Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
File: AS45305.roa (raw, json)
Hash identifier: gimkDE1xJPzMAYFptn/aR3wvRC8sQ2UQbBSzYnZOhiI=
Subject key identifier: FB:FC:4C:D3:0A:75:91:E3:30:8E:76:95:4D:EF:28:79:EF:40:1C:B7
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 326011065C27F4770638482BA3C45BB0AD0DC931
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
Signing time: Tue 09 Jun 2026 04:46:40 +0000
ROA not before: Tue 09 Jun 2026 04:41:40 +0000
ROA not after: Tue 08 Jun 2027 04:46:40 +0000
asID: 45305
IP address blocks: 103.22.99.0/24 maxlen: 24
103.46.10.0/23 maxlen: 24
103.51.204.0/24 maxlen: 24
103.51.205.0/24 maxlen: 24
103.54.80.0/23 maxlen: 24
103.83.98.0/24 maxlen: 24
103.87.148.0/23 maxlen: 24
103.98.122.0/24 maxlen: 24
103.100.180.0/24 maxlen: 24
103.100.181.0/24 maxlen: 24
103.114.52.0/24 maxlen: 24
103.130.116.0/24 maxlen: 24
103.130.117.0/24 maxlen: 24
103.134.223.0/24 maxlen: 24
103.162.60.0/24 maxlen: 24
103.162.61.0/24 maxlen: 24
103.164.228.0/24 maxlen: 24
103.175.240.0/24 maxlen: 24
103.175.241.0/24 maxlen: 24
103.183.254.0/24 maxlen: 24
103.184.180.0/23 maxlen: 24
103.189.96.0/24 maxlen: 24
103.189.97.0/24 maxlen: 24
103.190.114.0/23 maxlen: 24
103.220.22.0/23 maxlen: 24
103.251.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:60:11:06:5c:27:f4:77:06:38:48:2b:a3:c4:5b:b0:ad:0d:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 9 04:41:40 2026 GMT
Not After : Jun 8 04:46:40 2027 GMT
Subject: CN=FBFC4CD30A7591E3308E76954DEF2879EF401CB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:b5:cb:93:94:48:11:77:32:44:35:35:33:
77:c6:8c:0d:b1:42:5a:4e:0f:f3:08:f8:76:05:d5:
b0:3c:7c:25:86:bc:65:bd:bc:b9:b8:19:e9:2a:40:
5d:92:59:99:69:b7:a6:43:e7:80:53:01:c8:ce:5e:
74:c7:4b:b0:95:02:a6:58:92:0b:5f:f2:8e:92:6a:
fc:31:18:35:3a:9f:ba:e7:c3:3e:d7:17:28:1e:f8:
a1:89:9b:58:09:1f:90:9e:b3:27:26:ab:07:2a:e7:
af:af:89:23:af:ed:d0:6e:60:24:ef:11:18:80:04:
16:d1:7a:eb:6d:e3:fb:29:b5:19:9c:f6:1c:12:8d:
07:0a:8c:91:3e:f8:f6:b1:28:9b:f4:31:cc:95:fc:
d9:88:9a:0f:1b:77:27:5b:2e:77:d4:f5:76:54:ba:
05:a4:b8:5c:d8:9a:fe:5c:1b:3b:e9:30:5f:15:0d:
29:61:b0:f2:d8:7f:c2:11:1f:cf:d6:1b:64:d1:96:
e7:f5:13:65:3a:d5:76:94:aa:2c:be:d7:17:de:0a:
cd:22:ed:26:ae:07:8b:a1:93:4e:f4:ef:a6:5f:5f:
9c:db:57:f8:0f:20:53:1d:1a:fa:f6:af:b5:17:25:
f4:f9:86:1f:cc:ef:20:d6:55:1b:a7:a0:f2:4f:cf:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FC:4C:D3:0A:75:91:E3:30:8E:76:95:4D:EF:28:79:EF:40:1C:B7
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.99.0/24
103.46.10.0/23
103.51.204.0/23
103.54.80.0/23
103.83.98.0/24
103.87.148.0/23
103.98.122.0/24
103.100.180.0/23
103.114.52.0/24
103.130.116.0/23
103.134.223.0/24
103.162.60.0/23
103.164.228.0/24
103.175.240.0/23
103.183.254.0/24
103.184.180.0/23
103.189.96.0/23
103.190.114.0/23
103.220.22.0/23
103.251.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ce:ce:d6:41:47:93:48:83:f2:10:0a:f4:31:38:dd:f3:a9:
d1:8d:22:79:79:e3:8e:a4:09:02:78:31:ab:5d:32:e2:1e:d8:
2f:ec:f6:34:66:07:ed:ac:2f:c4:0d:6b:6e:a4:cb:6c:9f:69:
f6:7d:16:9c:8e:2f:5e:3e:58:76:78:d4:81:06:11:0f:84:06:
a6:1e:76:36:59:8d:8f:2c:af:43:d4:79:ca:07:ba:f2:b6:91:
4f:a5:c9:47:83:f0:82:28:fe:cf:af:0b:d7:64:89:da:c5:05:
eb:db:60:bd:dd:9f:6c:e6:b8:08:65:31:58:43:c7:09:24:b5:
a6:d6:45:d3:10:b9:6f:0a:62:2c:79:1c:80:27:8d:53:be:29:
70:ea:3d:c6:bd:0c:d0:6a:69:28:76:0c:af:c8:1d:f3:d5:fb:
07:6b:c0:10:b6:1d:02:ae:29:41:e9:1f:86:bf:16:74:85:76:
af:57:46:3c:05:11:d6:92:fe:e6:51:2b:0e:2e:e1:4b:89:75:
9c:36:82:5f:70:23:a0:77:d0:da:c1:43:12:31:5f:95:33:a8:
4c:14:07:eb:6f:0f:6f:15:13:de:f7:0e:69:1a:5c:67:3a:6b:
7a:a4:68:33:8a:ee:ad:80:22:03:de:7b:2d:e3:e0:a4:2d:ea:
f1:28:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:25:53 2026 by rpki-client