Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e31362e302f32322d3234203d3e20313338303639.roa
File: 3130332e3132332e31362e302f32322d3234203d3e20313338303639.roa (raw, json)
Hash identifier: +JZPLZP7fvbgTMZwWVfhCICENp+12as8XM4ZDhoZKw4=
Subject key identifier: EB:15:62:17:7A:1A:71:0D:1E:5A:9C:74:E4:55:A8:7C:BA:AE:CD:9A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5A344D6501E14954E754824BC16CC16C71986557
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e31362e302f32322d3234203d3e20313338303639.roa
Signing time: Fri 19 Nov 2021 05:00:02 +0000
ROA not before: Fri 19 Nov 2021 04:55:02 +0000
ROA not after: Sat 19 Nov 2022 05:00:02 +0000
asID: 138069
IP address blocks: 103.123.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:34:4d:65:01:e1:49:54:e7:54:82:4b:c1:6c:c1:6c:71:98:65:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 19 04:55:02 2021 GMT
Not After : Nov 19 05:00:02 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:38:e1:5b:d1:1e:0e:c0:98:b5:f4:d0:60:
73:51:ca:8b:e4:1e:83:02:af:4a:1f:57:91:02:50:
0c:25:07:2b:61:c0:72:29:38:10:cf:01:d5:70:bb:
91:6e:02:3a:85:f8:ff:ef:2e:3b:cc:35:cd:b3:62:
ce:4a:13:35:5c:53:5a:45:32:b0:55:01:86:35:e8:
60:a2:00:e0:4c:63:c3:bd:e1:48:44:a9:52:72:57:
c9:0a:f3:d3:7a:e5:c8:51:2d:56:11:6b:61:eb:2d:
d6:e5:e7:41:83:33:9a:3c:f0:49:5b:90:8a:47:0c:
b0:61:b3:55:6e:67:a8:86:e8:c2:60:05:83:3d:67:
c1:eb:c4:3e:07:18:56:ad:bd:4b:92:ed:a9:f1:03:
69:2b:d9:99:b9:98:57:32:ae:bd:cb:2b:37:14:85:
12:ea:f6:f1:4f:98:99:c2:75:bb:3f:5f:e9:68:cb:
8d:8e:45:c1:9d:a9:59:a9:9a:77:b7:35:9a:57:e8:
bb:dc:0b:b0:bb:26:12:19:c1:02:9b:57:d2:d1:74:
b6:98:49:b4:4c:a4:52:a8:7c:01:40:f5:60:b7:43:
fa:c5:bf:31:29:f9:8a:a6:e0:0a:02:1b:1c:af:3c:
51:eb:77:96:ad:7c:e3:4f:8e:cd:b0:e7:60:1e:72:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:62:17:7A:1A:71:0D:1E:5A:9C:74:E4:55:A8:7C:BA:AE:CD:9A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e31362e302f32322d3234203d3e20313338303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:6a:12:3e:91:a8:72:ce:c0:6c:e8:17:81:18:0b:77:eb:c2:
f8:1e:1d:9b:20:94:76:43:c7:18:4a:1d:fe:c1:b1:3d:13:38:
cf:10:72:e7:26:98:46:a6:75:04:60:9c:ca:6b:b0:c5:53:b8:
0a:2e:e0:57:a1:51:c1:88:24:9e:3e:80:e7:0c:0a:b8:6c:1a:
d2:b0:4f:ed:a2:20:ed:51:f6:c1:59:e2:9c:34:b4:b1:e1:09:
1f:e2:da:78:2b:3f:d2:c4:a6:5c:5f:97:29:57:5d:d9:90:b8:
b6:89:87:c3:91:5b:e6:8a:c3:f4:aa:91:a3:7c:5b:8a:6c:74:
ce:0f:e1:ca:f5:c4:7c:a2:14:6f:74:c3:be:14:8a:f2:0c:b4:
ce:eb:89:f5:48:b4:ba:5c:f5:65:8a:92:df:e9:26:a2:54:a4:
d8:78:b2:be:b1:df:cd:2c:a7:e3:b4:c2:2a:42:13:cb:68:95:
a1:17:be:dc:50:5a:de:5c:56:5b:cb:36:5e:b8:22:1f:f3:c8:
28:f4:29:ca:b6:54:fa:a1:94:6f:65:19:4a:2d:57:4f:03:d0:
ed:b6:76:dc:ce:fe:36:07:5b:31:39:00:8c:40:cb:01:33:0b:
18:71:4b:83:36:58:c7:f7:4e:0b:36:30:ac:b0:0e:e9:44:5b:
cb:77:31:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 23:29:14 2025 by rpki-client