Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17670.roa
File: AS17670.roa (raw, json)
Hash identifier: KPK/RHQBTeoFydoCfeLXgYGv8dfGSfLMk/YAh+gH7Dk=
Subject key identifier: A8:96:BB:5E:0E:5A:5C:00:40:C0:BA:6A:63:3D:F1:71:46:AF:60:C7
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7753A0028D11E5D3B1922816CCB91697588AEC3A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17670.roa
Signing time: Tue 08 Jul 2025 10:06:24 +0000
ROA not before: Tue 08 Jul 2025 10:01:24 +0000
ROA not after: Tue 07 Jul 2026 10:06:24 +0000
asID: 17670
IP address blocks: 103.162.236.0/23 maxlen: 24
103.163.6.0/23 maxlen: 24
103.196.164.0/23 maxlen: 24
103.203.248.0/23 maxlen: 24
202.80.208.0/24 maxlen: 24
202.80.209.0/24 maxlen: 24
202.80.210.0/23 maxlen: 24
202.80.212.0/23 maxlen: 24
202.80.214.0/23 maxlen: 24
202.80.216.0/23 maxlen: 24
202.80.218.0/23 maxlen: 24
202.80.220.0/23 maxlen: 24
202.80.221.0/24 maxlen: 24
202.80.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Jul 2025 00:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:53:a0:02:8d:11:e5:d3:b1:92:28:16:cc:b9:16:97:58:8a:ec:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 8 10:01:24 2025 GMT
Not After : Jul 7 10:06:24 2026 GMT
Subject: CN=A896BB5E0E5A5C0040C0BA6A633DF17146AF60C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:be:9c:4e:1b:90:c3:fb:2b:de:f9:33:c2:
76:e8:67:e1:94:6c:75:6f:5e:72:d5:03:15:0f:82:
1a:0d:96:0a:5e:df:15:d6:40:be:1e:3a:6f:71:1d:
ce:8c:63:8f:c3:f2:fb:83:a2:db:6f:73:76:6b:4f:
19:79:bd:50:50:e6:d9:9a:a6:91:8b:7e:df:86:f1:
c1:39:a0:b7:3e:f1:41:26:ee:62:09:83:1f:2e:f2:
87:52:e1:36:f7:ea:9f:d1:c5:66:ff:06:8e:b4:08:
ab:b8:c8:2c:09:a6:f3:73:44:2a:62:24:b7:2f:4a:
54:da:e9:7a:a7:4f:a5:bf:d5:ac:f2:f3:81:79:ae:
62:4f:01:aa:6a:68:99:91:76:32:2a:ac:00:20:d4:
2d:98:66:e9:37:db:ae:4e:7c:fc:aa:64:b1:f9:b0:
ac:44:65:8e:a7:9b:12:b7:3a:b0:25:4c:62:f2:16:
b6:ef:8a:08:5f:fb:d6:48:67:2e:9e:ad:40:34:20:
b4:f5:43:e0:a7:d0:fa:95:4d:e0:41:50:9a:a2:d8:
ac:9b:da:b0:9f:94:35:64:68:5b:98:59:d4:16:2c:
ed:41:3d:ed:2f:64:d1:4c:ab:be:44:a7:7b:bd:dd:
c7:59:14:f6:97:20:de:36:e4:b3:3c:99:8d:96:64:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:BB:5E:0E:5A:5C:00:40:C0:BA:6A:63:3D:F1:71:46:AF:60:C7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.236.0/23
103.163.6.0/23
103.196.164.0/23
103.203.248.0/23
202.80.208.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:1a:10:20:c7:25:a5:7a:67:4f:fb:37:f2:49:40:db:fa:27:
6a:90:10:e4:54:6d:bf:3e:11:e8:3d:a5:d7:c4:cb:26:32:22:
5f:b6:9f:80:79:8c:3b:ce:18:b7:f9:63:f3:54:b7:47:65:00:
54:b1:53:ff:05:f6:16:b7:7a:f0:25:7d:82:aa:19:b4:9e:d6:
f8:39:86:aa:ef:f4:4b:94:14:0a:d5:43:31:10:7f:9e:df:c0:
8d:0e:39:7c:d3:0a:19:f5:e6:84:b8:3d:45:80:7f:9e:ec:65:
6d:be:a7:66:cd:4c:84:b4:64:91:85:6b:a0:c3:de:64:0c:f7:
12:33:95:0c:39:d2:82:36:60:dd:83:be:3e:9c:c9:31:71:e9:
87:f2:20:b6:4a:e5:f7:e7:1b:08:db:83:37:a1:29:cd:d0:50:
a7:31:4e:7a:25:71:58:42:33:af:1e:52:49:fa:f2:56:f8:2c:
98:c8:41:13:c1:ba:e8:02:7b:95:c8:2c:a7:d7:9d:20:c2:25:
79:bf:b5:f8:e1:05:dd:8c:05:68:29:81:e3:f4:54:1e:7a:ef:
42:df:b0:58:08:d3:0f:15:e7:4e:81:a9:f5:7b:c2:c2:18:27:
6d:a7:5a:00:af:4e:72:2d:b4:6f:3c:06:c3:df:da:2a:d4:fa:
25:15:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:00:24 2025 by rpki-client