Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS4800.roa
File: AS4800.roa (raw, json)
Hash identifier: ztw6h9RIW/nNDgXAIHETQKOnEBJMbOmDtSs//4MzSmQ=
Subject key identifier: 0F:5C:88:66:67:60:58:24:F2:08:D8:F2:32:B1:C6:71:EB:D0:F5:50
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5F2772770CDA3E4B297EB7B3D4AA3C1873778BE4
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS4800.roa
Signing time: Mon 08 Jun 2026 07:32:59 +0000
ROA not before: Mon 08 Jun 2026 07:27:59 +0000
ROA not after: Mon 07 Jun 2027 07:32:59 +0000
asID: 4800
IP address blocks: 36.50.64.0/23 maxlen: 24
36.50.66.0/23 maxlen: 24
36.50.68.0/23 maxlen: 24
36.50.70.0/23 maxlen: 24
36.50.120.0/23 maxlen: 24
36.50.136.0/23 maxlen: 24
36.50.242.0/23 maxlen: 24
36.50.244.0/23 maxlen: 24
36.50.246.0/23 maxlen: 24
103.1.156.0/23 maxlen: 24
103.7.194.0/23 maxlen: 24
103.8.64.0/23 maxlen: 24
103.8.66.0/23 maxlen: 24
103.8.184.0/23 maxlen: 24
103.8.186.0/23 maxlen: 24
103.8.192.0/23 maxlen: 24
103.8.194.0/23 maxlen: 24
103.9.140.0/23 maxlen: 24
103.12.206.0/23 maxlen: 24
103.12.224.0/23 maxlen: 24
103.12.226.0/23 maxlen: 24
103.13.4.0/23 maxlen: 24
103.39.198.0/23 maxlen: 24
103.40.0.0/23 maxlen: 24
103.42.246.0/23 maxlen: 24
103.43.56.0/23 maxlen: 24
103.43.58.0/23 maxlen: 24
103.43.60.0/23 maxlen: 24
103.43.62.0/23 maxlen: 24
103.44.8.0/23 maxlen: 24
103.44.10.0/23 maxlen: 24
103.44.92.0/23 maxlen: 24
103.44.94.0/23 maxlen: 24
103.44.152.0/23 maxlen: 24
103.44.154.0/23 maxlen: 24
103.55.248.0/23 maxlen: 24
103.55.250.0/23 maxlen: 24
103.60.92.0/23 maxlen: 24
103.60.94.0/23 maxlen: 24
103.65.120.0/23 maxlen: 24
103.65.122.0/23 maxlen: 24
103.65.124.0/23 maxlen: 24
103.65.126.0/23 maxlen: 24
103.101.40.0/23 maxlen: 24
103.101.164.0/23 maxlen: 24
103.102.48.0/23 maxlen: 24
103.102.54.0/23 maxlen: 24
103.103.4.0/23 maxlen: 24
103.103.216.0/23 maxlen: 24
103.104.8.0/23 maxlen: 24
103.106.12.0/23 maxlen: 24
103.108.80.0/23 maxlen: 24
103.108.84.0/23 maxlen: 24
103.142.104.0/23 maxlen: 24
103.149.24.0/23 maxlen: 24
103.152.80.0/23 maxlen: 24
103.168.122.0/23 maxlen: 24
103.168.124.0/23 maxlen: 24
103.168.126.0/23 maxlen: 24
103.168.128.0/23 maxlen: 24
103.168.130.0/23 maxlen: 24
103.168.132.0/23 maxlen: 24
103.168.136.0/23 maxlen: 24
103.169.16.0/23 maxlen: 24
103.169.18.0/23 maxlen: 24
103.169.20.0/23 maxlen: 24
103.169.22.0/23 maxlen: 24
103.169.24.0/23 maxlen: 24
103.169.26.0/23 maxlen: 24
103.169.28.0/23 maxlen: 24
103.169.30.0/23 maxlen: 24
103.175.210.0/23 maxlen: 24
103.183.60.0/23 maxlen: 24
103.183.186.0/23 maxlen: 24
103.187.150.0/23 maxlen: 24
103.187.152.0/23 maxlen: 24
103.187.154.0/23 maxlen: 24
103.187.156.0/23 maxlen: 24
103.187.184.0/23 maxlen: 24
103.187.186.0/23 maxlen: 24
103.187.188.0/23 maxlen: 24
103.187.218.0/23 maxlen: 24
103.187.220.0/23 maxlen: 24
103.187.234.0/23 maxlen: 24
103.187.236.0/23 maxlen: 24
103.188.32.0/23 maxlen: 24
103.188.34.0/23 maxlen: 24
103.188.36.0/23 maxlen: 24
