Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
File: AS63859.roa (raw, json)
Hash identifier: nf4WiFYX+jF6y8+bfRvUR0wGbdydvWGDUCYrRs9IU84=
Subject key identifier: 5C:F6:2B:87:FF:EF:39:DD:0B:4A:63:B2:F7:3E:62:0E:B3:A1:38:43
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 1EC0DA35605370B4CA19C98F83A0323F234E8D05
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
Signing time: Tue 20 Oct 2026 06:37:09 +0000
ROA not before: Tue 20 Oct 2026 06:32:09 +0000
ROA not after: Tue 19 Oct 2027 06:37:09 +0000
asID: 63859
IP address blocks: 36.50.112.0/23 maxlen: 24
36.50.114.0/23 maxlen: 24
36.50.138.0/23 maxlen: 24
36.50.142.0/23 maxlen: 24
36.50.150.0/23 maxlen: 24
103.47.132.0/22 maxlen: 24
103.106.156.0/22 maxlen: 24
103.106.156.0/24 maxlen: 24
103.106.157.0/24 maxlen: 24
103.106.158.0/24 maxlen: 24
103.106.159.0/24 maxlen: 24
103.119.48.0/21 maxlen: 24
103.119.48.0/22 maxlen: 24
103.119.52.0/22 maxlen: 24
103.119.60.0/22 maxlen: 24
103.119.64.0/22 maxlen: 24
103.120.168.0/21 maxlen: 24
103.120.168.0/22 maxlen: 24
103.120.172.0/22 maxlen: 24
103.121.16.0/21 maxlen: 24
103.121.16.0/22 maxlen: 24
103.121.20.0/22 maxlen: 24
103.125.36.0/22 maxlen: 24
103.125.40.0/22 maxlen: 24
103.125.48.0/22 maxlen: 24
103.125.56.0/22 maxlen: 24
103.129.16.0/23 maxlen: 24
103.129.92.0/22 maxlen: 24
103.129.104.0/22 maxlen: 24
103.129.150.0/23 maxlen: 24
103.129.172.0/23 maxlen: 24
103.129.174.0/23 maxlen: 24
103.130.16.0/23 maxlen: 24
103.130.18.0/23 maxlen: 24
103.130.128.0/22 maxlen: 24
103.130.164.0/22 maxlen: 24
103.156.112.0/23 maxlen: 24
103.156.114.0/23 maxlen: 24
103.156.118.0/23 maxlen: 24
103.156.160.0/23 maxlen: 24
103.156.164.0/23 maxlen: 24
103.156.218.0/23 maxlen: 24
103.157.48.0/23 maxlen: 24
103.157.58.0/23 maxlen: 24
103.157.60.0/23 maxlen: 24
103.171.146.0/23 maxlen: 24
103.171.148.0/23 maxlen: 24
103.171.150.0/23 maxlen: 24
103.171.152.0/23 maxlen: 24
103.171.154.0/23 maxlen: 24
103.171.156.0/23 maxlen: 24
103.171.158.0/23 maxlen: 24
103.171.160.0/23 maxlen: 24
103.171.162.0/23 maxlen: 24
103.171.164.0/23 maxlen: 24
103.175.222.0/23 maxlen: 24
103.175.224.0/23 maxlen: 24
103.175.226.0/23 maxlen: 24
103.175.228.0/23 maxlen: 24
103.175.230.0/23 maxlen: 24
202.59.192.0/20 maxlen: 24
202.150.64.0/19 maxlen: 24
203.83.32.0/20 maxlen: 24
210.87.88.0/23 maxlen: 24
210.87.90.0/23 maxlen: 24
2402:8780::/32 maxlen: 48
2402:8780:1015::/48 maxlen: 48
2402:8780:1018::/48 maxlen: 48
2402:8780:1019::/48 maxlen: 48
2402:8780:101a::/48 maxlen: 48
2402:8780:101d::/48 maxlen: 48
2402:8780:1020::/48 maxlen: 48
2402:8780:1021::/48 maxlen: 48
2402:8780:1024::/48 maxlen: 48
2402:8780:102a::/48 maxlen: 48
2402:8780:102c::/48 maxlen: 48
2402:8780:1038::/48 maxlen: 48
2402:8780:103c::/48 maxlen: 48
2402:8780:1041::/48 maxlen: 48
2402:8780:1052::/48 maxlen: 48
