Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136052.roa
File: AS136052.roa (raw, json)
Hash identifier: JtaXHE/WTD9QOaIeAKuvJPSUIf0LXrojdUWLCIsdBu8=
Subject key identifier: E4:2E:15:20:67:20:35:7D:95:0F:8A:AF:64:F4:C4:EC:55:C4:BF:B3
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3A50558A8794293111AB0A271584ADA4D62B80A6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136052.roa
Signing time: Fri 18 Oct 2024 08:00:00 +0000
ROA not before: Fri 18 Oct 2024 07:55:00 +0000
ROA not after: Fri 17 Oct 2025 08:00:00 +0000
asID: 136052
IP address blocks: 27.112.78.0/23 maxlen: 24
103.23.198.0/23 maxlen: 24
103.31.38.0/23 maxlen: 24
103.49.238.0/23 maxlen: 24
103.52.114.0/23 maxlen: 24
103.63.24.0/23 maxlen: 24
103.67.78.0/23 maxlen: 24
103.76.120.0/23 maxlen: 24
103.123.62.0/23 maxlen: 24
103.139.192.0/23 maxlen: 24
103.171.84.0/24 maxlen: 24
103.171.85.0/24 maxlen: 24
103.172.204.0/23 maxlen: 24
103.174.114.0/23 maxlen: 24
103.176.76.0/24 maxlen: 24
103.176.78.0/23 maxlen: 24
103.179.56.0/23 maxlen: 24
103.179.254.0/23 maxlen: 24
103.181.142.0/23 maxlen: 24
103.183.74.0/23 maxlen: 24
103.191.92.0/23 maxlen: 24
103.193.176.0/23 maxlen: 24
103.193.178.0/23 maxlen: 24
103.217.144.0/23 maxlen: 24
103.217.226.0/23 maxlen: 24
103.226.138.0/23 maxlen: 24
103.242.10.0/23 maxlen: 24
103.250.208.0/23 maxlen: 24
116.193.190.0/23 maxlen: 24
203.145.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 22:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:50:55:8a:87:94:29:31:11:ab:0a:27:15:84:ad:a4:d6:2b:80:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 18 07:55:00 2024 GMT
Not After : Oct 17 08:00:00 2025 GMT
Subject: CN=E42E15206720357D950F8AAF64F4C4EC55C4BFB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:f8:d9:6f:10:81:4e:6e:95:b6:0e:ff:d8:
23:8b:73:41:ca:4f:cf:d4:e2:e4:eb:a8:2f:b8:1b:
f1:db:a5:ae:44:6b:84:cb:29:cd:03:0b:15:fc:46:
00:bc:f6:0f:0a:d5:59:1a:8f:e4:ed:e8:91:5f:11:
0a:77:db:d7:f4:5a:e6:6c:63:2e:22:11:1c:66:ec:
49:21:38:32:69:19:b5:92:33:58:ba:9a:dd:cc:0d:
cb:23:5e:8f:88:c7:3d:14:04:0c:24:dd:c3:fc:d4:
80:e5:bb:cd:9d:29:80:52:4e:71:e0:aa:ff:c0:fd:
b0:85:d0:d9:86:10:c9:e9:de:a2:82:44:40:c3:46:
c6:98:40:88:67:57:85:06:87:2d:52:7f:12:c0:b5:
e3:d9:eb:b8:f4:35:6f:89:0d:dc:fa:4d:c2:76:5e:
ea:c9:5e:ed:26:bd:d8:de:9e:c3:e0:c7:7c:0e:05:
ba:b9:10:69:a2:2c:56:6a:89:08:6c:5a:87:0f:7d:
cb:2a:43:70:12:31:e2:a4:7f:c7:d7:70:8a:59:2b:
f6:94:30:8c:df:18:84:b2:da:c2:71:d3:1c:4d:3b:
4e:d7:f4:e7:c0:a5:f3:bd:c6:f3:0a:28:f2:50:f0:
6f:b0:38:d0:67:9a:a4:0a:8a:13:18:3c:c4:8e:b9:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:15:20:67:20:35:7D:95:0F:8A:AF:64:F4:C4:EC:55:C4:BF:B3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.78.0/23
103.23.198.0/23
103.31.38.0/23
103.49.238.0/23
103.52.114.0/23
