Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa
File: AS23947.roa (raw, json)
Hash identifier: /C10coCOTKtGL59XpL/bXvruILueGRX+INtIZVuzkX0=
Subject key identifier: 2B:C3:E1:6B:8E:15:90:5E:B3:DD:2B:0A:8F:67:F8:53:14:A4:E4:51
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 7AB484A3036AD923C60C03E1E04ACA666F1CE97C
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa
Signing time: Tue 20 Oct 2026 06:36:49 +0000
ROA not before: Tue 20 Oct 2026 06:31:49 +0000
ROA not after: Tue 19 Oct 2027 06:36:49 +0000
asID: 23947
IP address blocks: 103.111.144.0/24 maxlen: 24
103.129.216.0/22 maxlen: 24
103.154.136.0/24 maxlen: 24
202.150.64.0/19 maxlen: 24
2400:dc00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 15:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b4:84:a3:03:6a:d9:23:c6:0c:03:e1:e0:4a:ca:66:6f:1c:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 20 06:31:49 2026 GMT
Not After : Oct 19 06:36:49 2027 GMT
Subject: CN=2BC3E16B8E15905EB3DD2B0A8F67F85314A4E451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:63:2e:ca:d6:5d:53:6c:ec:57:a9:8b:f9:
73:e4:eb:70:c0:77:f0:2b:a2:02:1e:9f:2e:23:89:
22:5e:91:92:c5:da:5f:f9:2c:fd:70:5b:f7:71:aa:
57:09:14:90:c6:fa:6d:cb:1c:05:13:46:36:2b:84:
a2:55:ec:c4:de:d3:e7:91:96:90:96:06:2f:8b:31:
13:bc:ec:51:03:8a:96:f9:f7:ca:5b:7e:40:55:67:
13:2b:4d:a2:7b:61:19:a5:b2:4b:46:e5:44:ed:d9:
3d:c1:30:84:71:a3:58:9d:54:91:3a:41:2f:f7:39:
d5:bb:e3:0b:72:3e:de:08:ce:ca:9c:d4:ba:b2:a8:
82:bc:83:6b:91:33:4d:80:c1:fa:c8:28:c7:4c:0c:
4c:3b:4f:8b:e2:ec:16:1a:15:63:82:ba:ec:d7:fd:
8a:5f:bb:58:af:a4:ae:aa:27:07:54:db:e3:83:ff:
6b:6b:20:1c:b5:98:3f:c1:4e:50:7c:86:4e:de:53:
22:98:f5:66:00:48:dd:bd:4f:b8:10:97:ef:40:7f:
4b:3a:22:ea:e7:fb:f1:7e:bf:ce:88:68:29:a4:f4:
6e:4c:b5:7d:bb:e8:94:3c:cd:2f:7e:c2:e6:42:15:
57:cd:1b:8c:d5:5d:cd:b1:d1:27:9b:de:be:a3:7d:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:E1:6B:8E:15:90:5E:B3:DD:2B:0A:8F:67:F8:53:14:A4:E4:51
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.111.144.0/24
103.129.216.0/22
103.154.136.0/24
202.150.64.0/19
IPv6:
2400:dc00::/32
Signature Algorithm: sha256WithRSAEncryption
70:f3:ff:a5:e2:e9:ae:f6:aa:f0:1f:57:fa:ba:be:e2:6e:70:
02:de:e4:0d:21:de:9a:4e:28:d6:f2:86:8e:6a:d2:48:29:a7:
dd:ed:2f:89:97:01:dc:79:12:29:f0:31:56:05:75:b9:d7:de:
bd:5e:13:4c:0c:50:11:e3:b3:6e:76:c7:71:3d:0b:fd:9b:b0:
2f:6b:70:46:39:30:aa:68:9f:33:51:6e:c7:82:77:09:7d:48:
ff:85:eb:6f:f5:62:45:db:43:fd:a7:7a:99:7d:4f:4f:52:a3:
e1:8e:b6:f9:1a:64:09:c9:f6:76:db:09:c4:ab:85:06:53:34:
4c:5d:a3:18:e1:0b:a5:76:95:31:d3:17:f2:ad:fe:26:a4:f6:
53:3c:33:f4:ef:42:36:36:2a:95:26:93:45:fd:d7:f6:5d:90:
f9:be:69:25:3b:6a:19:12:65:af:5e:8d:76:8b:25:dd:b4:ab:
b8:e0:ac:57:d8:84:e8:80:35:c6:18:c9:64:5d:d5:dc:71:76:
9e:1d:6b:09:69:c3:54:6f:f5:3b:d4:cf:5b:00:7c:34:44:fb:
29:c0:23:a0:30:b5:21:1c:f3:71:f1:cc:4a:69:e5:45:ab:02:
ee:f5:2d:e4:ef:25:f2:3f:4d:a6:94:b3:47:3a:bb:6a:68:7f:
52:37:4b:3c
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIUerSEowNq2SPGDAPh4ErKZm8c6XwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyMDA2MzE0OVoX
DTI3MTAxOTA2MzY0OVowMzExMC8GA1UEAxMoMkJDM0UxNkI4RTE1OTA1RUIzREQy
QjBBOEY2N0Y4NTMxNEE0RTQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALxGYy7K1l1TbOxXqYv5c+TrcMB38CuiAh6fLiOJIl6RksXaX/ks/XBb93Gq
VwkUkMb6bcscBRNGNiuEolXsxN7T55GWkJYGL4sxE7zsUQOKlvn3ylt+QFVnEytN
onthGaWyS0blRO3ZPcEwhHGjWJ1UkTpBL/c51bvjC3I+3gjOypzUurKogryDa5Ez
TYDB+sgox0wMTDtPi+LsFhoVY4K67Nf9il+7WK+krqonB1Tb44P/a2sgHLWYP8FO
UHyGTt5TIpj1ZgBI3b1PuBCX70B/Szoi6uf78X6/zohoKaT0bky1fbvolDzNL37C
5kIVV80bjNVdzbHRJ5vevqN9JoECAwEAAaOCAewwggHoMB0GA1UdDgQWBBQrw+Fr
jhWQXrPdKwqPZ/hTFKTkUTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjM5NDcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgAB
MBgDBABnb5ADBAJngdgDBABnmogDBAXKlkAwDQQCAAIwBwMFACQA3AAwDQYJKoZI
hvcNAQELBQADggEBAHDz/6Xi6a72qvAfV/q6vuJucALe5A0h3ppOKNbyho5q0kgp
p93tL4mXAdx5EinwMVYFdbnX3r1eE0wMUBHjs252x3E9C/2bsC9rcEY5MKponzNR
bseCdwl9SP+F62/1YkXbQ/2nepl9T09So+GOtvkaZAnJ9nbbCcSrhQZTNExdoxjh
C6V2lTHTF/Kt/iak9lM8M/TvQjY2KpUmk0X91/ZdkPm+aSU7ahkSZa9ejXaLJd20
q7jgrFfYhOiANcYYyWRd1dxxdp4dawlpw1Rv9TvUz1sAfDRE+ynAI6AwtSEc83Hx
zEpp5UWrAu71LeTvJfI/TaaUs0c6u2pof1I3Szw=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:55:08 2026 by rpki-client