Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS4761.roa
File: AS4761.roa (raw, json)
Hash identifier: I7sMSJDWaZx9+Xs8dGaZLicm3f1hWwDwMGcQZKu6xj8=
Subject key identifier: 6C:9F:24:87:FA:DA:B8:B0:82:2A:FF:8E:17:72:98:E4:3F:78:3D:18
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2788A8607CFEFAD8B9DA842BD9077DB7F93A65CC
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS4761.roa
Signing time: Thu 05 Dec 2024 08:04:30 +0000
ROA not before: Thu 05 Dec 2024 07:59:30 +0000
ROA not after: Thu 04 Dec 2025 08:04:30 +0000
asID: 4761
IP address blocks: 103.10.64.0/24 maxlen: 24
103.10.65.0/24 maxlen: 24
103.10.67.0/24 maxlen: 24
114.142.168.0/24 maxlen: 24
114.142.169.0/24 maxlen: 24
114.142.170.0/24 maxlen: 24
114.142.171.0/24 maxlen: 24
114.142.174.0/24 maxlen: 24
114.142.175.0/24 maxlen: 24
116.206.8.0/24 maxlen: 24
116.206.9.0/24 maxlen: 24
116.206.30.0/24 maxlen: 24
116.206.31.0/24 maxlen: 24
116.206.32.0/24 maxlen: 24
116.206.33.0/24 maxlen: 24
116.206.36.0/24 maxlen: 24
116.206.37.0/24 maxlen: 24
116.206.38.0/24 maxlen: 24
116.206.39.0/24 maxlen: 24
116.206.42.0/24 maxlen: 24
116.206.43.0/24 maxlen: 24
202.67.32.0/24 maxlen: 24
202.67.33.0/24 maxlen: 24
202.67.34.0/24 maxlen: 24
202.67.35.0/24 maxlen: 24
202.67.36.0/24 maxlen: 24
202.67.37.0/24 maxlen: 24
202.67.38.0/24 maxlen: 24
202.67.39.0/24 maxlen: 24
202.67.44.0/24 maxlen: 24
202.67.45.0/24 maxlen: 24
202.67.47.0/24 maxlen: 24
223.255.224.0/24 maxlen: 24
223.255.227.0/24 maxlen: 24
223.255.228.0/24 maxlen: 24
223.255.231.0/24 maxlen: 24
2400:8b00:300::/44 maxlen: 44
2400:8b00:310::/44 maxlen: 44
2400:8b00:320::/44 maxlen: 44
2400:8b00:330::/44 maxlen: 44
2400:8b00:600::/44 maxlen: 44
2400:8b00:610::/44 maxlen: 44
2400:8b00:620::/44 maxlen: 44
2400:8b00:630::/44 maxlen: 44
2400:8b00:700::/44 maxlen: 44
2400:8b00:710::/44 maxlen: 44
2400:8b00:720::/44 maxlen: 44
2400:8b00:730::/44 maxlen: 44
2400:8b00:980::/44 maxlen: 44
2400:8b00:990::/44 maxlen: 44
2400:8b00:9a0::/44 maxlen: 44
2400:8b00:9b0::/44 maxlen: 44
2400:8b00:a00::/44 maxlen: 44
2400:8b00:a10::/44 maxlen: 44
2400:8b00:a20::/44 maxlen: 44
2400:8b00:a30::/44 maxlen: 44
2400:8b00:b00::/44 maxlen: 44
2400:8b00:b10::/44 maxlen: 44
2400:8b00:b20::/44 maxlen: 44
2400:8b00:b30::/44 maxlen: 44
2400:8b00:b80::/44 maxlen: 44
2400:8b00:b90::/44 maxlen: 44
2400:8b00:ba0::/44 maxlen: 44
