Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa
File: AS132641.roa (raw, json)
Hash identifier: b5cGC5VL/QA/cEZFqw+sgGw1ByAxIPNJ2QELH1g30bw=
Subject key identifier: B0:37:8D:1D:B6:23:E7:17:98:A4:90:3A:F5:57:39:EE:0D:FA:7C:79
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1D8D357A4C9E5E26FA9561C8CE2739419F291045
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa
Signing time: Wed 07 Aug 2024 09:00:00 +0000
ROA not before: Wed 07 Aug 2024 08:55:00 +0000
ROA not after: Wed 06 Aug 2025 09:00:00 +0000
asID: 132641
IP address blocks: 43.251.96.0/22 maxlen: 24
103.19.108.0/22 maxlen: 24
103.132.140.0/22 maxlen: 24
103.145.218.0/23 maxlen: 24
103.145.224.0/23 maxlen: 24
103.145.240.0/23 maxlen: 24
103.145.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 25 Nov 2024 20:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8d:35:7a:4c:9e:5e:26:fa:95:61:c8:ce:27:39:41:9f:29:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Aug 7 08:55:00 2024 GMT
Not After : Aug 6 09:00:00 2025 GMT
Subject: CN=B0378D1DB623E71798A4903AF55739EE0DFA7C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:80:7c:e4:a4:ee:86:53:b9:b8:30:9f:15:
84:6d:74:cc:1c:59:52:4e:43:f1:ce:a3:8c:61:40:
ea:1c:ec:ce:5c:ca:c0:e3:49:4c:b7:c1:95:0f:da:
5a:66:d5:37:2e:3d:ac:00:59:59:53:46:92:1e:83:
03:e7:29:ff:bb:97:b7:8c:1e:93:43:26:a6:77:f4:
ff:87:0a:a3:d4:13:00:67:bd:5f:11:5a:e1:9f:a9:
10:59:15:45:43:5c:7d:de:93:89:91:be:19:e8:23:
c1:c8:a7:e1:cf:e8:54:e2:e1:d6:1a:b5:46:c9:06:
df:d5:7b:ea:ab:2c:d7:5a:43:08:27:6c:7e:46:8d:
fe:36:24:8a:06:0e:f9:33:61:d9:38:0e:cf:e8:c8:
a5:51:8c:4d:9a:88:df:b9:54:e5:fa:8f:99:1b:97:
58:92:09:7b:22:5c:f4:30:e8:1d:0e:02:9b:8f:2b:
56:fe:ca:f6:6f:58:f3:2c:f0:df:4c:15:f4:1a:2b:
2d:0b:a0:4a:7d:d1:1a:d3:91:89:b2:ab:ff:47:2d:
75:fe:db:6e:6f:bd:bd:81:e3:90:eb:3b:12:2f:92:
6a:b6:5b:35:04:3b:ea:70:86:84:6e:3d:5f:94:22:
a5:cd:24:9b:94:27:4a:f2:c7:04:9c:cf:74:ce:68:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:8D:1D:B6:23:E7:17:98:A4:90:3A:F5:57:39:EE:0D:FA:7C:79
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.251.96.0/22
103.19.108.0/22
103.132.140.0/22
103.145.218.0/23
103.145.224.0/23
103.145.240.0/23
103.145.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:b5:ea:7e:61:d9:b7:2b:b8:6c:b7:a7:e6:bd:73:cb:af:9d:
74:b1:30:2d:fe:02:26:a7:cf:a5:5f:f2:fe:8a:c7:f3:8a:35:
14:52:05:3a:f8:04:19:86:3b:f3:92:1c:0e:7d:bc:b8:5b:5a:
4c:6a:eb:3f:eb:67:ce:ec:d3:13:3e:c1:06:41:97:0b:0c:77:
4c:25:69:8e:06:b8:a5:d5:c5:1d:39:33:01:ab:f0:b6:7b:6a:
65:b1:23:0a:ac:b9:8c:a0:04:8b:1d:39:3e:a8:0d:24:27:b9:
9a:46:3c:97:c0:27:86:fe:d7:cf:0f:ec:bf:57:ea:bb:45:af:
d3:c9:eb:94:0a:1f:2a:14:44:e1:24:c4:ac:b6:5f:ba:70:b3:
a5:ad:48:cf:27:a6:14:a1:0c:cc:9d:ea:a8:50:94:36:29:00:
10:2e:87:ef:05:d5:2b:c7:c2:b0:f5:dc:e4:43:f3:72:3c:5a:
ad:da:b0:e4:08:d8:4a:74:bc:41:2d:01:6f:cd:27:84:14:14:
d1:9e:c8:da:b5:72:27:ec:05:32:69:45:1a:68:24:b2:ee:e9:
05:38:59:56:3e:e3:b9:01:b2:cb:58:9c:5d:5e:6f:48:30:27:
7c:b1:50:d3:c8:94:31:fa:a6:3f:a0:d2:15:a3:55:61:0d:c6:
c1:32:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:46 2024 by rpki-client on console-ams.rpki-client.org