103.188.38.0/23 maxlen: 24
103.190.222.0/23 maxlen: 24
103.190.224.0/23 maxlen: 24
103.191.0.0/23 maxlen: 24
103.191.2.0/23 maxlen: 24
103.191.4.0/23 maxlen: 24
103.191.6.0/23 maxlen: 24
103.191.8.0/23 maxlen: 24
103.191.10.0/23 maxlen: 24
103.191.12.0/23 maxlen: 24
103.200.204.0/23 maxlen: 24
103.200.206.0/23 maxlen: 24
103.203.68.0/23 maxlen: 24
103.203.70.0/23 maxlen: 24
103.203.204.0/23 maxlen: 24
103.203.206.0/23 maxlen: 24
103.252.86.0/23 maxlen: 24
103.253.164.0/23 maxlen: 24
103.254.124.0/23 maxlen: 24
113.192.32.0/23 maxlen: 24
113.192.34.0/23 maxlen: 24
113.192.36.0/23 maxlen: 24
113.192.38.0/23 maxlen: 24
210.87.94.0/23 maxlen: 24
210.87.102.0/23 maxlen: 24
2400:8000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:27:72:77:0c:da:3e:4b:29:7e:b7:b3:d4:aa:3c:18:73:77:8b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 8 07:27:59 2026 GMT
Not After : Jun 7 07:32:59 2027 GMT
Subject: CN=0F5C886667605824F208D8F232B1C671EBD0F550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:eb:bb:4b:f0:e9:5a:82:de:d9:22:86:42:2f:
94:1d:fb:78:53:6c:28:35:da:94:6c:04:3b:e4:9c:
80:d8:e7:4a:7f:a6:30:d7:a7:3a:c2:1f:98:b9:c1:
ef:c3:3a:66:2c:30:74:2e:98:64:ed:ee:05:a0:43:
af:92:de:8c:4d:70:06:8f:e1:8e:4f:4f:52:ab:4e:
d3:02:19:8b:04:26:50:8b:13:bf:4f:35:f6:d0:3f:
78:42:c2:2e:cd:b2:48:b1:05:3b:88:6f:bc:3a:ba:
3a:ca:44:c6:6f:7f:7e:78:e1:30:a0:e6:7c:b5:5a:
31:83:ed:99:19:62:f2:79:8a:57:93:6d:6f:62:ac:
1f:58:98:d0:55:0e:63:ff:21:c0:99:30:60:d8:80:
c3:83:cf:2a:ae:1d:2f:bd:02:6c:c8:1c:b7:54:d4:
d6:e5:58:a1:b5:09:1d:9f:9d:20:02:b2:5c:40:4b:
b0:da:bb:5a:03:ee:d8:fa:da:09:44:56:1d:1c:cf:
db:4d:d5:2b:e4:0b:61:9d:63:d1:b2:19:ca:a2:f9:
04:83:36:b9:af:21:41:2b:4f:f2:67:ad:67:57:d9:
55:2d:97:8e:26:10:07:94:fc:30:0a:a6:ce:3c:bb:
a7:1a:4a:fc:8c:fe:95:c0:f2:df:0e:1b:7e:dd:3a:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:88:66:67:60:58:24:F2:08:D8:F2:32:B1:C6:71:EB:D0:F5:50
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS4800.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.64.0/21
36.50.120.0/23
36.50.136.0/23
36.50.242.0-36.50.247.255
103.1.156.0/23
103.7.194.0/23
103.8.64.0/22
103.8.184.0/22
103.8.192.0/22
103.9.140.0/23
103.12.206.0/23
103.12.224.0/22
103.13.4.0/23
103.39.198.0/23
103.40.0.0/23
103.42.246.0/23
103.43.56.0/21
103.44.8.0/22
103.44.92.0/22
103.44.152.0/22
103.55.248.0/22
103.60.92.0/22
103.65.120.0/21
103.101.40.0/23
103.101.164.0/23
103.102.48.0/23
103.102.54.0/23
103.103.4.0/23
103.103.216.0/23
103.104.8.0/23
103.106.12.0/23
103.108.80.0/23
103.108.84.0/23
103.142.104.0/23
103.149.24.0/23
103.152.80.0/23
103.168.122.0-103.168.133.255
103.168.136.0/23
103.169.16.0/20
103.175.210.0/23
103.183.60.0/23
103.183.186.0/23
103.187.150.0-103.187.157.255
103.187.184.0-103.187.189.255
103.187.218.0-103.187.221.255
103.187.234.0-103.187.237.255
103.188.32.0/21
103.190.222.0-103.190.225.255
103.191.0.0-103.191.13.255
103.200.204.0/22
103.203.68.0/22
103.203.204.0/22
