Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
File: AS133800.roa (raw, json)
Hash identifier: 7rXIT2ZdlabJXhgYl9knqjpxSMLKY7SstsJmCDQkE/E=
Subject key identifier: DC:09:EB:ED:A3:B8:27:D9:48:AF:CC:0B:8F:0D:AE:07:AD:DB:30:86
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5EE7F23D6A34E6844EB4C7AE27D2B76A92D8BECE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
Signing time: Wed 17 Apr 2024 09:00:00 +0000
ROA not before: Wed 17 Apr 2024 08:55:00 +0000
ROA not after: Wed 16 Apr 2025 09:00:00 +0000
asID: 133800
IP address blocks: 103.44.26.0/23 maxlen: 24
103.77.104.0/23 maxlen: 24
103.89.0.0/22 maxlen: 24
103.89.4.0/22 maxlen: 24
103.93.52.0/22 maxlen: 24
103.93.56.0/22 maxlen: 24
103.93.64.0/22 maxlen: 24
103.93.128.0/22 maxlen: 24
103.93.132.0/22 maxlen: 24
103.93.160.0/22 maxlen: 24
103.125.180.0/23 maxlen: 23
103.127.96.0/23 maxlen: 23
103.127.98.0/23 maxlen: 23
103.127.132.0/23 maxlen: 23
103.127.134.0/23 maxlen: 23
103.127.136.0/23 maxlen: 23
103.127.138.0/23 maxlen: 23
103.127.208.0/23 maxlen: 23
103.127.210.0/23 maxlen: 23
103.129.148.0/23 maxlen: 23
103.150.80.0/24 maxlen: 24
103.150.84.0/23 maxlen: 24
103.150.86.0/23 maxlen: 24
103.150.88.0/23 maxlen: 24
103.150.90.0/23 maxlen: 24
103.150.92.0/23 maxlen: 24
103.150.96.0/23 maxlen: 24
103.150.98.0/23 maxlen: 24
103.150.100.0/23 maxlen: 24
103.150.102.0/23 maxlen: 24
103.150.116.0/23 maxlen: 24
103.150.120.0/23 maxlen: 24
103.150.190.0/23 maxlen: 24
103.150.192.0/23 maxlen: 24
103.150.194.0/23 maxlen: 24
103.150.196.0/23 maxlen: 24
103.175.216.0/23 maxlen: 24
103.175.218.0/23 maxlen: 24
103.175.220.0/23 maxlen: 24
103.196.146.0/23 maxlen: 24
103.196.152.0/23 maxlen: 24
103.196.154.0/23 maxlen: 24
116.206.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e7:f2:3d:6a:34:e6:84:4e:b4:c7:ae:27:d2:b7:6a:92:d8:be:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 17 08:55:00 2024 GMT
Not After : Apr 16 09:00:00 2025 GMT
Subject: CN=DC09EBEDA3B827D948AFCC0B8F0DAE07ADDB3086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:1c:63:ef:5b:e8:55:f5:fc:7e:2a:79:17:
52:02:46:62:80:46:27:04:4f:03:79:d1:0a:3a:58:
62:76:ed:e4:f5:94:ae:15:92:e0:41:22:25:f7:02:
95:26:d5:d5:ef:f7:35:2f:20:f6:40:d0:2d:90:c3:
60:2b:d1:d0:12:3a:d6:e2:0f:da:c0:20:90:21:74:
bf:c0:78:76:3a:79:71:fc:e3:07:e4:33:9c:f9:08:
63:83:4c:7f:49:b2:d8:ca:fe:0a:8a:dd:68:6a:7a:
84:16:3c:89:3b:5c:f8:67:2e:e4:9a:23:69:10:28:
2c:69:db:8d:d8:ca:1e:a9:4d:51:96:18:7e:21:f8:
5c:45:29:34:65:05:11:58:11:b3:3b:4e:42:ac:6b:
fd:55:aa:7e:98:d6:8e:51:f8:65:2c:1c:8b:8d:9a:
d8:0f:01:5b:ca:62:e0:93:6e:c4:c5:8c:27:b3:c0:
0a:b7:51:42:4f:98:0a:37:ea:36:8a:67:5b:34:21:
34:08:c9:39:b1:93:2b:13:c8:f2:ca:12:b5:bb:52:
22:88:db:d4:24:64:46:06:83:ea:30:bb:51:1e:df:
ce:98:15:0f:d7:5c:90:39:4d:36:f6:fd:1f:42:77:
fa:6b:f1:66:91:4a:40:53:c0:67:aa:75:33:58:ff:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:09:EB:ED:A3:B8:27:D9:48:AF:CC:0B:8F:0D:AE:07:AD:DB:30:86
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.26.0/23
103.77.104.0/23
103.89.0.0/21
103.93.52.0-103.93.59.255
103.93.64.0/22
103.93.128.0/21
103.93.160.0/22
103.125.180.0/23
103.127.96.0/22
103.127.132.0-103.127.139.255
103.127.208.0/22
103.129.148.0/23
103.150.80.0/24
103.150.84.0-103.150.93.255
103.150.96.0/21
103.150.116.0/23
103.150.120.0/23
103.150.190.0-103.150.197.255
103.175.216.0-103.175.221.255
103.196.146.0/23
103.196.152.0/22
116.206.196.0/22
Signature Algorithm: sha256WithRSAEncryption
23:22:ff:dd:ad:3d:e7:7f:34:f0:d9:cf:77:14:68:b0:dd:1b:
c6:98:cf:26:09:7c:7d:63:ca:92:b1:5f:fe:a7:a1:92:14:28:
4d:d0:1f:ad:55:69:33:ec:19:80:d4:9c:8e:83:71:96:8e:21:
09:e4:2c:3e:0c:32:60:f4:31:a7:38:76:48:bc:72:c4:43:8d:
d2:ec:28:3f:e7:ec:23:88:22:79:1a:09:de:4a:82:5c:4c:2f:
c5:af:44:8b:96:54:d8:37:c9:45:7b:1c:56:6c:f5:87:d3:e5:
32:3c:19:12:5a:64:58:28:c4:9c:02:d8:a0:d2:ca:fc:5b:8a:
0d:60:33:d2:0e:f3:91:58:dd:c6:03:d3:36:b1:4b:1e:3f:55:
ca:75:28:7c:ce:eb:e1:78:8b:28:df:ab:96:f7:bf:67:74:e8:
af:32:84:d9:3d:48:f0:89:b7:e2:59:d4:9b:97:ba:70:01:79:
ce:f9:9f:7e:15:38:50:b1:10:d0:b2:d6:7c:bb:c0:6b:98:83:
d2:37:b8:f3:0c:aa:06:40:ae:11:0f:10:60:6f:44:a3:4a:af:
46:6d:7a:04:f6:58:b6:c2:67:d9:3d:fe:6e:ed:a2:bf:5e:94:
cf:69:ac:17:5e:c8:41:0a:8e:52:62:af:3c:cf:b0:72:ec:9f:
86:d4:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:30 2024 by rpki-client on console-ams.rpki-client.org