2400:8b00:bb0::/44 maxlen: 44
2400:8b00:c00::/44 maxlen: 44
2400:8b00:c10::/44 maxlen: 44
2400:8b00:c20::/44 maxlen: 44
2400:8b00:c30::/44 maxlen: 44
2400:8b00:c80::/44 maxlen: 44
2400:8b00:c90::/44 maxlen: 44
2400:8b00:ca0::/44 maxlen: 44
2400:8b00:cb0::/44 maxlen: 44
2400:8b00:d00::/44 maxlen: 44
2400:8b00:d10::/44 maxlen: 44
2400:8b00:d20::/44 maxlen: 44
2400:8b00:d30::/44 maxlen: 44
2400:8b00:d80::/44 maxlen: 44
2400:8b00:e00::/44 maxlen: 44
2400:8b00:e10::/44 maxlen: 44
2400:8b00:e20::/44 maxlen: 44
2400:8b00:e30::/44 maxlen: 44
2400:8b00:e80::/44 maxlen: 44
2400:8b00:e90::/44 maxlen: 44
2400:8b00:ea0::/44 maxlen: 44
2400:8b00:eb0::/44 maxlen: 44
2400:8b00:f00::/44 maxlen: 44
2400:8b00:f10::/44 maxlen: 44
2400:8b00:f20::/44 maxlen: 44
2400:8b00:f30::/44 maxlen: 44
2400:8b00:f80::/44 maxlen: 44
2400:8b00:f90::/44 maxlen: 44
2400:8b00:fa0::/44 maxlen: 44
2400:8b00:fb0::/44 maxlen: 44
2400:8b00:1600::/44 maxlen: 44
2400:8b00:1610::/44 maxlen: 44
2400:8b00:1620::/44 maxlen: 44
2400:8b00:1630::/44 maxlen: 44
2400:8b00:1800::/44 maxlen: 44
2400:8b00:1810::/44 maxlen: 44
2400:8b00:1820::/44 maxlen: 44
2400:8b00:1830::/44 maxlen: 44
2400:8b00:2000::/44 maxlen: 44
2400:8b00:2010::/44 maxlen: 44
2400:8b00:2020::/44 maxlen: 44
2400:8b00:2030::/44 maxlen: 44
2400:8b00:2080::/44 maxlen: 44
2400:8b00:2090::/44 maxlen: 44
2400:8b00:20a0::/44 maxlen: 44
2400:8b00:20b0::/44 maxlen: 44
2400:8b00:2100::/44 maxlen: 44
2400:8b00:2110::/44 maxlen: 44
2400:8b00:2120::/44 maxlen: 44
2400:8b00:2130::/44 maxlen: 44
2400:8b00:2180::/44 maxlen: 44
2400:8b00:2190::/44 maxlen: 44
2400:8b00:21a0::/44 maxlen: 44
2400:8b00:21b0::/44 maxlen: 44
2400:8b00:2280::/44 maxlen: 44
2400:8b00:2290::/44 maxlen: 44
2400:8b00:22a0::/44 maxlen: 44
2400:8b00:22b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Apr 2025 05:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:88:a8:60:7c:fe:fa:d8:b9:da:84:2b:d9:07:7d:b7:f9:3a:65:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 5 07:59:30 2024 GMT
Not After : Dec 4 08:04:30 2025 GMT
Subject: CN=6C9F2487FADAB8B0822AFF8E177298E43F783D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:4b:12:b5:45:13:a5:69:7a:9a:02:26:6b:
b5:fc:3b:e3:09:5a:67:25:f5:3f:b2:83:de:a6:31:
ee:d4:d8:7c:62:9a:87:e9:76:50:9a:d3:94:69:72:
d5:1d:3f:37:ac:57:c6:6f:fd:5a:66:19:b0:25:22:
db:9e:e5:28:eb:ef:6b:0b:52:03:b9:d6:1f:e9:bb:
