Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/AS23693.roa
File: AS23693.roa (raw, json)
Hash identifier: VC6P7VQPjQz96MNRFjSpVzH2VemASbGshqOKfkcPLJ0=
Subject key identifier: 75:E5:7D:A1:8D:A2:28:3D:59:D0:D1:27:4C:DA:AB:D1:23:6D:CB:19
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 0C2C78B6AE321E4A4E338E320AB0CA10845E447A
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/AS23693.roa
Signing time: Mon 11 Nov 2024 14:00:28 +0000
ROA not before: Mon 11 Nov 2024 13:55:28 +0000
ROA not after: Mon 10 Nov 2025 14:00:28 +0000
asID: 23693
IP address blocks: 114.120.0.0/13 maxlen: 13
114.120.0.0/18 maxlen: 18
114.120.64.0/18 maxlen: 18
114.120.128.0/19 maxlen: 19
114.120.128.0/20 maxlen: 20
114.120.144.0/20 maxlen: 20
114.120.224.0/19 maxlen: 19
114.120.240.0/20 maxlen: 20
114.121.0.0/18 maxlen: 18
114.121.64.0/18 maxlen: 18
114.121.128.0/18 maxlen: 18
114.121.160.0/19 maxlen: 19
114.121.224.0/19 maxlen: 19
114.121.224.0/20 maxlen: 20
114.121.240.0/20 maxlen: 20
114.122.0.0/19 maxlen: 19
114.122.32.0/19 maxlen: 19
114.122.35.0/24 maxlen: 24
114.122.64.0/19 maxlen: 19
114.122.96.0/19 maxlen: 19
114.122.128.0/19 maxlen: 19
114.122.160.0/19 maxlen: 19
114.122.192.0/19 maxlen: 19
114.122.224.0/19 maxlen: 19
114.122.227.0/24 maxlen: 24
114.123.0.0/17 maxlen: 17
114.123.0.0/24 maxlen: 24
114.123.128.0/17 maxlen: 17
114.124.0.0/18 maxlen: 18
114.124.32.0/19 maxlen: 19
114.124.128.0/18 maxlen: 18
114.124.160.0/19 maxlen: 19
114.124.192.0/18 maxlen: 18
114.124.224.0/19 maxlen: 19
114.125.0.0/19 maxlen: 19
114.125.32.0/19 maxlen: 19
114.125.64.0/19 maxlen: 19
114.125.67.0/24 maxlen: 24
114.125.80.0/20 maxlen: 20
114.125.96.0/19 maxlen: 19
114.125.112.0/20 maxlen: 20
114.125.128.0/20 maxlen: 20
114.125.144.0/20 maxlen: 20
114.125.160.0/19 maxlen: 19
114.125.176.0/20 maxlen: 20
114.125.192.0/19 maxlen: 19
114.125.208.0/20 maxlen: 20
114.125.224.0/19 maxlen: 19
114.126.0.0/16 maxlen: 16
114.127.0.0/16 maxlen: 16
114.127.220.0/24 maxlen: 24
114.127.222.0/24 maxlen: 24
114.127.240.0/24 maxlen: 24
114.127.245.0/24 maxlen: 24
114.127.255.0/24 maxlen: 24
182.0.0.0/12 maxlen: 12
182.0.16.0/22 maxlen: 22
182.0.20.0/22 maxlen: 22
182.0.24.0/22 maxlen: 22
182.0.96.0/21 maxlen: 21
182.0.128.0/18 maxlen: 18
182.0.160.0/19 maxlen: 19
182.0.192.0/18 maxlen: 18
182.0.216.0/23 maxlen: 23
182.0.224.0/19 maxlen: 19
182.1.0.0/19 maxlen: 19
182.1.32.0/19 maxlen: 19
182.1.64.0/19 maxlen: 19
182.1.96.0/19 maxlen: 19
