Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38513.roa
File: AS38513.roa (raw, json)
Hash identifier: 1I8EX43uC1NMyI/nEydshbtgu9GKaFfCzP7cY0Jpv08=
Subject key identifier: D5:BE:FA:55:BF:5C:05:FF:63:F8:08:CE:3C:91:CB:3E:A2:9A:42:30
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 229979210C36209D8689F00DF0EBE3E2A48080BC
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38513.roa
Signing time: Mon 08 Jun 2026 08:21:05 +0000
ROA not before: Mon 08 Jun 2026 08:16:05 +0000
ROA not after: Mon 07 Jun 2027 08:21:05 +0000
asID: 38513
IP address blocks: 103.42.244.0/23 maxlen: 24
103.67.40.0/23 maxlen: 24
103.67.42.0/23 maxlen: 24
103.92.214.0/23 maxlen: 24
103.125.90.0/23 maxlen: 24
103.125.100.0/23 maxlen: 24
103.125.102.0/23 maxlen: 24
103.147.158.0/23 maxlen: 24
103.148.190.0/23 maxlen: 24
103.168.134.0/23 maxlen: 24
103.190.214.0/23 maxlen: 24
103.191.14.0/23 maxlen: 24
103.191.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:99:79:21:0c:36:20:9d:86:89:f0:0d:f0:eb:e3:e2:a4:80:80:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 8 08:16:05 2026 GMT
Not After : Jun 7 08:21:05 2027 GMT
Subject: CN=D5BEFA55BF5C05FF63F808CE3C91CB3EA29A4230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:3b:1d:eb:d5:7e:da:73:4a:aa:cd:6f:e5:
cf:75:c0:56:82:2a:21:46:b9:c0:b6:48:0f:4c:e1:
ad:d9:76:d4:fa:1e:cd:b8:dd:48:6d:2e:89:0b:f9:
80:e8:65:5b:b0:29:97:2b:17:cb:c4:29:94:90:81:
48:72:f4:6e:94:60:35:d2:5c:08:eb:e6:4f:df:1d:
83:6e:5f:40:ce:44:9d:ea:dc:f0:eb:0a:1b:23:1f:
bc:67:94:86:5b:f6:bd:20:45:13:5a:26:a8:f7:95:
dc:b1:9b:75:b4:e0:a3:1d:59:5f:2c:fb:53:99:09:
65:06:31:0a:b5:e8:b6:a0:fd:c6:e5:a0:f3:a2:b3:
2d:9a:da:60:ed:e2:a2:d6:f8:47:f6:0d:a1:03:90:
9b:71:e8:96:d6:f1:ff:64:70:8a:b1:30:f2:1b:4c:
1c:55:a5:59:d7:62:1a:5f:b8:33:d4:f0:1a:bf:1b:
8a:d6:67:30:c6:73:37:f9:42:81:ba:40:24:c3:eb:
74:87:9b:4f:bf:77:f9:c1:e7:7d:9c:66:33:96:44:
85:02:44:b6:4d:6b:e9:e9:97:b4:30:45:ae:64:80:
71:54:09:9b:62:0e:fd:92:11:74:e1:df:df:1b:ed:
dc:dd:af:78:5d:4b:89:ae:93:99:fb:aa:42:52:b4:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:FA:55:BF:5C:05:FF:63:F8:08:CE:3C:91:CB:3E:A2:9A:42:30
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.244.0/23
103.67.40.0/22
103.92.214.0/23
103.125.90.0/23
103.125.100.0/22
103.147.158.0/23
103.148.190.0/23
103.168.134.0/23