103.252.86.0/23
103.253.164.0/23
103.254.124.0/23
113.192.32.0/21
210.87.94.0/23
210.87.102.0/23
IPv6:
2400:8000::/32
Signature Algorithm: sha256WithRSAEncryption
15:e7:0f:0e:b3:59:1a:58:76:57:41:06:a4:7c:15:3e:ce:f2:
93:f3:ca:97:87:4d:96:c0:4a:44:1b:34:d4:10:4f:82:4f:92:
1d:27:44:b0:7b:85:76:fe:00:b9:cd:49:95:02:e6:e3:b1:0d:
52:ad:93:19:b4:6a:12:19:ac:4b:70:c7:cb:f7:47:ce:a0:93:
4f:4d:0d:8e:34:31:54:88:f9:3b:bb:f4:47:37:13:4e:2d:57:
86:c5:87:a2:c5:78:fa:3d:7f:ca:4a:b7:8d:f6:fa:6c:c7:63:
40:e9:70:7c:8f:1d:9b:ec:be:9a:ff:63:db:26:57:6d:98:a8:
ed:4f:dd:27:e2:45:53:db:9f:ac:52:e0:f2:11:bd:c6:b3:49:
c0:b5:d0:07:fe:9b:dd:e1:36:e6:2b:f2:a7:76:bc:0b:cc:3f:
49:a3:07:96:70:8e:25:da:8a:2f:67:13:38:02:dd:a6:04:85:
9c:07:b0:0b:18:7e:6d:e7:47:1a:c4:aa:43:0f:79:48:34:52:
39:e4:be:48:32:5e:4d:5c:b5:ee:eb:b6:a4:2e:94:df:3e:dc:
ea:c0:82:a4:5d:2b:0b:18:1b:ab:3a:4c:4e:b1:b2:d9:d9:ae:
e3:86:53:04:83:8f:4e:eb:7c:55:bf:c0:64:b5:dd:41:1f:1d:
79:d7:37:63
-----BEGIN CERTIFICATE-----
MIIGhTCCBW2gAwIBAgIUXydydwzaPkspfrez1Ko8GHN3i+QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYwODA3Mjc1OVoX
DTI3MDYwNzA3MzI1OVowMzExMC8GA1UEAxMoMEY1Qzg4NjY2NzYwNTgyNEYyMDhE
OEYyMzJCMUM2NzFFQkQwRjU1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPbru0vw6VqC3tkihkIvlB37eFNsKDXalGwEO+ScgNjnSn+mMNenOsIfmLnB
78M6ZiwwdC6YZO3uBaBDr5LejE1wBo/hjk9PUqtO0wIZiwQmUIsTv0819tA/eELC
Ls2ySLEFO4hvvDq6OspExm9/fnjhMKDmfLVaMYPtmRli8nmKV5Ntb2KsH1iY0FUO
Y/8hwJkwYNiAw4PPKq4dL70CbMgct1TU1uVYobUJHZ+dIAKyXEBLsNq7WgPu2Pra
CURWHRzP203VK+QLYZ1j0bIZyqL5BIM2ua8hQStP8metZ1fZVS2XjiYQB5T8MAqm
zjy7pxpK/Iz+lcDy3w4bft061eMCAwEAAaOCA3gwggN0MB0GA1UdDgQWBBQPXIhm
Z2BYJPII2PIyscZx69D1UDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBQBggrBgEFBQcBCwREMEIwQAYIKwYBBQUHMAuGNHJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDgwMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAcsGCCsGAQUFBwEHAQH/BIIBujCCAbYw
ggGjBAIAATCCAZsDBAMkMkADBAEkMngDBAEkMogwDAMEASQy8gMEAyQy8AMEAWcB
nAMEAWcHwgMEAmcIQAMEAmcIuAMEAmcIwAMEAWcJjAMEAWcMzgMEAmcM4AMEAWcN
BAMEAWcnxgMEAWcoAAMEAWcq9gMEA2crOAMEAmcsCAMEAmcsXAMEAmcsmAMEAmc3
+AMEAmc8XAMEA2dBeAMEAWdlKAMEAWdlpAMEAWdmMAMEAWdmNgMEAWdnBAMEAWdn
2AMEAWdoCAMEAWdqDAMEAWdsUAMEAWdsVAMEAWeOaAMEAWeVGAMEAWeYUDAMAwQB
Z6h6AwQBZ6iEAwQBZ6iIAwQEZ6kQAwQBZ6/SAwQBZ7c8AwQBZ7e6MAwDBAFnu5YD
BAFnu5wwDAMEA2e7uAMEAWe7vDAMAwQBZ7vaAwQBZ7vcMAwDBAFnu+oDBAFnu+wD
BANnvCAwDAMEAWe+3gMEAWe+4DALAwMAZ78DBAFnvwwDBAJnyMwDBAJny0QDBAJn
y8wDBAFn/FYDBAFn/aQDBAFn/nwDBANxwCADBAHSV14DBAHSV2YwDQQCAAIwBwMF
ACQAgAAwDQYJKoZIhvcNAQELBQADggEBABXnDw6zWRpYdldBBqR8FT7O8pPzypeH
TZbASkQbNNQQT4JPkh0nRLB7hXb+ALnNSZUC5uOxDVKtkxm0ahIZrEtwx8v3R86g
k09NDY40MVSI+Tu79Ec3E04tV4bFh6LFePo9f8pKt432+mzHY0DpcHyPHZvsvpr/
Y9smV22YqO1P3SfiRVPbn6xS4PIRvcazScC10Af+m93hNuYr8qd2vAvMP0mjB5Zw
jiXaii9nEzgC3aYEhZwHsAsYfm3nRxrEqkMPeUg0UjnkvkgyXk1cte7rtqQulN8+
3OrAgqRdKwsYG6s6TE6xstnZruOGUwSDj07rfFW/wGS13UEfHXnXN2M=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:48:54 2026 by rpki-client