Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152782.roa
File: AS152782.roa (raw, json)
Hash identifier: ghAF47mcN7RLtErKpZSrYlqQM/RB0R5Ap+RsUvXmapQ=
Subject key identifier: 92:C2:24:3B:F1:A2:E0:CA:33:66:F2:C9:74:4D:8B:6C:4E:57:1B:06
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 57B4842BC8A7FBB20218C0248F4AA800C4E16C94
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152782.roa
Signing time: Thu 06 Feb 2025 10:44:56 +0000
ROA not before: Thu 06 Feb 2025 10:39:56 +0000
ROA not after: Thu 05 Feb 2026 10:44:56 +0000
asID: 152782
IP address blocks: 160.20.138.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b4:84:2b:c8:a7:fb:b2:02:18:c0:24:8f:4a:a8:00:c4:e1:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 6 10:39:56 2025 GMT
Not After : Feb 5 10:44:56 2026 GMT
Subject: CN=92C2243BF1A2E0CA3366F2C9744D8B6C4E571B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:7f:e9:ea:4d:b1:db:48:32:12:c2:7e:92:
a1:07:c2:a7:f8:d7:21:a8:05:09:8a:7d:5c:44:3d:
ae:2a:01:d1:5e:fb:bc:45:f0:dd:1a:39:51:f1:77:
48:cf:c2:77:1c:04:a8:bf:95:96:0f:53:be:4a:f4:
be:c4:b1:2d:eb:60:d6:c9:2b:d4:ab:07:d7:28:9b:
f6:04:7c:20:a4:c8:7a:55:61:66:be:b4:2f:0b:bc:
56:af:89:ae:20:19:99:7f:f7:65:d3:36:9e:d6:eb:
d8:d0:ac:de:d6:89:56:cd:4b:38:0a:13:cd:47:da:
ea:74:e2:00:09:0e:22:42:e4:b9:a9:d5:f3:ac:ae:
c9:36:e6:1d:f5:0d:4f:21:09:4e:50:5e:f1:89:8b:
51:29:92:89:e0:5e:a1:2f:70:9a:bf:52:01:5d:67:
96:96:7f:64:3c:0b:98:52:d1:93:29:f3:91:6a:50:
3a:51:fd:a1:e7:3d:72:db:1b:ca:97:f9:5a:ef:09:
8e:ae:c8:16:7f:54:8f:10:16:8a:32:ca:a1:59:46:
be:49:70:f6:f6:e5:b2:c7:7d:36:80:e3:59:7f:7e:
14:76:7b:31:dd:32:f6:e0:53:52:43:96:cf:40:27:
77:ea:c8:6c:4f:b7:33:fc:a2:57:26:56:84:4b:58:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:24:3B:F1:A2:E0:CA:33:66:F2:C9:74:4D:8B:6C:4E:57:1B:06
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152782.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:aa:33:59:93:d1:3d:06:65:3e:ae:48:83:49:f6:83:55:3a:
0d:b9:8d:33:ab:f2:1f:69:c0:72:61:00:2f:da:99:0a:e4:85:
cd:fe:53:2d:06:f0:18:c2:86:45:a3:d7:88:2d:2b:20:c2:f2:
0d:93:ea:59:1d:9d:12:db:8c:2f:fa:84:0d:65:1d:39:b0:a7:
8c:90:92:20:f3:0a:e3:62:cd:7c:31:98:8c:1d:6a:a4:4d:fb:
11:22:a2:b6:96:39:61:73:07:48:c6:66:28:7c:79:78:80:a7:
62:d8:ec:b5:c4:59:b9:4b:50:33:95:77:f7:de:28:e9:7d:67:
90:96:f0:47:5a:4d:02:28:b3:a2:2b:a1:e6:92:ea:34:fc:c5:
c0:97:11:9c:27:fd:95:22:46:88:ed:cf:1f:7f:79:61:e1:d5:
78:9e:d9:f7:64:b6:a9:95:ad:aa:9e:65:e6:d8:0a:4c:d6:29:
c5:c5:cc:dc:50:bc:fa:74:39:1d:02:b7:52:b8:f2:04:9f:c4:
31:6e:b5:49:09:ec:d5:54:a4:90:a8:68:f0:55:7c:e4:f3:31:
ea:71:6d:53:85:77:73:d3:68:d8:a2:97:f2:0f:5d:61:46:1f:
c1:9d:39:be:e5:73:2a:99:ed:08:fe:66:9c:8b:6f:7d:9d:0f:
04:c1:67:b3
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUV7SEK8in+7ICGMAkj0qoAMThbJQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1NloX
DTI2MDIwNTEwNDQ1NlowMzExMC8GA1UEAxMoOTJDMjI0M0JGMUEyRTBDQTMzNjZG
MkM5NzQ0RDhCNkM0RTU3MUIwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK5Zf+nqTbHbSDISwn6SoQfCp/jXIagFCYp9XEQ9rioB0V77vEXw3Ro5UfF3
SM/CdxwEqL+Vlg9Tvkr0vsSxLetg1skr1KsH1yib9gR8IKTIelVhZr60Lwu8Vq+J
riAZmX/3ZdM2ntbr2NCs3taJVs1LOAoTzUfa6nTiAAkOIkLkuanV86yuyTbmHfUN
TyEJTlBe8YmLUSmSieBeoS9wmr9SAV1nlpZ/ZDwLmFLRkynzkWpQOlH9oec9ctsb
ypf5Wu8Jjq7IFn9UjxAWijLKoVlGvklw9vblssd9NoDjWX9+FHZ7Md0y9uBTUkOW
z0And+rIbE+3M/yiVyZWhEtY5VMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSSwiQ7
8aLgyjNm8sl0TYtsTlcbBjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mjc4Mi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAUijANBgkqhkiG9w0BAQsFAAOCAQEAfqozWZPRPQZlPq5Ig0n2
g1U6DbmNM6vyH2nAcmEAL9qZCuSFzf5TLQbwGMKGRaPXiC0rIMLyDZPqWR2dEtuM
L/qEDWUdObCnjJCSIPMK42LNfDGYjB1qpE37ESKitpY5YXMHSMZmKHx5eICnYtjs
tcRZuUtQM5V3994o6X1nkJbwR1pNAiizoiuh5pLqNPzFwJcRnCf9lSJGiO3PH395
YeHVeJ7Z92S2qZWtqp5l5tgKTNYpxcXM3FC8+nQ5HQK3UrjyBJ/EMW61SQns1VSk
kKho8FV85PMx6nFtU4V3c9No2KKX8g9dYUYfwZ05vuVzKpntCP5mnItvfZ0PBMFn
sw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:55 2025 by rpki-client