Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
File: AS131111.roa (raw, json)
Hash identifier: q6iDex6EcVE/IEVktqz5uqFh3+IQg4N5bIY+7JsvZ8o=
Subject key identifier: C1:2A:EF:7D:25:ED:D4:C3:02:A0:C1:1E:AB:5E:62:DC:36:9E:A1:BF
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4E7EE180AFDB7BC299E711DC4816080C6EFD2D0D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
Signing time: Sat 11 May 2024 00:16:01 +0000
ROA not before: Sat 11 May 2024 00:11:01 +0000
ROA not after: Sat 10 May 2025 00:16:01 +0000
asID: 131111
IP address blocks: 103.75.24.0/22 maxlen: 24
103.75.208.0/22 maxlen: 24
103.76.24.0/22 maxlen: 24
103.78.80.0/22 maxlen: 24
103.78.96.0/22 maxlen: 24
103.78.212.0/22 maxlen: 24
103.81.132.0/22 maxlen: 24
103.82.12.0/22 maxlen: 24
103.83.4.0/22 maxlen: 24
103.83.92.0/22 maxlen: 24
103.85.60.0/22 maxlen: 24
103.85.64.0/22 maxlen: 24
103.122.32.0/24 maxlen: 24
103.122.33.0/24 maxlen: 24
103.122.34.0/24 maxlen: 24
103.122.35.0/24 maxlen: 24
103.123.64.0/24 maxlen: 24
103.123.65.0/24 maxlen: 24
103.123.66.0/24 maxlen: 24
103.123.67.0/24 maxlen: 24
103.123.68.0/24 maxlen: 24
103.123.69.0/24 maxlen: 24
103.123.70.0/24 maxlen: 24
103.123.71.0/24 maxlen: 24
103.123.248.0/24 maxlen: 24
103.123.249.0/24 maxlen: 24
103.123.250.0/24 maxlen: 24
103.123.251.0/24 maxlen: 24
103.124.112.0/24 maxlen: 24
103.124.113.0/24 maxlen: 24
103.124.114.0/24 maxlen: 24
103.124.115.0/24 maxlen: 24
103.124.118.0/24 maxlen: 24
103.124.119.0/24 maxlen: 24
103.125.208.0/24 maxlen: 24
103.125.209.0/24 maxlen: 24
103.125.210.0/24 maxlen: 24
103.125.211.0/24 maxlen: 24
103.135.212.0/24 maxlen: 24
103.135.213.0/24 maxlen: 24
103.135.214.0/24 maxlen: 24
103.135.215.0/24 maxlen: 24
103.135.220.0/22 maxlen: 24
103.135.222.0/24 maxlen: 24
103.135.223.0/24 maxlen: 24
103.136.56.0/24 maxlen: 24
103.136.57.0/24 maxlen: 24
103.136.58.0/24 maxlen: 24
103.136.59.0/24 maxlen: 24
103.154.78.0/24 maxlen: 24
103.154.79.0/24 maxlen: 24
103.154.80.0/24 maxlen: 24
103.154.81.0/24 maxlen: 24
103.154.82.0/24 maxlen: 24
103.154.83.0/24 maxlen: 24
103.154.84.0/24 maxlen: 24
103.154.85.0/24 maxlen: 24
103.154.86.0/24 maxlen: 24
103.154.87.0/24 maxlen: 24
103.154.88.0/24 maxlen: 24
103.154.89.0/24 maxlen: 24
103.154.90.0/24 maxlen: 24
103.154.91.0/24 maxlen: 24
103.154.92.0/24 maxlen: 24
103.154.93.0/24 maxlen: 24
103.154.108.0/24 maxlen: 24
103.154.109.0/24 maxlen: 24
103.154.110.0/24 maxlen: 24
103.154.111.0/24 maxlen: 24
103.154.112.0/24 maxlen: 24
103.154.113.0/24 maxlen: 24
103.154.114.0/24 maxlen: 24
103.154.115.0/24 maxlen: 24
103.154.116.0/24 maxlen: 24
103.154.117.0/24 maxlen: 24
103.154.118.0/24 maxlen: 24
103.154.119.0/24 maxlen: 24
103.154.120.0/24 maxlen: 24
103.154.121.0/24 maxlen: 24
103.154.122.0/24 maxlen: 24
103.154.123.0/24 maxlen: 24
103.154.124.0/24 maxlen: 24
103.154.125.0/24 maxlen: 24
103.154.126.0/24 maxlen: 24
103.154.127.0/24 maxlen: 24
103.154.128.0/24 maxlen: 24
103.154.129.0/24 maxlen: 24
103.154.130.0/24 maxlen: 24
103.154.131.0/24 maxlen: 24
103.154.134.0/24 maxlen: 24
103.154.135.0/24 maxlen: 24
103.154.136.0/24 maxlen: 24
103.154.137.0/24 maxlen: 24
103.154.138.0/24 maxlen: 24
103.154.139.0/24 maxlen: 24
103.154.140.0/24 maxlen: 24
103.154.141.0/24 maxlen: 24
103.154.142.0/24 maxlen: 24
103.154.143.0/24 maxlen: 24
103.154.144.0/24 maxlen: 24
103.154.145.0/24 maxlen: 24
103.154.146.0/24 maxlen: 24
103.154.147.0/24 maxlen: 24
103.154.148.0/24 maxlen: 24
103.154.149.0/24 maxlen: 24