182.1.128.0/19 maxlen: 19
182.1.128.0/24 maxlen: 24
182.1.160.0/19 maxlen: 19
182.1.176.0/20 maxlen: 20
182.1.192.0/19 maxlen: 19
182.1.208.0/20 maxlen: 20
182.1.224.0/19 maxlen: 19
182.1.224.0/20 maxlen: 20
182.2.0.0/19 maxlen: 19
182.2.32.0/19 maxlen: 19
182.2.33.0/24 maxlen: 24
182.2.48.0/20 maxlen: 20
182.2.64.0/19 maxlen: 19
182.2.65.0/24 maxlen: 24
182.2.80.0/20 maxlen: 20
182.2.96.0/19 maxlen: 19
182.2.128.0/19 maxlen: 19
182.2.152.0/23 maxlen: 23
182.2.160.0/20 maxlen: 20
182.2.192.0/19 maxlen: 19
182.2.224.0/19 maxlen: 19
182.2.224.0/24 maxlen: 24
182.3.0.0/19 maxlen: 19
182.3.32.0/19 maxlen: 19
182.3.64.0/19 maxlen: 19
182.3.96.0/19 maxlen: 19
182.3.99.0/24 maxlen: 24
182.3.128.0/19 maxlen: 19
182.3.142.0/23 maxlen: 23
182.3.160.0/19 maxlen: 19
182.3.163.0/24 maxlen: 24
182.3.180.0/23 maxlen: 23
182.3.192.0/19 maxlen: 19
182.3.195.0/24 maxlen: 24
182.4.0.0/19 maxlen: 19
182.4.32.0/19 maxlen: 19
182.4.64.0/19 maxlen: 19
182.4.96.0/19 maxlen: 19
182.4.128.0/19 maxlen: 19
182.4.192.0/19 maxlen: 19
182.5.0.0/19 maxlen: 19
182.5.64.0/20 maxlen: 20
182.5.96.0/19 maxlen: 19
182.5.192.0/19 maxlen: 19
182.5.196.0/23 maxlen: 23
182.5.228.0/23 maxlen: 23
202.3.208.0/20 maxlen: 20
221.132.192.0/18 maxlen: 18
2404:c0::/32 maxlen: 32
2404:c0:1000::/38 maxlen: 38
2404:c0:1400::/38 maxlen: 38
2404:c0:1800::/38 maxlen: 38
2404:c0:1c00::/38 maxlen: 38
2404:c0:2000::/38 maxlen: 38
2404:c0:2400::/38 maxlen: 38
2404:c0:2800::/38 maxlen: 38
2404:c0:2c00::/38 maxlen: 38
2404:c0:3000::/38 maxlen: 38
2404:c0:3400::/38 maxlen: 38
2404:c0:3800::/38 maxlen: 38
2404:c0:3c00::/38 maxlen: 38
2404:c0:4000::/38 maxlen: 38
2404:c0:4200::/39 maxlen: 39
2404:c0:4290::/44 maxlen: 44
2404:c0:42a0::/44 maxlen: 44
2404:c0:42b0::/44 maxlen: 44
2404:c0:4400::/38 maxlen: 38
2404:c0:4401::/48 maxlen: 48
2404:c0:4600::/39 maxlen: 39
2404:c0:4690::/44 maxlen: 44
2404:c0:4800::/39 maxlen: 39
2404:c0:4a00::/39 maxlen: 39
2404:c0:4c00::/38 maxlen: 38
2404:c0:5000::/38 maxlen: 38
2404:c0:5400::/39 maxlen: 39
2404:c0:5600::/39 maxlen: 39
2404:c0:5800::/39 maxlen: 39
2404:c0:5a00::/39 maxlen: 39
2404:c0:5c00::/39 maxlen: 39
2404:c0:6000::/38 maxlen: 38
2404:c0:6600::/39 maxlen: 39
2404:c0:6800::/39 maxlen: 39
2404:c0:7000::/38 maxlen: 38
2404:c0:7400::/38 maxlen: 38
2404:c0:7a00::/39 maxlen: 39
2404:c0:8000::/38 maxlen: 38
2404:c0:8400::/38 maxlen: 38
2404:c0:8800::/38 maxlen: 38
2404:c0:8c00::/39 maxlen: 39
2404:c0:9000::/38 maxlen: 38
