Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
File: AS63859.roa (raw, json)
Hash identifier: YT8BEpXocZ5txkHSQHmbh3kHOm1hwAR0W+27QoDmzvY=
Subject key identifier: 66:23:9D:5B:3A:BE:2D:24:2B:8E:5B:68:F0:51:6F:5C:F3:1F:F0:FA
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 2D2DCDC408FE6DC99EACCA565321D30D2F730F12
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
Signing time: Fri 12 Jun 2026 04:17:31 +0000
ROA not before: Fri 12 Jun 2026 04:12:31 +0000
ROA not after: Fri 11 Jun 2027 04:17:31 +0000
asID: 63859
IP address blocks: 36.50.112.0/23 maxlen: 24
36.50.114.0/23 maxlen: 24
36.50.138.0/23 maxlen: 24
36.50.142.0/23 maxlen: 24
36.50.150.0/23 maxlen: 24
103.47.132.0/22 maxlen: 24
103.106.156.0/22 maxlen: 24
103.106.156.0/24 maxlen: 24
103.106.157.0/24 maxlen: 24
103.106.158.0/24 maxlen: 24
103.106.159.0/24 maxlen: 24
103.119.48.0/21 maxlen: 24
103.119.48.0/22 maxlen: 24
103.119.52.0/22 maxlen: 24
103.119.60.0/22 maxlen: 24
103.119.64.0/22 maxlen: 24
103.120.168.0/21 maxlen: 24
103.120.168.0/22 maxlen: 24
103.120.172.0/22 maxlen: 24
103.121.16.0/21 maxlen: 24
103.121.16.0/22 maxlen: 24
103.121.20.0/22 maxlen: 24
103.125.36.0/22 maxlen: 24
103.125.40.0/22 maxlen: 24
103.125.48.0/22 maxlen: 24
103.125.56.0/22 maxlen: 24
103.129.16.0/23 maxlen: 24
103.129.92.0/22 maxlen: 24
103.129.104.0/22 maxlen: 24
103.129.150.0/23 maxlen: 24
103.129.172.0/23 maxlen: 24
103.129.174.0/23 maxlen: 24
103.130.16.0/23 maxlen: 24
103.130.18.0/23 maxlen: 24
103.130.128.0/22 maxlen: 24
103.130.164.0/22 maxlen: 24
103.156.112.0/23 maxlen: 24
103.156.114.0/23 maxlen: 24
103.156.118.0/23 maxlen: 24
103.156.160.0/23 maxlen: 24
103.156.164.0/23 maxlen: 24
103.156.218.0/23 maxlen: 24
103.157.48.0/23 maxlen: 24
103.157.58.0/23 maxlen: 24
103.157.60.0/23 maxlen: 24
103.171.146.0/23 maxlen: 24
103.171.148.0/23 maxlen: 24
103.171.150.0/23 maxlen: 24
103.171.152.0/23 maxlen: 24
103.171.154.0/23 maxlen: 24
103.171.156.0/23 maxlen: 24
103.171.158.0/23 maxlen: 24
103.171.160.0/23 maxlen: 24
103.171.162.0/23 maxlen: 24
103.171.164.0/23 maxlen: 24
103.175.222.0/23 maxlen: 24
103.175.224.0/23 maxlen: 24
103.175.226.0/23 maxlen: 24
103.175.228.0/23 maxlen: 24
103.175.230.0/23 maxlen: 24
202.59.192.0/20 maxlen: 24
203.83.32.0/20 maxlen: 24
210.87.88.0/23 maxlen: 24
210.87.90.0/23 maxlen: 24
2402:8780::/32 maxlen: 48
2402:8780:1015::/48 maxlen: 48
2402:8780:1018::/48 maxlen: 48
2402:8780:1019::/48 maxlen: 48
2402:8780:101a::/48 maxlen: 48
2402:8780:101d::/48 maxlen: 48
2402:8780:1020::/48 maxlen: 48
2402:8780:1021::/48 maxlen: 48
2402:8780:1024::/48 maxlen: 48
2402:8780:102a::/48 maxlen: 48
2402:8780:102c::/48 maxlen: 48
2402:8780:1038::/48 maxlen: 48
2402:8780:103c::/48 maxlen: 48
2402:8780:1041::/48 maxlen: 48
2402:8780:1052::/48 maxlen: 48