103.63.24.0/23
103.67.78.0/23
103.76.120.0/23
103.123.62.0/23
103.139.192.0/23
103.171.84.0/23
103.172.204.0/23
103.174.114.0/23
103.176.76.0/24
103.176.78.0/23
103.179.56.0/23
103.179.254.0/23
103.181.142.0/23
103.183.74.0/23
103.191.92.0/23
103.193.176.0/22
103.217.144.0/23
103.217.226.0/23
103.226.138.0/23
103.242.10.0/23
103.250.208.0/23
116.193.190.0/23
203.145.34.0/23
Signature Algorithm: sha256WithRSAEncryption
15:2b:b1:e2:56:09:63:41:36:cb:d1:0a:f6:e1:4c:60:c6:c9:
9e:f1:59:90:80:e8:7a:97:13:fd:8d:ef:a8:b1:80:0f:66:e2:
26:ee:b8:bb:c1:ad:75:46:12:14:33:49:1e:4f:38:f8:06:aa:
f3:08:19:28:a4:6c:02:3f:d3:0c:82:0f:44:4a:52:24:59:f6:
36:cb:ca:18:c8:60:eb:39:fd:9c:d1:3a:65:60:18:43:84:fd:
cb:6c:dc:43:89:28:6e:b6:7d:32:7b:98:32:79:c8:3a:6c:94:
62:70:39:ce:c4:e5:36:bd:3f:e5:66:b0:7d:b2:92:2c:67:f3:
95:73:34:da:18:48:23:78:04:eb:29:ca:a4:99:40:0f:0a:9e:
1a:ef:72:b1:70:45:a6:4c:65:3a:02:68:d1:5e:e4:b2:f4:09:
d5:13:83:9d:ea:08:ba:dd:b5:63:e1:3a:cc:55:cd:2e:30:87:
53:35:8e:e7:b4:c2:ef:86:72:91:f7:be:e6:1d:b5:98:4c:25:
5d:e1:00:04:a0:29:ab:79:63:65:76:53:60:07:ac:c7:bd:01:
90:b0:f1:2d:dc:74:7a:27:8e:d2:c2:84:8d:47:ec:7d:91:a0:
48:4c:3c:71:c5:63:29:f1:73:9b:2a:77:9d:d1:fe:80:37:80:
1a:45:58:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUOlBVioeUKTERqwonFYStpNYrgKYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxODA3NTUwMFoX
DTI1MTAxNzA4MDAwMFowMzExMC8GA1UEAxMoRTQyRTE1MjA2NzIwMzU3RDk1MEY4
QUFGNjRGNEM0RUM1NUM0QkZCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALp6+NlvEIFObpW2Dv/YI4tzQcpPz9Ti5OuoL7gb8dulrkRrhMspzQMLFfxG
ALz2DwrVWRqP5O3okV8RCnfb1/Ra5mxjLiIRHGbsSSE4MmkZtZIzWLqa3cwNyyNe
j4jHPRQEDCTdw/zUgOW7zZ0pgFJOceCq/8D9sIXQ2YYQyeneooJEQMNGxphAiGdX
hQaHLVJ/EsC149nruPQ1b4kN3PpNwnZe6sle7Sa92N6ew+DHfA4FurkQaaIsVmqJ
CGxahw99yypDcBIx4qR/x9dwilkr9pQwjN8YhLLawnHTHE07Ttf058Cl873G8woo
8lDwb7A40GeapAqKExg8xI65/9ECAwEAAaOCAncwggJzMB0GA1UdDgQWBBTkLhUg
ZyA1fZUPiq9k9MTsVcS/szAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjA1Mi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBxQYIKwYBBQUHAQcBAf8EgbUw
gbIwga8EAgABMIGoAwQBG3BOAwQBZxfGAwQBZx8mAwQBZzHuAwQBZzRyAwQBZz8Y
AwQBZ0NOAwQBZ0x4AwQBZ3s+AwQBZ4vAAwQBZ6tUAwQBZ6zMAwQBZ65yAwQAZ7BM
AwQBZ7BOAwQBZ7M4AwQBZ7P+AwQBZ7WOAwQBZ7dKAwQBZ79cAwQCZ8GwAwQBZ9mQ
AwQBZ9niAwQBZ+KKAwQBZ/IKAwQBZ/rQAwQBdMG+AwQBy5EiMA0GCSqGSIb3DQEB
CwUAA4IBAQAVK7HiVgljQTbL0Qr24Uxgxsme8VmQgOh6lxP9je+osYAPZuIm7ri7
wa11RhIUM0keTzj4BqrzCBkopGwCP9MMgg9ESlIkWfY2y8oYyGDrOf2c0TplYBhD
hP3LbNxDiShutn0ye5gyecg6bJRicDnOxOU2vT/lZrB9spIsZ/OVczTaGEgjeATr
KcqkmUAPCp4a73KxcEWmTGU6AmjRXuSy9AnVE4Od6gi63bVj4TrMVc0uMIdTNY7n
tMLvhnKR977mHbWYTCVd4QAEoCmreWNldlNgB6zHvQGQsPEt3HR6J47SwoSNR+x9
kaBITDxxxWMp8XObKned0f6AN4AaRVgO
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:53 2024 by rpki-client on console-fra.rpki-client.org