2404:c0:9400::/38 maxlen: 38
2404:c0:9800::/40 maxlen: 40
2404:c0:9a00::/39 maxlen: 39
2404:c0:9c00::/39 maxlen: 39
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 14:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2c:78:b6:ae:32:1e:4a:4e:33:8e:32:0a:b0:ca:10:84:5e:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 13:55:28 2024 GMT
Not After : Nov 10 14:00:28 2025 GMT
Subject: CN=75E57DA18DA2283D59D0D1274CDAABD1236DCB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:87:cd:16:b6:ff:13:80:99:1c:37:ec:72:
47:78:6c:64:70:73:a3:6a:03:c6:b5:a2:77:f5:bb:
5f:8a:1d:fe:7b:0e:4a:fa:50:98:bf:4c:b1:89:c9:
08:f8:55:39:d2:02:db:d4:64:ba:d0:59:ad:f6:9d:
98:a3:9c:fd:23:ff:a3:e4:58:11:6a:67:40:6b:ee:
dc:3c:3e:04:29:74:45:78:fe:7b:32:b0:85:ea:5a:
6e:e8:0f:44:18:ac:8c:34:f2:79:44:f6:63:88:80:
03:08:02:4f:b6:e3:0a:20:40:45:e2:47:38:82:b4:
9a:01:6a:1e:4e:03:a4:d2:82:20:0f:f7:90:51:9b:
de:c7:af:10:9d:0c:ab:e4:69:93:56:5d:34:a3:61:
f2:3d:b6:1e:0f:ad:2c:3c:e1:ec:ac:f9:1a:21:aa:
c0:2f:da:55:40:81:49:0b:0c:8c:d9:91:e3:86:fa:
fb:e6:b5:23:50:d8:68:21:38:7c:be:d9:81:a8:c2:
0f:e5:76:bb:3c:68:42:8c:cc:4f:1e:1e:f2:bb:cd:
41:67:78:f2:a4:03:6e:92:29:52:09:e3:6c:72:d2:
f7:ab:8c:c0:d1:7e:99:d7:4d:fe:a3:e2:a8:00:6d:
91:ac:ea:24:39:39:d2:05:7e:21:34:cb:73:d7:85:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E5:7D:A1:8D:A2:28:3D:59:D0:D1:27:4C:DA:AB:D1:23:6D:CB:19
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/AS23693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.120.0.0/13
182.0.0.0/12
202.3.208.0/20
221.132.192.0/18
IPv6:
2404:c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:0e:17:e8:f3:70:c1:49:50:e9:22:5b:00:b0:1d:e4:8f:40:
38:98:37:e4:ae:7e:97:ab:8f:92:d4:12:ca:be:f3:e5:44:cd:
29:e3:90:dc:16:d8:c2:24:c0:72:38:a7:86:91:74:20:15:12:
27:1a:5d:a0:bf:70:c2:d1:bd:1f:37:d4:14:c7:10:50:2b:f8:
a4:30:0a:ef:41:d1:0d:97:ce:8d:df:a3:32:6b:18:91:5b:bb:
30:b6:27:05:c3:a1:04:7f:07:06:2c:d8:36:09:a9:88:f9:d5:
2a:ab:c8:fc:74:73:2d:41:85:59:90:48:c7:be:4c:19:bb:8f:
90:d0:0e:9f:ef:23:45:21:28:56:43:ca:eb:2f:d8:4e:b2:c0:
aa:2f:f6:8e:96:25:b0:13:6e:0e:dc:e5:a8:22:7f:cf:e3:d1:
6a:48:a3:89:a2:d5:9e:d0:82:ff:c3:f4:00:cb:3f:26:21:32:
80:ee:70:92:39:50:e1:f6:fb:31:9e:96:dc:ba:bc:d2:42:74:
59:85:50:fd:ab:b0:02:4a:bd:7f:1b:ec:e4:e5:32:73:b1:ca:
35:58:d7:83:33:a9:57:e0:c3:6c:bd:80:89:3a:7d:51:62:b9:
54:ec:92:69:e7:6f:45:7a:b9:7c:9e:6f:7d:bf:b4:4b:40:56:
90:ab:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org