Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS4787.roa
File: AS4787.roa (raw, json)
Hash identifier: Q8SUEMtSsx/yulFikcQaNCH9FPaM4mN1pxpiU+gwLh0=
Subject key identifier: 05:E2:7E:32:4B:F0:B1:63:BB:64:F6:A0:91:28:61:72:D6:C9:D2:12
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4E8D5EB15B08AB3ADF01B783D636F5E77FEC3F5E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS4787.roa
Signing time: Fri 06 Nov 2026 09:34:21 +0000
ROA not before: Fri 06 Nov 2026 09:29:21 +0000
ROA not after: Fri 05 Nov 2027 09:34:21 +0000
asID: 4787
IP address blocks: 103.86.152.0/22 maxlen: 24
103.109.160.0/23 maxlen: 24
103.109.172.0/22 maxlen: 24
103.111.200.0/22 maxlen: 24
103.112.222.0/24 maxlen: 24
103.113.48.0/22 maxlen: 24
103.113.52.0/22 maxlen: 24
103.113.73.0/24 maxlen: 24
103.114.173.0/24 maxlen: 24
103.164.132.0/23 maxlen: 24
103.164.134.0/23 maxlen: 24
202.51.24.0/21 maxlen: 24
2403:3440::/32 maxlen: 48
2403:34c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8d:5e:b1:5b:08:ab:3a:df:01:b7:83:d6:36:f5:e7:7f:ec:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Nov 6 09:29:21 2026 GMT
Not After : Nov 5 09:34:21 2027 GMT
Subject: CN=05E27E324BF0B163BB64F6A091286172D6C9D212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:1e:7c:e1:f3:12:4e:59:c4:d7:d3:aa:05:
ea:fc:86:71:e4:3f:4e:be:de:35:da:fb:a2:5b:0b:
f2:a2:18:f4:6c:b7:5c:40:06:30:f4:16:d6:9d:8e:
92:ae:2d:12:6b:97:ff:85:dd:aa:49:b0:7d:4b:11:
35:da:09:18:d3:98:97:59:10:92:a8:dc:f4:d8:19:
0d:00:2b:27:3a:47:51:9a:93:70:6f:8b:78:04:94:
a1:a8:7b:c9:cf:2a:5f:8e:6f:1e:95:fa:21:06:80:
3e:a2:0e:fe:55:c0:19:38:48:29:12:29:16:cc:22:
ce:bd:0d:f4:0f:33:c6:86:de:f4:a3:86:6f:5a:ee:
42:5e:41:8f:09:6f:41:b7:c1:8a:48:a6:c7:b8:aa:
b5:78:b3:5c:7e:b9:42:6f:f1:8d:92:b9:88:b0:45:
92:48:15:c5:ce:0b:2e:db:f2:69:5b:ed:b0:d6:01:
41:59:f4:b1:ae:43:e1:57:82:85:e6:92:83:f7:e9:
21:a4:96:e6:52:32:26:e4:eb:10:c6:0f:71:a4:c2:
ad:e9:dc:b6:7b:a5:4b:a2:61:38:b6:ca:df:be:ad:
96:f4:45:c7:b8:e9:9e:8b:8c:e4:be:99:3d:48:53:
7f:3b:df:85:8f:4d:25:7f:c1:7c:93:55:29:b6:47:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E2:7E:32:4B:F0:B1:63:BB:64:F6:A0:91:28:61:72:D6:C9:D2:12
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS4787.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.152.0/22
103.109.160.0/23
103.109.172.0/22
103.111.200.0/22
103.112.222.0/24
103.113.48.0/21
103.113.73.0/24
103.114.173.0/24
103.164.132.0/22
202.51.24.0/21
IPv6:
2403:3440::/32
2403:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:45:87:32:5b:95:86:d9:16:21:77:79:78:a4:b6:2c:1d:0d:
40:59:94:3a:94:da:f4:cd:7f:71:3c:89:63:03:89:25:85:d0:
72:9c:04:1f:10:04:b3:40:14:ae:f3:18:11:8f:70:87:36:60:
b8:b3:35:80:56:8e:a4:38:e5:f0:5b:32:7b:94:da:bd:04:7d:
2e:30:c3:00:54:f7:d7:b4:f9:8e:57:a6:dc:d3:09:80:7e:42:
2e:5d:00:73:d1:25:e0:c8:25:14:f8:4d:dd:a5:73:7b:1a:c8:
24:04:91:4d:f4:20:c4:8c:8f:79:6b:5f:aa:a3:cc:08:aa:5e:
74:6a:c8:0b:e1:96:17:ad:4d:46:39:af:d9:f2:4c:db:7d:d8:
88:e1:c3:78:06:f1:35:4d:6f:4d:8e:f0:1e:3a:29:b7:21:ca:
fa:fa:aa:74:55:4e:67:46:ff:26:3a:30:26:14:de:13:0c:c8:
94:ca:86:69:1a:d9:cb:34:b4:e0:86:5a:15:4a:89:5c:de:7d:
e9:ba:16:76:71:59:c1:3d:77:08:03:02:b8:fd:65:7f:fb:33:
e9:fc:23:6f:68:c5:fb:c4:97:19:b3:46:0e:df:f6:4b:bd:06:
25:c6:d7:d5:23:8e:6e:d3:89:ee:c2:13:35:8b:72:7d:50:5e:
d9:bc:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 17:30:56 2026 by rpki-client