103.154.150.0/24 maxlen: 24
103.154.151.0/24 maxlen: 24
103.154.152.0/24 maxlen: 24
103.154.153.0/24 maxlen: 24
103.154.210.0/24 maxlen: 24
103.154.211.0/24 maxlen: 24
103.154.212.0/24 maxlen: 24
103.154.213.0/24 maxlen: 24
103.154.214.0/24 maxlen: 24
103.154.215.0/24 maxlen: 24
103.154.216.0/24 maxlen: 24
103.154.217.0/24 maxlen: 24
103.154.218.0/24 maxlen: 24
103.154.219.0/24 maxlen: 24
103.154.220.0/24 maxlen: 24
103.154.221.0/24 maxlen: 24
103.154.222.0/24 maxlen: 24
103.154.223.0/24 maxlen: 24
103.154.224.0/24 maxlen: 24
103.154.225.0/24 maxlen: 24
103.154.226.0/24 maxlen: 24
103.154.227.0/24 maxlen: 24
103.154.228.0/24 maxlen: 24
103.154.229.0/24 maxlen: 24
119.235.208.0/20 maxlen: 20
202.150.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 May 2024 01:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7e:e1:80:af:db:7b:c2:99:e7:11:dc:48:16:08:0c:6e:fd:2d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 11 00:11:01 2024 GMT
Not After : May 10 00:16:01 2025 GMT
Subject: CN=C12AEF7D25EDD4C302A0C11EAB5E62DC369EA1BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:c0:7c:db:13:34:13:ac:50:94:2a:69:50:
11:37:7b:eb:c9:e8:ca:88:77:7d:5a:09:6c:30:9a:
f2:63:db:a5:88:66:58:a2:af:6f:16:17:f6:31:1e:
70:a8:61:85:1b:2f:e7:3a:5c:de:12:7c:68:a2:ff:
ad:b0:0a:91:78:84:57:0f:ff:7a:7f:34:2f:ef:7e:
ba:d7:b3:53:7e:50:0c:8a:3a:b2:7e:2e:be:3b:6a:
16:95:a9:bf:79:44:83:f5:f6:77:46:ce:de:b3:a6:
2a:c7:d2:44:69:58:3d:2d:94:04:8d:30:a6:dc:ad:
20:f2:69:21:f4:fb:fd:70:bc:00:8b:6a:2b:fe:e7:
e6:40:87:5c:78:f2:f0:a1:e4:81:42:42:8f:71:99:
76:cd:29:65:ad:ee:05:56:9a:d8:71:85:b2:19:65:
31:cc:d0:dd:f3:09:1b:d1:fd:a4:7c:00:af:08:d6:
3d:b5:3b:ff:d3:93:9e:90:87:6b:2a:8c:3d:7a:8d:
82:27:05:e0:88:b6:e4:74:b4:b6:80:0b:73:86:f4:
e0:ee:77:b8:cc:c7:0d:2e:49:02:f6:b1:2d:c7:9d:
c3:b2:c3:5c:7c:b6:6b:e8:b0:ed:c2:8c:fa:00:f6:
51:d1:77:9b:71:7c:31:ee:ff:65:fa:0e:bf:d7:13:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:EF:7D:25:ED:D4:C3:02:A0:C1:1E:AB:5E:62:DC:36:9E:A1:BF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.24.0/22
103.75.208.0/22
103.76.24.0/22
103.78.80.0/22
103.78.96.0/22
103.78.212.0/22
103.81.132.0/22
103.82.12.0/22
103.83.4.0/22
103.83.92.0/22
103.85.60.0-103.85.67.255
103.122.32.0/22
103.123.64.0/21
103.123.248.0/22
103.124.112.0/22
103.124.118.0/23
103.125.208.0/22
103.135.212.0/22
103.135.220.0/22
103.136.56.0/22
103.154.78.0-103.154.93.255
103.154.108.0-103.154.131.255
103.154.134.0-103.154.153.255
103.154.210.0-103.154.229.255
119.235.208.0/20
202.150.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:3c:84:e9:b1:a1:86:ed:ea:b3:32:1f:ef:a3:80:d6:87:15:
fd:f5:50:83:73:0e:7b:a4:33:d2:66:4c:47:3a:35:76:e0:8c:
7f:96:65:cc:7e:e8:10:af:0d:76:1c:f1:36:e9:48:d7:41:b1:
ae:dc:53:1b:67:9f:ad:48:22:be:f1:d8:68:6a:56:c0:16:d4:
7d:f4:9b:26:88:64:c5:23:70:91:89:cd:4e:15:30:2d:70:d8:
17:75:b7:ef:e4:ce:46:a8:08:8b:3b:cf:86:37:9a:b0:8d:96:
0c:c3:b4:b6:9a:a9:2f:64:60:ba:22:c5:01:23:f6:ba:4c:e6:
3f:ff:be:07:9e:91:e5:47:a5:ea:84:39:39:c2:9f:ac:53:9e:
54:70:5d:c7:7c:fa:b5:a6:ef:97:51:e0:70:6b:a9:3b:d8:f3:
a4:1f:c6:8b:b5:3b:d0:e0:dd:5e:5e:38:8a:43:06:4d:30:0f:
e9:ae:a9:62:f5:f0:37:5c:e2:d5:2e:cf:c4:ee:66:75:fe:e2:
73:25:29:fa:46:3f:26:3a:d8:36:a8:75:2f:29:aa:d2:56:bf:
1d:bd:19:04:10:ce:91:04:93:3a:8c:95:46:16:5c:df:16:c0:
39:b4:48:2a:ab:93:06:a5:99:fc:dd:02:7a:4f:3e:66:4f:45:
3e:fe:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:35:39 2024 by rpki-client on console-fra.rpki-client.org