Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS58369.roa
File: AS58369.roa (raw, json)
Hash identifier: C00CFKEQlFG1h3IzU0fWzloJZ2/AMmfYYHoNByMWhus=
Subject key identifier: FD:8A:34:A2:EC:FE:80:A3:5B:C7:3F:97:D0:2D:31:F1:22:0E:A1:C8
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 661F10EA26C23784641E9443F6D5B282379A91CF
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58369.roa
Signing time: Mon 08 Jun 2026 02:16:12 +0000
ROA not before: Mon 08 Jun 2026 02:11:12 +0000
ROA not after: Mon 07 Jun 2027 02:16:12 +0000
asID: 58369
IP address blocks: 103.18.46.0/23 maxlen: 24
103.41.250.0/23 maxlen: 24
103.75.64.0/23 maxlen: 24
103.130.182.0/23 maxlen: 24
103.132.200.0/23 maxlen: 24
103.139.166.0/23 maxlen: 24
103.144.21.0/24 maxlen: 24
103.144.126.0/23 maxlen: 24
103.144.212.0/23 maxlen: 24
103.148.232.0/23 maxlen: 24
103.151.14.0/23 maxlen: 24
103.153.186.0/23 maxlen: 24
103.156.216.0/23 maxlen: 24
103.157.82.0/23 maxlen: 24
103.159.220.0/23 maxlen: 24
103.165.244.0/23 maxlen: 24
103.166.210.0/23 maxlen: 24
103.167.12.0/23 maxlen: 24
103.167.108.0/23 maxlen: 24
103.167.108.0/24 maxlen: 24
103.167.109.0/24 maxlen: 24
103.168.168.0/23 maxlen: 24
103.172.248.0/23 maxlen: 24
103.173.76.0/23 maxlen: 24
103.177.104.0/23 maxlen: 24
103.188.170.0/23 maxlen: 24
103.224.73.0/24 maxlen: 24
115.187.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1f:10:ea:26:c2:37:84:64:1e:94:43:f6:d5:b2:82:37:9a:91:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 8 02:11:12 2026 GMT
Not After : Jun 7 02:16:12 2027 GMT
Subject: CN=FD8A34A2ECFE80A35BC73F97D02D31F1220EA1C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:9d:d9:2c:1b:6e:27:c0:44:4f:04:49:5e:
16:64:d3:6a:6d:67:a0:74:7a:d5:87:84:f6:5e:8d:
da:f0:ff:99:e1:43:25:4e:4c:e9:c0:92:97:22:e1:
a1:77:b6:2b:8d:7c:08:bb:bf:f6:86:ab:98:95:0a:
06:f6:57:2e:6b:64:58:58:6e:75:a3:dd:c5:fd:de:
11:0e:7e:c6:72:89:28:bc:0b:9a:51:02:66:2f:d9:
82:72:46:09:69:77:f8:3e:41:a2:a8:54:49:56:5c:
d0:3c:e3:de:a7:f8:3b:0b:98:a6:6b:c3:9d:d6:18:
95:f2:d3:52:9e:2d:87:c7:bc:32:d9:4e:f6:c6:ed:
51:e2:ea:5a:cf:97:0c:5d:78:67:03:1d:20:ce:2e:
90:fa:54:27:cc:ab:2e:34:d5:a7:73:49:6c:19:e1:
65:92:62:a8:e2:d4:61:6c:da:03:ce:3c:37:6f:ba:
19:9b:ed:84:e0:7c:12:bd:fc:4f:44:75:df:8a:5d:
56:a3:e5:45:08:17:ee:ec:10:7a:3b:e7:01:bc:a3:
6b:d2:38:90:6c:48:d6:0e:cc:36:53:05:d3:9b:ad:
e1:97:3c:d3:63:73:26:75:8d:64:93:4b:8c:7b:7a:
f0:3c:79:64:85:6c:84:15:e7:ce:93:70:c1:8a:c5:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:34:A2:EC:FE:80:A3:5B:C7:3F:97:D0:2D:31:F1:22:0E:A1:C8
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS58369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.46.0/23
103.41.250.0/23
103.75.64.0/23
103.130.182.0/23
103.132.200.0/23
103.139.166.0/23
103.144.21.0/24
103.144.126.0/23
103.144.212.0/23
103.148.232.0/23
103.151.14.0/23
103.153.186.0/23
103.156.216.0/23
103.157.82.0/23
103.159.220.0/23
103.165.244.0/23
103.166.210.0/23
103.167.12.0/23
103.167.108.0/23
103.168.168.0/23
103.172.248.0/23
103.173.76.0/23
103.177.104.0/23
103.188.170.0/23
103.224.73.0/24
115.187.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:bf:e7:25:a3:23:f9:cc:d8:53:93:85:9e:26:91:9e:dc:df:
65:9e:27:62:4f:8c:d8:f4:20:8c:62:87:c1:bf:58:57:6a:47:
c2:4e:32:69:bf:a5:f5:84:b1:bf:c1:19:0f:23:61:e2:a9:eb:
ce:9a:6f:b7:46:26:1b:bb:b3:3b:fc:f5:de:46:8c:56:bb:cf:
39:40:12:23:48:f7:2e:13:be:87:0b:eb:92:18:1a:dc:f8:e5:
9c:0c:8e:83:6f:40:92:53:56:c5:ec:fa:6d:76:3d:62:e7:99:
a0:a8:df:53:0d:d5:77:21:6f:92:01:0f:35:db:bf:f5:8c:2e:
7d:6c:cd:62:a9:9b:05:d0:ef:a1:05:43:58:a3:49:1c:58:8a:
f0:89:3a:2d:f4:2f:ff:a0:61:3a:ed:17:cf:1f:d2:e6:73:bc:
1d:d6:61:f7:17:b8:fc:e8:ac:b9:30:b7:25:a6:0e:2a:60:7b:
11:5d:6d:7c:d9:c5:07:7e:82:0d:31:c9:30:8e:a0:02:ef:26:
a1:ca:6b:61:75:a4:70:5f:98:3c:e8:14:48:af:00:14:29:03:
41:e4:5f:65:bb:67:7c:fe:63:96:c9:85:b3:58:81:19:46:9a:
ae:83:b4:ee:7a:c8:cd:e5:bc:86:85:96:e5:ad:7f:1d:2b:17:
bd:c1:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:48:37 2026 by rpki-client