Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
File: AS133800.roa (raw, json)
Hash identifier: SZYRKiGHh1GPf7bqPY1qERpO2PDkovSk35KHVjP69sA=
Subject key identifier: 56:20:0B:0C:20:EB:75:D3:93:C3:06:16:38:91:5F:99:3F:46:BE:FE
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 291AB46E0A88FC9AD14748CF906879D3524001AB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
Signing time: Wed 17 Jul 2024 06:27:01 +0000
ROA not before: Wed 17 Jul 2024 06:22:01 +0000
ROA not after: Wed 16 Jul 2025 06:27:01 +0000
asID: 133800
IP address blocks: 103.28.75.0/24 maxlen: 24
103.44.26.0/23 maxlen: 24
103.77.104.0/23 maxlen: 24
103.89.0.0/22 maxlen: 24
103.89.4.0/22 maxlen: 24
103.93.52.0/22 maxlen: 24
103.93.56.0/22 maxlen: 24
103.93.64.0/22 maxlen: 24
103.93.128.0/22 maxlen: 24
103.93.132.0/22 maxlen: 24
103.93.160.0/22 maxlen: 24
103.125.180.0/23 maxlen: 24
103.127.96.0/23 maxlen: 24
103.127.98.0/23 maxlen: 24
103.127.132.0/23 maxlen: 24
103.127.134.0/23 maxlen: 24
103.127.136.0/23 maxlen: 24
103.127.138.0/23 maxlen: 24
103.127.208.0/23 maxlen: 24
103.127.210.0/23 maxlen: 24
103.129.148.0/23 maxlen: 24
103.150.80.0/24 maxlen: 24
103.150.84.0/23 maxlen: 24
103.150.86.0/23 maxlen: 24
103.150.88.0/23 maxlen: 24
103.150.90.0/23 maxlen: 24
103.150.92.0/23 maxlen: 24
103.150.96.0/23 maxlen: 24
103.150.98.0/23 maxlen: 24
103.150.100.0/23 maxlen: 24
103.150.102.0/23 maxlen: 24
103.150.116.0/23 maxlen: 24
103.150.120.0/23 maxlen: 24
103.150.190.0/23 maxlen: 24
103.150.192.0/23 maxlen: 24
103.150.194.0/23 maxlen: 24
103.150.196.0/23 maxlen: 24
103.175.216.0/23 maxlen: 24
103.175.218.0/23 maxlen: 24
103.175.220.0/23 maxlen: 24
103.196.146.0/23 maxlen: 24
103.196.152.0/23 maxlen: 24
103.196.154.0/23 maxlen: 24
116.206.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 25 Nov 2024 20:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1a:b4:6e:0a:88:fc:9a:d1:47:48:cf:90:68:79:d3:52:40:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 17 06:22:01 2024 GMT
Not After : Jul 16 06:27:01 2025 GMT
Subject: CN=56200B0C20EB75D393C3061638915F993F46BEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8e:9f:1e:b6:1d:e1:1a:37:d3:47:8e:58:44:
aa:76:18:a5:2e:59:4c:80:94:d9:95:c3:69:4d:dc:
bb:4b:6f:02:7a:4a:70:b1:2b:30:43:50:91:27:4a:
6c:53:44:bb:f0:ca:3a:3f:64:c7:b5:53:44:7b:2b:
0e:0c:3d:2f:5b:be:b0:4c:11:b4:3b:9f:ab:be:c8:
9a:3a:3b:6f:4e:94:9d:b1:18:00:7b:12:30:9d:b8:
e6:23:ed:78:76:a1:23:5f:9f:fd:06:c4:a0:06:3c:
5b:e8:2d:e5:95:1a:42:e2:9a:c6:b3:fb:34:4a:ee:
bf:58:3a:fc:77:b4:89:7b:94:33:ca:93:c8:39:56:
1a:05:78:c5:0d:a9:02:78:5a:95:c7:84:a6:e4:8e:
1d:8d:56:92:69:03:04:2e:1e:34:14:0c:a8:1f:37:
2a:04:9f:e1:5d:dc:0a:eb:75:dc:1f:1f:ff:20:a7:
ad:67:89:56:02:bd:ed:5d:dd:d2:f4:56:bd:ba:cb:
43:ca:d4:e0:1d:af:ec:2a:1e:8e:b0:4b:b7:cc:a5:
e1:9f:69:e2:1b:d7:7b:13:e0:d5:1a:e6:fa:6a:b3:
cb:cd:27:23:27:4d:4a:8f:dd:86:6d:23:b0:6d:bc:
01:2c:b3:c0:e4:ea:61:19:54:82:4d:a7:ce:78:c2:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:20:0B:0C:20:EB:75:D3:93:C3:06:16:38:91:5F:99:3F:46:BE:FE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.75.0/24
103.44.26.0/23
103.77.104.0/23
103.89.0.0/21
103.93.52.0-103.93.59.255
103.93.64.0/22
103.93.128.0/21
103.93.160.0/22
103.125.180.0/23
103.127.96.0/22
103.127.132.0-103.127.139.255
103.127.208.0/22
103.129.148.0/23
103.150.80.0/24
103.150.84.0-103.150.93.255
103.150.96.0/21
103.150.116.0/23
103.150.120.0/23
103.150.190.0-103.150.197.255
103.175.216.0-103.175.221.255
103.196.146.0/23
103.196.152.0/22
116.206.196.0/22
Signature Algorithm: sha256WithRSAEncryption
30:1f:78:ee:78:0e:55:19:fc:3c:88:03:eb:c5:3c:30:07:38:
92:93:e3:fb:b4:d1:41:21:9d:5b:48:11:2f:de:65:ce:0d:2c:
95:ef:9d:1d:72:e3:6a:42:5e:ca:f4:6b:ff:4c:3f:0b:99:84:
79:b2:69:a2:5d:98:51:e6:f3:df:c9:b1:ea:f2:0c:7a:80:28:
c6:89:61:5c:a3:3b:0f:ff:14:12:c0:45:7c:10:04:70:d4:b0:
f4:4f:48:48:7f:16:c7:37:ef:a4:72:5c:cc:02:07:97:c4:fa:
b5:48:44:23:5f:20:ba:8b:0a:fa:6f:72:4b:52:9d:56:b0:c9:
33:e0:51:88:ca:14:eb:81:bb:93:75:69:2b:d1:13:ff:0e:8f:
4a:36:1d:9e:1d:0e:f0:48:ed:0f:d0:98:f0:8a:4a:29:9b:13:
1b:f9:62:c2:5e:a1:80:57:95:98:89:9b:30:5f:af:31:1c:4b:
d4:7d:bc:db:b9:d9:a3:b5:9d:4f:79:12:af:c0:27:82:d2:52:
62:fb:17:13:af:c1:a1:57:76:53:e2:8f:3b:da:99:1b:18:d2:
c7:cb:fe:4b:98:3d:7d:2e:a2:9a:c1:14:ea:ea:c4:6e:86:92:
88:ee:30:ab:69:3a:06:fe:ce:5d:7e:2e:17:63:2b:25:45:20:
ae:af:32:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:23 2024 by rpki-client on console-fra.rpki-client.org