Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS4787.roa
File: AS4787.roa (raw, json)
Hash identifier: xNIjXEy5w/sq1uFIRiLTumTx7Jqdi3w0ADXqAqGDqSY=
Subject key identifier: 03:82:CC:3B:3A:E0:32:17:F1:7E:A1:D9:93:EE:87:2C:5F:AE:28:E6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 35CC6B993E31AE2DC53BAFB3B1CCA841280DA258
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS4787.roa
Signing time: Wed 15 Nov 2023 08:00:22 +0000
ROA not before: Wed 15 Nov 2023 07:55:22 +0000
ROA not after: Wed 13 Nov 2024 08:00:22 +0000
asID: 4787
IP address blocks: 103.86.152.0/22 maxlen: 24
103.111.200.0/22 maxlen: 24
103.113.48.0/22 maxlen: 24
103.164.132.0/23 maxlen: 24
103.164.134.0/23 maxlen: 24
2403:3440::/32 maxlen: 48
2403:34c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 May 2024 03:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:cc:6b:99:3e:31:ae:2d:c5:3b:af:b3:b1:cc:a8:41:28:0d:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 15 07:55:22 2023 GMT
Not After : Nov 13 08:00:22 2024 GMT
Subject: CN=0382CC3B3AE03217F17EA1D993EE872C5FAE28E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:2f:38:39:3a:66:16:aa:6a:9e:26:a1:69:
c9:fe:28:51:fb:07:4a:e6:a9:73:8a:51:a6:4b:1e:
89:fc:7b:c1:aa:64:48:be:69:c7:a5:ad:04:75:ad:
59:81:29:84:89:6c:d5:4e:54:67:dc:07:59:77:f6:
b3:dc:b6:de:1d:8c:fc:89:3e:20:fe:b0:f3:f4:10:
e2:38:e0:46:fa:1a:1a:66:ba:0f:ff:0b:07:3d:ba:
24:ac:df:93:65:b2:d1:b6:32:05:4c:87:d3:11:c5:
be:9f:19:d9:29:48:14:b6:8a:01:c8:fd:7f:3b:d5:
24:aa:e2:94:fe:1e:39:6d:de:f4:d3:72:a1:2a:77:
49:0c:70:00:3b:cd:9e:15:6b:16:4d:a1:85:e9:bb:
fe:24:5f:63:d7:5e:a7:98:be:b5:47:4e:01:a1:da:
6b:3f:f4:72:82:65:db:7b:42:8f:f3:c0:cf:11:0b:
81:5a:fc:6d:ca:5e:c4:c4:0f:79:b2:69:d1:37:5d:
c5:dd:9c:b2:61:83:90:63:7e:0f:cd:1e:13:91:18:
1c:9d:83:ef:72:14:72:be:74:8a:9b:e9:3c:41:c4:
02:65:12:46:c2:de:ca:fc:48:63:ac:0d:f2:06:6e:
f7:d8:d9:98:01:3f:e4:fe:0a:e4:c8:6b:d0:a9:cd:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:82:CC:3B:3A:E0:32:17:F1:7E:A1:D9:93:EE:87:2C:5F:AE:28:E6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS4787.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.152.0/22
103.111.200.0/22
103.113.48.0/22
103.164.132.0/22
IPv6:
2403:3440::/32
2403:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:c3:f7:72:0b:ed:8e:f4:40:cf:91:fa:39:3f:f0:a2:bd:db:
ab:12:61:ec:01:78:66:12:ce:0f:36:5b:92:35:6c:24:bd:03:
3d:ac:16:8d:02:da:0e:34:48:f4:87:52:17:74:e7:04:b0:fa:
f6:97:0a:3a:f8:f9:5c:c9:5e:64:17:69:b8:70:fc:a8:86:88:
a8:65:ba:64:c4:1f:53:50:12:d3:21:26:dd:81:7b:d6:7d:a9:
54:80:77:be:c2:b0:64:cf:ff:ab:6e:91:a4:22:52:f5:30:57:
8a:5f:6d:93:40:9a:82:5f:21:c0:5b:de:0d:e9:62:1a:6a:7d:
99:3b:40:42:5c:8d:f8:38:d5:4f:ad:cb:73:3e:93:c8:0c:cb:
93:32:28:41:a0:1e:b9:c2:c2:5d:2a:6b:56:37:75:d0:d5:16:
d2:dd:d2:12:9e:20:b9:16:78:5f:13:34:51:93:66:6c:1e:bd:
40:84:90:17:67:09:0b:00:7c:9d:cb:17:ae:1a:64:11:66:8a:
38:fd:37:22:c2:ce:eb:ce:6c:51:65:85:b9:3d:ec:91:00:21:
f7:2e:51:74:c3:59:74:da:75:10:e2:72:64:e4:a4:7d:f6:58:
1e:fc:2a:3f:5c:12:cd:44:4c:c1:63:b7:63:7d:ff:0a:03:44:
a9:a1:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:32 2024 by rpki-client on console-ams.rpki-client.org