Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233382e302f32332d3234203d3e203137393935.roa
File: 3130332e3136352e3233382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: iP5HU+igoWHxR0bWSog29HAb05sIg866ueKzCcFqQdE=
Subject key identifier: 97:8D:DE:7B:29:D4:45:D4:07:DC:5D:F8:8A:F0:34:E0:02:F8:1B:8C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 037F6B034B66C08A10BAC7A3EB5F10CC461E9F79
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233382e302f32332d3234203d3e203137393935.roa
Signing time: Tue 02 Nov 2021 00:43:17 +0000
ROA not before: Tue 02 Nov 2021 00:38:17 +0000
ROA not after: Wed 02 Nov 2022 00:43:17 +0000
asID: 17995
IP address blocks: 103.165.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7f:6b:03:4b:66:c0:8a:10:ba:c7:a3:eb:5f:10:cc:46:1e:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Nov 2 00:38:17 2021 GMT
Not After : Nov 2 00:43:17 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:55:b9:17:22:16:d0:5c:27:5b:4c:9c:bc:
99:32:99:6e:ce:25:88:e4:d1:87:1a:12:eb:17:45:
7f:5f:e2:08:40:e1:d6:87:b7:92:a1:eb:71:48:12:
05:f5:4e:2b:1e:7b:21:43:21:28:cb:23:47:81:b8:
7d:16:0a:88:d9:2f:b5:92:4e:9f:16:71:6e:59:46:
af:e8:07:0d:0f:c4:82:ff:3e:4f:2e:5a:8b:7f:32:
5d:77:f6:a9:77:d1:4b:df:87:ab:de:62:19:45:b2:
24:c3:28:e0:a3:62:25:12:66:ea:d1:e0:95:7a:9c:
ff:68:64:9b:da:3d:14:2b:a9:39:8a:8e:de:9b:e0:
a7:9b:58:f5:bc:67:63:07:f6:04:5e:d7:2c:30:6a:
a5:87:9f:b6:99:09:cb:c3:22:b5:22:47:76:1d:4f:
75:80:bd:ca:b4:72:e1:74:6c:17:7b:1d:3d:96:61:
1e:12:52:05:76:51:91:ab:88:11:44:3a:a7:6e:55:
d5:7b:1b:2d:f4:3b:cf:6b:e5:72:cd:da:0e:d3:f2:
19:c0:a0:08:be:95:29:ad:73:19:37:4e:a6:50:10:
25:d2:0a:d4:4a:22:c7:6b:d1:52:0e:a5:f1:9f:5c:
90:0d:ba:65:06:e7:a8:69:18:5e:47:48:8f:9e:88:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8D:DE:7B:29:D4:45:D4:07:DC:5D:F8:8A:F0:34:E0:02:F8:1B:8C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233382e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.238.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:e8:ad:ad:3f:93:34:1a:f1:e6:b2:bd:a5:dc:d9:12:81:63:
f2:f2:74:11:b1:f7:03:0a:62:cb:39:31:7e:22:16:e3:b7:e6:
fb:f5:bd:8f:90:82:1f:b5:10:7f:9e:68:6b:52:39:8e:4d:7f:
f7:53:9a:f7:2e:b6:67:60:0c:af:40:3c:b3:f7:da:03:fa:f0:
3a:3c:fd:99:82:56:7e:05:c0:66:1d:c3:7b:11:3d:54:3c:cc:
90:85:ba:d1:85:55:64:0f:39:ff:4d:13:01:17:f9:6c:de:f2:
e3:b6:7c:1e:29:a5:08:27:88:97:8c:5e:8c:37:5f:9d:b4:41:
fc:0a:f8:62:10:fd:cc:1b:a6:a4:34:ed:63:ba:57:93:21:db:
4c:70:4a:ba:fb:80:be:7f:3b:45:bf:a5:03:8d:58:23:34:9b:
bc:b0:b7:ad:2a:68:f6:c2:3b:28:c7:6e:d2:e2:95:28:29:75:
fc:6c:f9:0b:73:96:f7:5c:88:48:c6:25:05:4a:db:47:8f:31:
30:49:a7:a3:74:66:4f:2c:d1:18:07:73:56:50:44:51:81:63:
a9:f1:4a:5a:85:5a:e8:9d:18:00:a5:15:c4:ab:80:92:17:95:
fd:b9:cc:2e:c8:f1:f1:67:32:3b:ab:57:78:bc:6d:88:e8:58:
0d:bf:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:21:28 2025 by rpki-client