:
26:62:26:e8:e9:70:c3:1c:6f:14:6b:66:a3:9c:e2:
c7:ac:1d:93:b0:f2:fe:be:14:6b:5f:9a:32:92:bb:
e4:62:c6:9f:b8:9c:9c:0e:de:cc:f7:5a:94:5d:9e:
7e:9c:1c:51:d2:8d:f2:b0:75:1a:b3:4f:bb:a3:71:
47:3a:81:e0:e2:91:15:3f:06:99:63:72:40:01:92:
e2:ee:21:61:98:43:af:65:f7:8c:57:7b:71:c1:2e:
71:1a:e5:a9:1e:61:97:d3:4e:62:5a:7a:88:2e:38:
55:3b:49:bd:8f:98:74:fc:c2:a9:35:98:75:64:b6:
13:1e:50:49:55:23:69:86:ff:f0:bf:f6:63:8b:7f:
91:bd:56:ca:84:dd:29:0c:8a:78:19:87:60:43:1b:
7c:c1:32:31:2c:da:34:3e:35:a0:96:a2:71:d9:4e:
ff:95:8c:b5:66:a3:03:4d:67:2a:a6:34:a7:33:15:
2e:2c:ed:05:f1:89:c3:d7:f6:9c:40:d9:0b:45:64:
91:ff:af:b5:fc:45:16:64:f8:2f:95:47:ea:ad:0b:
b3:14:a2:bd:2c:fc:97:b9:f6:b1:ac:ba:e4:6f:2b:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:92:12:EB:4C:D7:6B:E6:91:36:00:E0:EC:10:02:C8:93:93:AC
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.67.0/24
IPv6:
2001:df1:9e40::/48
Signature Algorithm: sha256WithRSAEncryption
7e:fc:bb:d1:be:bf:73:75:98:ed:1c:43:bc:b0:b6:b2:5c:fb:
3f:71:84:55:85:05:00:69:85:93:64:ae:b3:ed:be:f3:c9:d0:
5d:58:91:f5:1a:7a:cd:63:33:c4:d0:f8:b6:62:05:a7:81:af:
6b:4a:a4:e3:c2:29:5a:ae:c2:2f:0f:33:2e:0c:c8:ab:ce:8d:
ad:91:ec:88:0a:b2:c9:51:97:1a:91:86:fc:b0:94:dd:60:8c:
42:86:d7:3e:35:49:c4:62:6f:c0:9a:72:05:12:29:c5:c7:c4:
d3:41:2f:88:64:8a:42:4f:e3:cc:ba:22:2a:fe:49:9f:fa:04:
62:07:a5:1d:8c:27:6e:41:68:2a:de:72:89:45:76:ed:d9:b7:
95:49:3f:6f:b7:d2:93:5c:67:e7:b2:2f:34:62:99:23:c5:cf:
c1:4a:d8:0c:fb:16:30:7e:7e:de:1e:f1:20:8d:71:05:a2:8e:
c6:e9:d6:3b:42:39:ad:5b:3b:a9:cb:6e:c9:5c:7a:d6:48:0a:
dc:2f:fd:ec:eb:0d:3d:af:7c:94:91:f0:1b:7e:00:c0:e0:7e:
27:ba:23:be:29:48:df:57:47:22:d4:4e:c9:9b:ae:bf:b9:52:
ed:a8:f9:5c:aa:31:14:d7:fa:b5:aa:b4:5d:cf:ed:39:99:a7:
91:16:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 12:31:33 2026 by rpki-client