Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135478.roa
File: AS135478.roa (raw, json)
Hash identifier: Zs3sW36jxMz5/4UsBzpoHvTztKvIn06u7CTz0zQaVPk=
Subject key identifier: 4A:48:48:91:A2:6C:52:91:6A:17:DA:F4:C8:CC:10:1E:82:C5:B2:16
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2FB703942B575E4E76C89DC39FEF808C15059CB1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135478.roa
Signing time: Tue 31 Oct 2023 17:58:43 +0000
ROA not before: Tue 31 Oct 2023 17:53:43 +0000
ROA not after: Tue 29 Oct 2024 17:58:43 +0000
asID: 135478
IP address blocks: 103.121.96.0/22 maxlen: 24
103.121.100.0/22 maxlen: 24
103.121.108.0/22 maxlen: 24
103.121.132.0/22 maxlen: 24
103.121.136.0/22 maxlen: 24
103.121.144.0/22 maxlen: 24
103.121.168.0/22 maxlen: 24
103.121.180.0/22 maxlen: 24
103.121.244.0/22 maxlen: 24
103.129.4.0/22 maxlen: 24
103.129.20.0/22 maxlen: 24
103.129.24.0/22 maxlen: 24
103.129.40.0/22 maxlen: 24
103.129.48.0/22 maxlen: 24
103.129.56.0/22 maxlen: 24
103.129.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 May 2024 09:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b7:03:94:2b:57:5e:4e:76:c8:9d:c3:9f:ef:80:8c:15:05:9c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 31 17:53:43 2023 GMT
Not After : Oct 29 17:58:43 2024 GMT
Subject: CN=4A484891A26C52916A17DAF4C8CC101E82C5B216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:0f:ff:41:6a:4d:42:79:8d:b2:6a:aa:80:
9d:f2:53:1f:69:75:22:ca:d8:68:a4:31:cb:39:59:
0d:29:cb:7d:c3:4a:90:4f:da:c4:46:91:d9:0c:4d:
4f:fb:ff:c3:07:f1:39:de:ab:43:fd:62:c0:54:22:
d4:51:c5:c1:83:59:97:51:67:1f:22:84:3e:a8:ed:
de:df:41:1f:5d:8b:b4:a8:df:d4:a9:2d:c0:9f:d3:
60:c6:84:e6:31:57:74:1d:d0:54:03:2d:08:66:7f:
25:85:1c:6c:cd:a9:f5:16:47:f2:87:4e:46:08:9c:
f5:32:91:07:63:0b:6c:d0:17:01:0a:36:0f:16:8e:
ae:c8:80:0b:8d:3c:39:1d:c8:da:41:83:96:7d:0e:
a6:5b:9e:0b:4b:76:4a:f1:c7:c4:14:a4:f3:b7:92:
39:fd:a5:ac:ac:26:94:98:c8:fb:64:6d:c5:11:6a:
44:11:65:f4:30:82:1c:d7:33:ed:4b:4a:dc:84:71:
48:75:af:eb:72:f2:ee:4b:42:dd:95:16:d3:27:49:
99:e2:f7:39:b6:91:ae:84:1f:ba:a8:d9:9d:e3:32:
76:00:16:3e:42:63:43:00:9a:3f:e7:77:fd:2e:dc:
9b:04:37:bc:34:cb:e8:78:47:7b:5d:2c:34:85:1a:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:48:48:91:A2:6C:52:91:6A:17:DA:F4:C8:CC:10:1E:82:C5:B2:16
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135478.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.96.0/21
103.121.108.0/22
103.121.132.0-103.121.139.255
103.121.144.0/22
103.121.168.0/22
103.121.180.0/22
103.121.244.0/22
103.129.4.0/22
103.129.20.0-103.129.27.255
103.129.40.0/22
103.129.48.0/22
103.129.56.0/22
103.129.68.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:2e:2a:3d:ea:1f:28:11:25:6d:36:10:87:ad:30:a1:94:1a:
a7:13:ab:32:f7:2c:a9:a2:7a:f3:9f:30:89:6c:c0:bb:00:cb:
82:a5:e9:6b:0d:d9:21:dc:d6:61:1e:b1:f8:bd:6c:90:e1:ce:
cd:54:33:a4:17:a1:70:7e:64:ac:63:7d:21:97:e7:97:8c:34:
6b:d6:c3:b4:94:bc:fe:8a:0a:8a:ab:9b:c3:63:0f:64:8c:a0:
65:3a:21:98:04:67:09:14:8f:4e:19:24:6c:86:87:7f:65:f5:
77:63:e4:ba:ec:b3:8a:0f:e9:c2:69:45:25:c3:51:0a:a8:10:
ac:00:61:05:3d:9c:e8:0d:e8:14:e6:bc:fd:e5:2d:b1:97:3b:
d4:e1:33:b5:8d:33:29:47:f2:a3:0c:e6:a6:1c:4b:f0:ae:c3:
05:6a:7f:03:91:ba:d5:4a:4f:79:c1:4a:16:f1:ae:15:a7:22:
8a:4d:8c:6d:27:74:7f:f6:88:98:87:2f:d7:1c:1d:91:84:57:
e1:68:d8:98:88:f4:a5:43:a8:bd:1c:7d:c5:92:de:27:2f:25:
64:44:7c:3b:a6:1a:f2:3d:4c:fe:32:38:b9:57:00:4f:32:80:
09:ad:4b:46:ef:7e:4d:08:b8:3d:08:f9:65:b3:da:32:ee:30:
de:10:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:09:56 2024 by rpki-client on console-ams.rpki-client.org