Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
File: AS9341.roa (raw, json)
Hash identifier: 3qFQfKSX4x1Jdc66ZrJMb0AKWZA/+AYl6fep/2az+5k=
Subject key identifier: FF:E2:29:B4:5C:FF:CF:41:99:E7:03:7D:81:39:A7:6F:41:94:21:29
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 2DAD289DFC7C181C78FFDC7AD15D5598DE8612B4
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
Signing time: Thu 11 Jun 2026 02:34:46 +0000
ROA not before: Thu 11 Jun 2026 02:29:46 +0000
ROA not after: Thu 10 Jun 2027 02:34:46 +0000
asID: 9341
IP address blocks: 43.240.80.0/22 maxlen: 24
103.17.172.0/22 maxlen: 24
103.17.172.0/23 maxlen: 24
103.17.174.0/23 maxlen: 24
103.49.188.0/22 maxlen: 24
103.55.220.0/22 maxlen: 24
103.76.168.0/22 maxlen: 24
103.76.172.0/22 maxlen: 24
103.78.72.0/22 maxlen: 24
103.78.140.0/22 maxlen: 24
103.88.196.0/22 maxlen: 24
103.88.200.0/22 maxlen: 24
103.88.204.0/22 maxlen: 24
103.88.208.0/22 maxlen: 24
103.88.244.0/22 maxlen: 24
103.88.248.0/22 maxlen: 24
103.88.252.0/22 maxlen: 24
103.89.32.0/22 maxlen: 24
103.91.14.0/23 maxlen: 24
103.94.0.0/22 maxlen: 24
103.94.124.0/22 maxlen: 24
103.101.22.0/23 maxlen: 24
103.101.194.0/23 maxlen: 24
103.102.60.0/22 maxlen: 24
103.142.182.0/23 maxlen: 24
103.145.150.0/24 maxlen: 24
103.181.244.0/23 maxlen: 24
103.206.240.0/22 maxlen: 24
103.210.230.0/23 maxlen: 24
103.215.24.0/22 maxlen: 24
103.215.178.0/23 maxlen: 24
103.229.164.0/22 maxlen: 24
103.238.138.0/23 maxlen: 24
153.76.64.0/19 maxlen: 24
160.202.40.0/22 maxlen: 24
175.184.232.0/22 maxlen: 24
202.46.64.0/19 maxlen: 24
202.57.18.0/24 maxlen: 24
202.57.28.0/22 maxlen: 24
202.74.43.0/24 maxlen: 24
202.74.72.0/23 maxlen: 24
202.146.48.0/20 maxlen: 24
202.154.176.0/21 maxlen: 24
202.164.216.0/22 maxlen: 24
202.171.236.0/24 maxlen: 24
203.171.216.0/23 maxlen: 24
203.171.216.0/24 maxlen: 24
203.171.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ad:28:9d:fc:7c:18:1c:78:ff:dc:7a:d1:5d:55:98:de:86:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 11 02:29:46 2026 GMT
Not After : Jun 10 02:34:46 2027 GMT
Subject: CN=FFE229B45CFFCF4199E7037D8139A76F41942129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:e7:9b:a8:03:3f:0c:5d:ba:f6:5b:f8:70:
a1:af:42:34:b2:e2:f2:8c:5b:62:7a:2f:21:c5:2f:
d4:da:4f:67:42:92:fe:e3:e4:21:22:78:98:12:89:
fb:3a:dc:9d:b3:98:a8:b2:88:24:f2:49:cb:8f:da:
39:90:09:ef:71:1d:8f:d2:69:8c:08:73:f4:69:ea:
61:84:63:d3:9a:d8:b2:0b:c9:78:82:0b:5f:05:4e:
55:33:db:23:f7:3b:8f:b4:27:97:e3:1b:45:10:1a:
6d:c1:0f:34:40:ea:6a:47:8a:ba:91:a8:fb:dd:f9:
d5:80:64:5c:56:24:b1:6e:81:1a:c7:6d:ca:6e:32:
bf:37:09:f3:53:d6:37:e7:30:71:de:b3:40:80:7f:
4c:7d:d5:51:f3:21:6a:3a:99:e4:cf:96:73:d8:74:
9f:e1:25:84:f2:31:be:58:8f:d7:db:99:d7:b8:d5:
12:77:52:72:13:50:87:f2:e1:00:a9:bb:ff:2e:c5:
d8:cb:31:20:2a:74:ea:78:92:bf:66:b9:ae:36:04:
b3:41:f2:63:4e:fa:33:1c:9e:c1:4d:64:81:94:08:
44:8e:98:80:70:8f:91:08:cc:85:07:b1:4a:30:7c:
15:25:3f:bc:1a:16:84:fd:6d:e2:bd:9b:f1:29:73:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E2:29:B4:5C:FF:CF:41:99:E7:03:7D:81:39:A7:6F:41:94:21:29
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.80.0/22
103.17.172.0/22
103.49.188.0/22
103.55.220.0/22
103.76.168.0/21
103.78.72.0/22
103.78.140.0/22
103.88.196.0-103.88.211.255
103.88.244.0-103.88.255.255
103.89.32.0/22
103.91.14.0/23
103.94.0.0/22
103.94.124.0/22
103.101.22.0/23
103.101.194.0/23
103.102.60.0/22
103.142.182.0/23
103.145.150.0/24
103.181.244.0/23
103.206.240.0/22
103.210.230.0/23
103.215.24.0/22
103.215.178.0/23
103.229.164.0/22
103.238.138.0/23
153.76.64.0/19
160.202.40.0/22
175.184.232.0/22
202.46.64.0/19
202.57.18.0/24
202.57.28.0/22
202.74.43.0/24
202.74.72.0/23
202.146.48.0/20
202.154.176.0/21
202.164.216.0/22
202.171.236.0/24
203.171.216.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:8e:6a:1d:8a:f4:72:65:64:0f:a8:e2:da:6a:99:50:1a:37:
0e:ac:82:d8:90:63:c7:31:fc:91:63:87:cc:91:ae:17:a2:ba:
dc:7e:ea:5b:72:75:f9:ff:b8:c2:33:1d:85:c4:4a:39:6c:76:
33:b5:54:55:41:14:6b:3b:b7:f7:dc:cf:70:aa:6f:a9:1d:bc:
bf:4d:c4:3b:db:2d:0f:bd:7a:57:a8:88:23:9f:4a:4b:97:a6:
c4:99:31:4b:a7:96:ca:cc:9c:a1:1b:b4:5f:00:14:31:ae:80:
13:9e:01:f9:23:c2:84:60:b5:cd:90:55:03:76:d3:07:03:e7:
5d:78:ee:80:62:aa:31:20:3c:4d:b1:e9:5f:9f:d8:80:13:92:
aa:de:65:06:64:52:0c:cf:ac:61:ec:7b:ac:1e:ab:cc:ef:c4:
49:a0:d3:8a:67:89:3c:c6:21:87:c7:6f:9c:d8:07:74:9e:6e:
5b:ca:e6:4f:dd:5c:d0:cd:df:ee:7d:3a:b0:58:62:04:e3:60:
f1:6d:63:71:2a:2f:7c:07:4e:63:2e:25:1d:ed:68:7a:f2:a8:
56:49:e2:be:9c:e9:e4:e9:82:34:dd:f1:69:5c:e1:f9:89:27:
43:61:83:46:80:49:66:1e:fd:d3:7b:f2:af:26:ef:dc:72:00:
3a:1b:dc:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:16:45 2026 by rpki-client