Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: T4C3MMp63InRug/QevDWZdbJWb02Vgv8N7qON1zbfOM=
Subject key identifier: 05:1C:2C:E7:D2:84:FB:FC:5B:47:1F:18:A2:3F:D2:7B:A5:DD:02:26
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: CC41F754EF86AF7FD58746772FA5FD0F8E8ADC
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 06:00:02 +0000
ROA not before: Sun 23 Mar 2025 05:55:02 +0000
ROA not after: Sun 22 Mar 2026 06:00:02 +0000
asID: 9341
IP address blocks: 119.252.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 17:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cc:41:f7:54:ef:86:af:7f:d5:87:46:77:2f:a5:fd:0f:8e:8a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 05:55:02 2025 GMT
Not After : Mar 22 06:00:02 2026 GMT
Subject: CN=051C2CE7D284FBFC5B471F18A23FD27BA5DD0226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:13:91:32:30:60:e5:9f:30:3e:7c:74:6c:
a6:5f:b1:c8:e1:eb:79:43:5a:7a:84:40:88:09:12:
1a:1a:ed:82:8f:c4:3f:48:5d:b9:96:b0:a2:96:fd:
31:1f:22:18:4c:d7:ab:1b:3f:6c:1b:f0:c6:5c:77:
c9:76:cc:55:40:58:aa:0a:b2:45:04:89:12:d5:41:
0d:2a:d4:d4:31:07:f4:d7:64:59:25:58:87:1c:27:
32:42:68:c1:f1:37:75:36:43:f0:18:07:20:cc:7e:
2a:b4:5b:14:56:ed:87:57:54:68:81:de:ed:e7:0d:
d9:c3:ad:c2:06:f2:65:06:9e:c7:45:2e:2d:59:04:
42:c0:ab:e8:e8:1a:da:24:67:00:a3:b4:91:e5:99:
3d:28:e1:36:a4:ee:22:56:25:69:a4:e4:a7:68:93:
0c:d6:06:ec:f5:07:73:20:f0:21:8e:eb:bb:6a:8f:
90:f1:55:a5:48:27:3a:f5:ff:b1:63:8f:4a:e1:5d:
fd:82:ba:8f:57:e6:d2:1d:81:c7:80:a7:ea:4a:c2:
91:9f:a5:0e:71:5d:ab:ac:bd:1f:d4:96:ac:77:8e:
3e:ec:07:8d:b0:01:d2:22:54:4b:94:6a:cd:93:18:
49:3d:dc:54:56:2c:8e:1b:ea:81:d0:97:ab:57:83:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:2C:E7:D2:84:FB:FC:5B:47:1F:18:A2:3F:D2:7B:A5:DD:02:26
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1e:c7:a4:d8:0b:76:45:e7:f0:be:64:d8:32:be:61:47:23:
21:6e:4b:10:50:ea:03:64:c2:2e:d3:e8:be:f9:50:e1:46:da:
1d:a6:08:97:7b:15:3d:e0:44:76:83:0f:05:45:6f:29:b8:73:
f0:79:cc:ef:f5:29:56:b1:7e:ac:63:b8:02:be:ed:00:a7:c1:
49:49:42:de:84:43:bf:d9:67:32:25:e2:8f:c0:a8:5a:8d:44:
91:46:fe:6c:2e:3a:3f:42:4d:6c:f4:b4:19:30:42:d0:e1:f4:
f7:5b:f5:98:ef:c0:4b:f9:50:26:86:84:0e:24:54:b6:3c:f7:
3e:48:11:db:3c:aa:d8:67:fb:f5:9a:63:e9:4b:45:18:ef:7f:
58:48:65:2d:dc:73:89:85:f3:d6:9c:ab:a9:7a:cb:04:b1:c3:
09:f4:ef:22:7a:7a:69:04:8d:ae:1e:aa:71:97:ff:ab:80:e7:
00:61:18:57:a8:ea:15:a0:31:13:8d:88:b4:c4:0f:5c:06:43:
c3:be:70:5d:74:38:6a:33:54:52:b1:05:fe:23:f4:5a:8d:4a:
d8:3b:e9:e5:26:db:15:20:4c:6e:99:e6:fb:5b:f0:71:9d:26:
b8:77:fe:fe:5d:d4:d7:fd:85:50:75:ff:97:12:50:03:bb:75:
97:ef:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:23:37 2025 by rpki-client