2402:8780:106d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2d:cd:c4:08:fe:6d:c9:9e:ac:ca:56:53:21:d3:0d:2f:73:0f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 12 04:12:31 2026 GMT
Not After : Jun 11 04:17:31 2027 GMT
Subject: CN=66239D5B3ABE2D242B8E5B68F0516F5CF31FF0FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4e:93:00:f2:2a:08:9b:53:30:84:b6:7d:4b:
59:55:7e:4f:1a:50:a3:9d:44:85:dd:b2:eb:74:d1:
0c:3b:f8:be:66:2e:57:f6:bf:46:21:4a:ae:3f:22:
17:cc:8d:c6:1a:86:33:2c:23:cb:89:42:80:2c:44:
d7:68:0c:a9:f9:df:a7:80:d4:e6:87:e0:d0:99:b2:
b5:0e:80:bc:29:2c:69:46:8b:0a:d1:0a:c8:c4:1e:
69:a5:29:ae:e6:d5:60:f7:29:46:64:2c:a2:03:c5:
bf:31:7e:f4:0b:79:51:0d:c3:0c:b5:aa:fa:94:00:
91:ce:80:e4:08:b6:7d:1f:f2:f1:bd:4d:ad:4f:c3:
d0:15:60:c6:ac:5c:af:7e:dc:e7:4f:ea:7b:71:ff:
a9:f6:18:e4:d1:5a:14:d0:8a:a5:78:3f:db:b3:17:
6f:1a:a3:f7:d1:b5:33:75:e9:c3:fd:66:56:61:73:
3e:74:bd:33:ba:5d:87:81:10:e7:f4:f6:8e:7e:e8:
8e:8d:06:c5:14:98:13:44:b7:45:df:80:b5:ff:48:
62:50:50:ea:1b:9a:e9:95:6a:2c:62:9f:d7:01:bb:
c6:70:3a:35:23:ce:5e:6a:a1:38:e5:3a:52:2f:07:
12:6b:71:7c:bb:e5:95:1f:e9:17:75:1d:c1:12:78:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:23:9D:5B:3A:BE:2D:24:2B:8E:5B:68:F0:51:6F:5C:F3:1F:F0:FA
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.112.0/22
36.50.138.0/23
36.50.142.0/23
36.50.150.0/23
103.47.132.0/22
103.106.156.0/22
103.119.48.0/21
103.119.60.0-103.119.67.255
103.120.168.0/21
103.121.16.0/21
103.125.36.0-103.125.43.255
103.125.48.0/22
103.125.56.0/22
103.129.16.0/23
103.129.92.0/22
103.129.104.0/22
103.129.150.0/23
103.129.172.0/22
103.130.16.0/22
103.130.128.0/22
103.130.164.0/22
103.156.112.0/22
103.156.118.0/23
103.156.160.0/23
103.156.164.0/23
103.156.218.0/23
103.157.48.0/23
103.157.58.0-103.157.61.255
103.171.146.0-103.171.165.255
103.175.222.0-103.175.231.255
202.59.192.0/20
203.83.32.0/20
210.87.88.0/22
IPv6:
2402:8780::/32
Signature Algorithm: sha256WithRSAEncryption
32:1d:49:c0:b7:05:6d:9b:e6:6a:5f:61:2e:68:e5:1d:84:77:
3a:e1:06:72:e1:57:93:72:2c:1f:b9:e9:dc:c3:20:c7:53:a0:
66:ce:4d:88:72:41:a2:9d:b4:db:d1:74:ff:e4:fa:cf:20:76:
ce:49:f7:2d:36:40:04:2a:97:3e:b7:82:55:3c:87:3f:c0:c3:
6b:c2:31:0e:c4:73:fb:5b:65:c3:1d:65:cb:33:93:21:39:0f:
c0:a6:72:f4:05:54:b9:1b:cf:3b:7d:8b:72:62:9f:00:34:9e:
23:0d:b7:26:da:e8:3f:c8:8e:d3:36:c8:a5:86:56:fb:f5:db:
98:20:8a:f3:36:38:65:bf:de:89:5d:22:fb:4d:28:77:75:0e:
2f:c0:30:a6:ef:6e:0f:13:d3:64:a2:eb:9d:88:bd:d0:e7:5a:
f2:f6:1f:eb:b9:97:34:19:52:e9:16:91:dc:e2:e5:7a:5c:7b:
0c:7b:72:10:25:e7:1e:6a:a2:39:cc:c9:40:32:99:2e:2e:df:
b0:80:86:47:68:14:f4:2a:58:a2:75:fa:15:89:92:b3:0c:8c:
ca:4e:9c:ee:de:95:7e:5e:28:04:eb:07:ce:cc:ca:27:ce:a4:
0f:10:58:38:e3:cd:a9:f0:59:60:c0:91:72:a5:f6:1d:e4:e0:
84:10:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:26:24 2026 by rpki-client