Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38513.roa
File: AS38513.roa (raw, json)
Hash identifier: ZBn0o37UxiLMhrFFYbRyAixINpEnZvZR1bpOdeMbXJM=
Subject key identifier: 06:A5:78:29:19:06:17:A5:2D:6E:59:4E:51:7A:0C:BB:2C:C4:7A:17
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7771AD72310BCF8C47C2392B75EB2CEEF41B3C8C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38513.roa
Signing time: Mon 25 Mar 2024 07:53:46 +0000
ROA not before: Mon 25 Mar 2024 07:48:46 +0000
ROA not after: Mon 24 Mar 2025 07:53:46 +0000
asID: 38513
IP address blocks: 103.42.244.0/23 maxlen: 24
103.67.40.0/23 maxlen: 24
103.67.42.0/23 maxlen: 24
103.125.90.0/23 maxlen: 23
103.125.100.0/23 maxlen: 23
103.125.102.0/23 maxlen: 23
103.190.214.0/23 maxlen: 24
103.191.14.0/23 maxlen: 24
103.191.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 May 2024 18:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:71:ad:72:31:0b:cf:8c:47:c2:39:2b:75:eb:2c:ee:f4:1b:3c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 25 07:48:46 2024 GMT
Not After : Mar 24 07:53:46 2025 GMT
Subject: CN=06A57829190617A52D6E594E517A0CBB2CC47A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:ad:b4:56:d8:06:9b:25:d7:2a:87:89:b8:
06:4e:87:e3:2e:b1:56:30:55:a9:65:bd:a4:84:77:
4b:3b:ae:a0:2b:c6:fe:c1:b8:ec:aa:b1:92:f6:c4:
80:9e:27:23:c1:2e:c7:63:95:c6:d2:82:bc:27:73:
f3:9c:a5:86:2a:94:2a:52:39:ea:6e:ee:ba:0a:6d:
b4:cb:89:3c:c6:40:72:a0:10:92:36:37:5b:5e:26:
30:54:d7:c3:7e:78:0d:76:99:82:e9:fc:e1:89:fa:
d9:0a:e2:cf:b8:df:e5:8c:b8:6e:fe:b2:8e:b0:48:
5f:c6:11:dd:5f:14:c7:a8:3e:b1:ef:db:ae:b0:7d:
38:33:d5:86:a1:84:ed:51:b7:25:73:4f:8e:25:77:
9b:d9:70:90:46:88:1a:89:34:5e:b7:62:ab:6a:34:
9f:8d:f3:f7:40:5b:a7:cc:1f:78:4e:7f:c0:10:9e:
71:9f:45:74:47:5d:8b:f8:4a:a1:74:24:04:c8:d2:
0a:90:25:ba:dc:a0:5d:93:ee:5e:bd:bd:02:f9:c9:
48:93:3e:de:8c:af:48:1b:7e:15:16:b5:34:e5:d2:
26:48:32:49:f8:46:7d:25:7d:18:32:6d:74:9a:65:
53:02:0b:c4:2c:b9:ff:1e:bc:d7:be:de:63:b0:b9:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:78:29:19:06:17:A5:2D:6E:59:4E:51:7A:0C:BB:2C:C4:7A:17
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.244.0/23
103.67.40.0/22
103.125.90.0/23
103.125.100.0/22
103.190.214.0/23
103.191.14.0-103.191.17.255
Signature Algorithm: sha256WithRSAEncryption
07:71:76:5b:f3:3c:be:34:b2:99:72:ee:f2:1c:d1:a1:0a:b5:
97:fb:b4:7a:0d:e3:3d:65:c4:fa:81:c9:d4:3f:69:4d:c8:60:
fa:ce:ef:41:c7:1e:d2:7a:27:b1:c4:6a:d3:5d:fa:ab:e2:6f:
32:53:30:84:e3:66:b6:17:b0:7b:81:5c:c9:ca:37:55:e2:c1:
e0:06:23:df:e3:ac:c2:c3:da:1f:7c:84:40:9e:97:a5:f8:52:
2c:a4:7e:3a:ce:07:b6:64:27:23:5d:f6:88:14:41:fb:ab:02:
45:52:d8:64:b6:bb:8f:01:8c:0d:79:3e:9c:dd:c3:54:49:f9:
42:d9:13:28:4f:c6:34:6c:b4:ff:41:91:a8:b8:92:58:d6:bb:
2b:05:c6:b3:7f:5a:2b:bd:fa:ac:d6:a6:86:79:97:75:cd:9a:
ad:4f:70:b1:ab:c6:3e:ed:79:2b:8e:91:db:d6:7b:a5:8c:e3:
00:45:6e:db:77:56:1b:36:31:e6:2b:a2:72:65:d9:14:b8:ed:
96:b5:d5:f0:32:25:44:99:59:95:40:2c:17:47:04:15:36:6e:
12:6e:cf:ff:6c:08:86:2e:0f:f8:1f:1e:59:19:77:58:09:2e:
22:fe:1d:2d:ee:92:22:dd:09:b0:11:e1:61:88:1c:00:d0:1e:
43:c7:f8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:04 2024 by rpki-client on console-ams.rpki-client.org