f2:f9:70:83:67:4a:0e:19:c1:6f:fc:7e:14:f1:3d:
43:f8:0e:bf:20:47:f9:8c:91:e1:aa:61:f0:b4:52:
26:76:26:17:eb:ad:9b:ea:43:0d:6b:b4:7b:52:9e:
df:4f:d7:84:3c:bd:1e:b3:47:2e:f7:3d:74:d9:05:
fb:76:c8:05:6d:c1:21:01:96:6e:1f:0f:58:aa:d1:
27:60:03:6b:25:ec:c2:a3:8d:39:f5:ed:57:0b:a4:
c9:df:44:63:9c:83:4a:0e:82:dc:fa:39:c5:f0:60:
d5:c4:3a:e7:9d:a1:f8:37:9c:f6:7f:bb:09:59:9d:
a6:a1:f1:98:42:1d:4f:ba:b7:28:c8:5e:30:85:b1:
73:b6:5d:49:d8:76:a5:e4:1a:dd:00:59:71:58:99:
ba:92:e2:2f:b7:2f:d9:a4:60:57:ad:4c:7b:54:79:
45:69:bb:b9:dc:01:90:76:92:de:57:89:75:ce:f0:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9F:24:87:FA:DA:B8:B0:82:2A:FF:8E:17:72:98:E4:3F:78:3D:18
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS4761.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.64.0/23
103.10.67.0/24
114.142.168.0/22
114.142.174.0/23
116.206.8.0/23
116.206.30.0-116.206.33.255
116.206.36.0/22
116.206.42.0/23
202.67.32.0/21
202.67.44.0/23
202.67.47.0/24
223.255.224.0/24
223.255.227.0-223.255.228.255
223.255.231.0/24
IPv6:
2400:8b00:300::/42
2400:8b00:600::/42
2400:8b00:700::/42
2400:8b00:980::/42
2400:8b00:a00::/42
2400:8b00:b00::/42
2400:8b00:b80::/42
2400:8b00:c00::/42
2400:8b00:c80::/42
2400:8b00:d00::/42
2400:8b00:d80::/44
2400:8b00:e00::/42
2400:8b00:e80::/42
2400:8b00:f00::/42
2400:8b00:f80::/42
2400:8b00:1600::/42
2400:8b00:1800::/42
2400:8b00:2000::/42
2400:8b00:2080::/42
2400:8b00:2100::/42
2400:8b00:2180::/42
2400:8b00:2280::/42
Signature Algorithm: sha256WithRSAEncryption
14:71:51:49:13:f1:48:a1:e9:a1:4d:94:ba:50:e0:ce:0c:ae:
c3:1d:4c:e4:0e:91:b1:bb:94:07:d3:b1:9c:12:c9:85:b8:db:
43:fa:1b:f0:c8:a3:1e:71:80:a5:f7:47:bd:3d:3d:83:68:11:
a1:8e:1a:2e:a9:dd:76:b1:ea:72:7a:ac:5c:56:e9:2a:68:73:
1b:2f:a7:d9:78:58:06:56:4b:c8:09:95:a1:6b:d7:bd:cf:c5:
9c:99:56:e8:e4:a8:99:82:61:9e:8f:56:88:8d:74:d5:1c:56:
73:4d:b1:27:68:33:17:b1:e0:3a:dd:c4:3e:52:78:0a:50:de:
45:35:fd:3f:18:3d:15:40:2b:e6:1e:e5:4c:ec:24:24:51:b4:
a8:3e:5f:c9:28:00:f5:d3:98:31:70:2d:80:a1:7b:c5:a2:4f:
01:3e:04:d9:16:33:e1:95:02:ec:ee:56:ac:7a:e1:0a:a8:5b:
fc:e7:69:6d:f8:a6:74:93:73:5f:b9:4d:d6:e4:ec:0d:63:f3:
4b:53:8a:cc:03:fc:f4:ef:b2:13:ca:39:02:53:ab:e5:c9:47:
82:ea:b2:d3:19:96:47:d6:55:40:87:43:cb:5c:d8:30:05:38:
8f:dc:b8:84:eb:d6:fe:f9:fb:65:10:c0:37:7c:6a:bd:2a:90:
ed:ed:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:29:01 2025 by rpki-client