2402:8780:106d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c0:da:35:60:53:70:b4:ca:19:c9:8f:83:a0:32:3f:23:4e:8d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 20 06:32:09 2026 GMT
Not After : Oct 19 06:37:09 2027 GMT
Subject: CN=5CF62B87FFEF39DD0B4A63B2F73E620EB3A13843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:b1:2a:23:4e:c1:ba:bd:1f:03:70:a5:4a:
ab:38:5c:83:2c:06:85:7d:6a:05:79:0c:bf:ca:b7:
a3:0c:94:db:8a:57:47:a8:5a:55:fe:9f:23:df:91:
9e:6e:3e:f3:74:d3:31:2f:26:f4:4d:24:b4:ce:25:
29:fb:3c:bd:7f:70:00:a9:6a:f9:23:77:8b:3b:f3:
3d:95:90:a3:3d:fc:75:c1:46:9f:02:bd:ac:79:29:
fa:d6:a4:31:c2:6d:d1:6f:17:86:9d:a1:e1:f7:8b:
0c:7a:8e:69:36:56:06:0c:8d:e7:70:6d:96:5c:bf:
de:35:b8:67:c7:d5:b1:8f:0b:91:ce:19:90:37:ac:
cd:d7:5c:c5:ab:87:82:2b:c7:9f:be:f7:1c:a8:f8:
68:57:e7:68:99:b3:2e:a0:ab:f3:a4:be:6b:30:c1:
a5:28:fa:fd:c4:99:ce:55:75:d6:69:18:16:35:44:
74:e7:b6:c5:0b:3f:39:39:77:0b:f7:1f:2a:2f:1f:
64:4e:bf:fc:e5:cb:4b:02:2a:da:a6:f6:c4:39:1d:
29:6c:53:14:c8:10:88:92:1e:2e:cc:c5:e2:16:49:
0b:01:cc:8c:db:7d:8e:21:29:44:38:d9:ac:9b:f1:
05:39:3f:a1:27:8d:95:1e:ea:5b:51:ed:ad:e0:1e:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F6:2B:87:FF:EF:39:DD:0B:4A:63:B2:F7:3E:62:0E:B3:A1:38:43
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.112.0/22
36.50.138.0/23
36.50.142.0/23
36.50.150.0/23
103.47.132.0/22
103.106.156.0/22
103.119.48.0/21
103.119.60.0-103.119.67.255
103.120.168.0/21
103.121.16.0/21
103.125.36.0-103.125.43.255
103.125.48.0/22
103.125.56.0/22
103.129.16.0/23
103.129.92.0/22
103.129.104.0/22
103.129.150.0/23
103.129.172.0/22
103.130.16.0/22
103.130.128.0/22
103.130.164.0/22
103.156.112.0/22
103.156.118.0/23
103.156.160.0/23
103.156.164.0/23
103.156.218.0/23
103.157.48.0/23
103.157.58.0-103.157.61.255
103.171.146.0-103.171.165.255
103.175.222.0-103.175.231.255
202.59.192.0/20
202.150.64.0/19
203.83.32.0/20
210.87.88.0/22
IPv6:
2402:8780::/32
Signature Algorithm: sha256WithRSAEncryption
96:f3:d1:2a:69:df:11:75:76:9e:aa:2a:50:82:b8:01:8b:81:
60:b5:33:56:6a:87:38:f7:ac:86:f7:35:81:e0:78:2c:50:2c:
82:a8:1f:f3:33:c0:c7:03:81:55:54:ee:17:8f:30:18:f7:63:
1d:8c:4f:59:99:6f:ff:51:73:1d:06:cb:17:6c:25:95:59:34:
72:bb:0d:70:a2:74:e7:8d:3a:53:61:7d:9a:e7:ce:3d:dd:5c:
5a:7e:08:8d:15:34:c3:7a:af:0b:98:8e:ef:6f:a3:52:83:09:
10:e3:9f:9f:dd:2e:b5:36:0e:e2:19:99:08:c7:d6:a9:2b:17:
bd:d8:47:16:5e:26:d6:51:1d:5f:19:7a:8b:37:67:04:e9:d1:
1c:0e:c3:94:75:ec:22:a3:7c:20:23:e5:b9:e7:3a:9f:4f:24:
be:2b:ef:49:0d:f5:d4:27:6d:08:ae:3f:13:9c:24:a4:05:8e:
c9:71:11:92:39:02:c0:da:80:bc:58:2d:e5:19:60:44:b5:35:
ea:11:14:ba:56:5a:1b:08:dd:f7:fa:90:54:1f:5e:45:ac:75:
b6:1d:b6:46:c1:2e:b6:18:94:e2:c9:22:3a:e6:4c:08:ba:4e:
2a:85:49:ad:33:fd:e8:79:fb:b5:2e:5a:ac:df:c5:96:a8:78:
49:4b:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 15:49:46 2026 by rpki-client