103.190.214.0/23
103.191.14.0-103.191.17.255
Signature Algorithm: sha256WithRSAEncryption
21:08:4f:89:ca:78:df:89:28:ff:ba:1e:98:f4:ac:d1:ee:10:
ab:75:e1:1d:47:50:28:2b:7b:ac:44:24:2b:09:88:e4:1c:22:
fb:ae:c9:91:a7:bc:20:0d:7b:1b:2a:0d:0a:72:8a:5e:f7:2d:
99:17:15:4c:0c:36:f5:fe:00:08:d6:0a:fb:22:74:c0:fd:67:
ac:8a:65:5b:3a:3e:ea:b0:37:23:a0:74:aa:1d:e2:10:46:1b:
14:df:89:92:4c:ce:5e:37:f4:21:f2:53:69:fd:ae:e6:5d:12:
99:71:af:21:bd:40:2c:08:82:04:b8:a9:78:bb:16:df:23:83:
f8:e2:dc:ad:79:05:91:ca:5e:b2:8a:b9:bf:f2:17:77:de:f6:
61:4f:24:88:10:46:bd:86:15:42:ea:c1:d7:3b:95:59:fc:67:
df:2f:0b:0c:9a:3e:a1:0e:48:27:ec:45:a9:66:1e:0b:f8:d1:
57:5e:fd:c5:5b:c4:f1:f1:02:61:6a:b1:e0:5f:09:f5:8d:8d:
69:69:66:8a:03:ab:85:73:d3:11:fa:61:ad:81:e5:bf:43:4b:
9c:21:ed:82:6f:f2:5a:6d:0f:0a:4c:3d:7d:27:9f:48:17:c9:
5f:4c:f3:7e:ad:16:f1:d5:22:cd:81:df:2d:6b:fd:f4:5e:7b:
6d:dd:28:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUIpl5IQw2IJ2GifAN8Ovj4qSAgLwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYwODA4MTYwNVoX
DTI3MDYwNzA4MjEwNVowMzExMC8GA1UEAxMoRDVCRUZBNTVCRjVDMDVGRjYzRjgw
OENFM0M5MUNCM0VBMjlBNDIzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANOiOx3r1X7ac0qqzW/lz3XAVoIqIUa5wLZID0zhrdl21PoezbjdSG0uiQv5
gOhlW7AplysXy8QplJCBSHL0bpRgNdJcCOvmT98dg25fQM5Enerc8OsKGyMfvGeU
hlv2vSBFE1omqPeV3LGbdbTgox1ZXyz7U5kJZQYxCrXotqD9xuWg86KzLZraYO3i
otb4R/YNoQOQm3Holtbx/2RwirEw8htMHFWlWddiGl+4M9TwGr8bitZnMMZzN/lC
gbpAJMPrdIebT793+cHnfZxmM5ZEhQJEtk1r6emXtDBFrmSAcVQJm2IO/ZIRdOHf
3xvt3N2veF1Lia6TmfuqQlK0AVcCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBTVvvpV
v1wF/2P4CM48kcs+oppCMDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzg1MTMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYIKwYBBQUHAQcBAf8ETjBMMEoEAgAB
MEQDBAFnKvQDBAJnQygDBAFnXNYDBAFnfVoDBAJnfWQDBAFnk54DBAFnlL4DBAFn
qIYDBAFnvtYwDAMEAWe/DgMEAWe/EDANBgkqhkiG9w0BAQsFAAOCAQEAIQhPicp4
34ko/7oemPSs0e4Qq3XhHUdQKCt7rEQkKwmI5Bwi+67Jkae8IA17GyoNCnKKXvct
mRcVTAw29f4ACNYK+yJ0wP1nrIplWzo+6rA3I6B0qh3iEEYbFN+JkkzOXjf0IfJT
af2u5l0SmXGvIb1ALAiCBLipeLsW3yOD+OLcrXkFkcpesoq5v/IXd972YU8kiBBG
vYYVQurB1zuVWfxn3y8LDJo+oQ5IJ+xFqWYeC/jRV179xVvE8fECYWqx4F8J9Y2N
aWlmigOrhXPTEfphrYHlv0NLnCHtgm/yWm0PCkw9fSefSBfJX0zzfq0W8dUizYHf
LWv99F57bd0o3g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:24:55 2026 by rpki-client