Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa
File: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (raw, json)
Hash identifier: 6xVE4NEw1Sikw1Gooesys2fgq3FlYqAHu2UarTz/OSA=
Subject key identifier: 55:DE:87:95:1B:02:F3:85:98:AE:DE:9C:43:ED:ED:3A:50:32:9A:7E
Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial: 5C28548349050CE44F208A2AF1D6DE26543AD077
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa
Signing time: Thu 12 Dec 2024 17:00:01 +0000
ROA not before: Thu 12 Dec 2024 16:55:01 +0000
ROA not after: Thu 11 Dec 2025 17:00:01 +0000
asID: 56286
IP address blocks: 103.26.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 16:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:28:54:83:49:05:0c:e4:4f:20:8a:2a:f1:d6:de:26:54:3a:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Validity
Not Before: Dec 12 16:55:01 2024 GMT
Not After : Dec 11 17:00:01 2025 GMT
Subject: CN=55DE87951B02F38598AEDE9C43EDED3A50329A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:59:df:9a:03:bc:c1:1f:c8:70:02:17:21:
1e:e6:10:f2:88:2d:96:4e:c4:c2:e1:09:46:27:84:
4c:e6:67:4d:59:8a:aa:55:dc:69:e8:43:0e:85:bc:
93:aa:16:69:7a:e3:21:15:bc:8d:d9:12:7b:80:b3:
59:47:b3:af:23:96:68:8f:75:97:92:a1:17:5d:57:
49:69:dc:ce:98:b2:35:68:97:62:94:88:4e:64:cc:
1c:00:97:52:a1:24:58:47:50:6a:b2:bb:c5:20:0a:
2d:90:4e:15:dd:84:00:81:76:8e:ae:2e:d5:a9:92:
6b:89:a2:3d:bb:ee:3e:ee:e3:b7:79:61:30:8d:8e:
37:11:8b:a2:a0:fa:a3:c5:e2:f8:3a:5f:2e:d9:79:
f8:ef:ef:2f:88:e5:71:f7:0c:ef:15:de:b4:66:d6:
a5:16:d2:2d:22:4a:86:68:11:5d:4d:01:92:30:2d:
cb:48:a7:3e:94:47:8f:c2:38:0f:61:dd:6b:4d:d6:
cf:68:a0:76:89:6e:cd:2a:b3:bc:d6:25:93:63:3b:
d1:1d:35:b3:8a:c0:dd:c9:95:4e:22:7a:a5:4f:79:
8b:25:aa:54:3e:9d:b8:7c:d7:60:e9:7a:09:ae:5e:
8a:20:0e:49:07:db:91:c3:98:77:b5:c4:34:c4:04:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DE:87:95:1B:02:F3:85:98:AE:DE:9C:43:ED:ED:3A:50:32:9A:7E
X509v3 Authority Key Identifier:
keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.26.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7c:a6:37:0d:34:89:38:e8:07:34:59:e6:38:ad:8d:04:2e:
c1:ec:01:8b:79:86:fd:e6:89:74:f9:5a:ab:34:86:66:73:9e:
9a:b9:74:bb:d7:7d:22:2e:86:31:1e:93:48:0c:88:a2:ba:92:
be:6e:9b:e8:ec:7c:05:36:40:e9:27:dd:4a:cc:9c:95:bc:34:
ff:72:a9:25:10:8b:1b:bd:f3:ec:d7:f7:74:d5:15:12:a2:99:
c6:d3:88:08:85:e5:cb:01:80:6c:1b:d1:ca:a5:c8:fe:7f:0b:
c4:0f:2b:1c:a0:a1:c1:2a:a6:12:e4:22:cf:f1:50:38:22:09:
56:58:0f:52:bf:08:dc:68:2f:51:75:45:d2:f1:bc:51:34:89:
14:ca:4e:90:dc:ee:35:5e:77:05:25:8e:ce:e1:26:51:b7:5e:
45:df:8c:40:0d:8b:1b:49:8c:f6:82:1b:58:1f:f1:05:71:08:
f7:91:8f:5d:d9:38:e1:b9:19:7d:9c:c9:a4:51:07:80:c0:1b:
40:20:e8:bb:bc:90:27:b9:28:ff:29:16:6d:7f:a6:24:d9:4a:
42:06:11:7a:10:d5:12:89:0b:8a:f9:e4:1b:48:60:bd:2e:7a:
07:5d:ee:47:6f:1f:8c:24:58:ae:a5:09:46:ff:e0:8d:ea:63:
7a:90:cd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:07 2025 by rpki-client