Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56246.roa
File: AS56246.roa (raw, json)
Hash identifier: rcM5XC4wXVQHcWpqaWZBF5KaGDSnE1KcW51GJZMMX+8=
Subject key identifier: 8F:77:5C:14:8B:3E:94:31:F6:D0:C5:64:29:5B:EF:69:98:99:D2:D5
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 06F142D3AE38CFA5F28931440C19AE598A9C9F93
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56246.roa
Signing time: Thu 03 Jul 2025 03:13:54 +0000
ROA not before: Thu 03 Jul 2025 03:08:54 +0000
ROA not after: Thu 02 Jul 2026 03:13:54 +0000
asID: 56246
IP address blocks: 103.143.222.0/24 maxlen: 24
103.143.223.0/24 maxlen: 24
103.152.234.0/23 maxlen: 24
114.198.240.0/21 maxlen: 24
114.198.244.0/24 maxlen: 24
114.198.245.0/24 maxlen: 24
116.68.166.0/24 maxlen: 24
116.68.170.0/24 maxlen: 24
116.68.171.0/24 maxlen: 24
116.68.172.0/24 maxlen: 24
116.68.174.0/24 maxlen: 24
116.68.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Jul 2025 00:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f1:42:d3:ae:38:cf:a5:f2:89:31:44:0c:19:ae:59:8a:9c:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 3 03:08:54 2025 GMT
Not After : Jul 2 03:13:54 2026 GMT
Subject: CN=8F775C148B3E9431F6D0C564295BEF699899D2D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:41:02:b9:95:f7:c1:ca:c1:c3:51:5b:28:
ca:26:ee:7e:9c:95:b7:e9:db:51:92:a1:9c:d3:26:
c9:5c:d1:8c:9d:62:25:84:7d:07:d7:93:98:ea:ee:
59:4a:d7:3f:61:90:ff:5e:7e:24:cf:ed:23:1e:63:
9d:75:c5:12:12:85:54:6a:4d:fb:52:26:cb:29:a9:
a2:13:b6:d2:2d:0a:49:30:56:51:ae:09:d6:e5:77:
55:2e:93:90:02:31:97:19:6b:95:a5:38:63:2f:f6:
c5:03:a9:ee:c3:db:99:cc:3b:cb:b0:13:97:cb:48:
97:d8:79:fb:58:cd:5a:04:b4:e6:d0:a0:b9:cd:6a:
b2:a9:96:ba:4d:23:1d:2b:18:68:76:d3:ab:d1:07:
40:3d:7f:f3:fc:42:e3:fe:cd:05:a3:ae:30:10:0b:
27:a2:80:31:8e:d0:83:48:af:be:fb:3d:8b:d4:9c:
99:7c:fc:b9:5a:62:ff:62:a8:42:23:81:62:63:83:
d6:17:8b:83:7d:b6:71:f3:19:88:5e:e8:8e:5d:50:
a2:98:01:f5:50:d6:31:a3:92:0c:4a:5a:ed:99:96:
b4:e6:aa:d4:18:54:f2:93:2a:eb:2b:16:02:7b:ed:
77:0b:f0:ba:54:bf:db:0d:ad:cb:0c:52:1e:a4:e5:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:77:5C:14:8B:3E:94:31:F6:D0:C5:64:29:5B:EF:69:98:99:D2:D5
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56246.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.222.0/23
103.152.234.0/23
114.198.240.0/21
116.68.166.0/24
116.68.170.0-116.68.172.255
116.68.174.0/23
Signature Algorithm: sha256WithRSAEncryption
33:b3:89:c6:04:f5:60:d7:43:e0:60:30:f6:d9:11:98:bc:8c:
bc:c1:49:88:73:f9:11:15:39:6a:8d:25:34:0e:94:53:3d:6b:
7e:77:b5:54:aa:a5:2a:b5:a9:b9:c5:bc:a4:e1:98:e3:cf:73:
58:ed:68:bf:5f:aa:a3:5d:31:a0:78:53:6b:29:0f:ee:e9:e3:
b2:62:72:5b:23:a9:77:0b:95:a2:5e:fd:45:4a:b5:57:ad:c2:
4a:08:be:02:89:8b:27:f9:94:a2:7f:87:c7:21:38:5b:8b:fa:
d0:86:73:19:0c:b8:05:dc:40:94:b9:ce:30:7d:39:da:b5:35:
ac:c2:e2:d9:8c:b5:70:c2:e6:9a:cd:0f:dd:8c:c5:30:a1:05:
3e:7f:de:a8:87:60:56:7f:d0:30:a1:8d:d2:b4:42:41:cc:26:
4d:71:d9:a8:d8:76:58:1d:68:99:0e:1b:ce:05:97:1f:89:a1:
1c:65:8c:f2:e3:d3:92:c8:1b:3c:02:81:eb:da:7d:47:a8:ca:
39:5b:0c:4e:2d:0d:03:43:12:54:de:7a:79:a3:82:95:9f:d0:
ee:d2:6a:33:66:ec:5a:5e:ed:7b:50:81:18:8f:16:c5:a7:fc:
f1:4e:4b:62:d1:66:8c:7b:d5:15:6f:af:69:e8:de:dd:96:d1:
4c:8a:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:55:21 2025 by rpki-client