Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138886.roa
File: AS138886.roa (raw, json)
Hash identifier: mZHFc1waUiI7bU28uDvMYQ2Yqj3tn2qj5uLfDNv+/3s=
Subject key identifier: 6F:95:01:75:21:DF:0E:F2:89:4B:B0:FC:1D:69:0D:D1:71:2F:1B:50
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0274F3AA0794C37F06AA7C5634ED333DFE75C900
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138886.roa
Signing time: Fri 14 Feb 2025 09:50:26 +0000
ROA not before: Fri 14 Feb 2025 09:45:26 +0000
ROA not after: Fri 13 Feb 2026 09:50:26 +0000
asID: 138886
IP address blocks: 117.18.20.0/22 maxlen: 24
202.58.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 15:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:74:f3:aa:07:94:c3:7f:06:aa:7c:56:34:ed:33:3d:fe:75:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 14 09:45:26 2025 GMT
Not After : Feb 13 09:50:26 2026 GMT
Subject: CN=6F95017521DF0EF2894BB0FC1D690DD1712F1B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:7f:c2:b3:60:c9:1a:c7:d3:e2:3d:1b:9e:
24:f2:7f:85:be:25:b2:a9:f8:d8:e6:c5:1c:42:74:
e4:85:29:68:73:bf:a4:03:24:4c:24:33:13:1c:25:
dc:12:c1:97:2e:b2:1d:56:4d:ab:03:d1:d1:34:35:
08:e4:17:12:6d:ab:80:ab:cd:86:e9:cf:d9:4d:0a:
b1:7d:7f:c6:69:31:7c:79:16:83:56:83:bf:57:c9:
42:50:3e:14:85:ac:1e:92:d9:c6:8a:8e:6d:c7:12:
fb:b3:83:71:2d:4b:98:d0:71:6d:15:66:f3:a0:de:
7a:95:d2:e6:dc:31:35:fa:17:91:f1:1e:b8:97:c9:
f5:ba:e0:0c:77:11:28:f0:ae:6a:b7:58:b7:2f:be:
da:8b:86:ee:05:c2:52:db:28:3c:d6:ae:ae:b2:a1:
fb:cf:2d:4e:4e:e4:7a:67:4a:19:4f:1f:e5:30:53:
f1:d6:3c:0e:59:29:d2:de:aa:52:0e:e2:cf:24:77:
e1:27:e4:66:d3:6e:45:fa:70:2d:cc:e7:58:bd:fb:
a9:07:47:d1:d9:b0:94:cf:71:6f:3b:1a:3e:b7:17:
2b:cb:89:8b:6c:92:66:da:8d:5a:85:3f:d2:eb:e3:
ea:b1:3e:0d:3d:72:3d:3a:bb:97:1d:38:2d:99:ad:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:01:75:21:DF:0E:F2:89:4B:B0:FC:1D:69:0D:D1:71:2F:1B:50
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.18.20.0/22
202.58.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:a4:37:95:c2:3e:92:db:ba:4a:5a:fa:08:54:60:1a:45:ff:
0d:ea:d6:6d:a0:b4:e4:56:6b:5f:47:c3:1e:d0:24:0d:94:79:
15:f3:ab:ff:71:3a:c9:e2:6e:8d:92:d1:b8:8f:31:f3:ca:d3:
5b:cb:68:c1:fe:2b:5c:7e:94:17:b7:a8:a5:64:ca:0f:50:6b:
6a:eb:58:d2:31:f7:f1:15:f3:67:2a:bd:48:02:fa:2e:ab:6d:
5e:a0:76:8b:5d:28:6c:ad:46:ae:7e:d0:c4:03:1f:25:fc:75:
54:72:70:14:48:5c:f5:ef:17:d5:f6:00:5b:57:35:27:f5:00:
66:f9:4a:62:99:5b:f1:14:6a:44:07:ee:04:2c:a2:69:0c:05:
02:b1:a6:72:53:b5:f4:40:8c:be:c8:47:20:23:61:7e:77:81:
75:c7:d7:bb:78:f2:5b:4e:0e:e4:14:ad:b8:08:e4:3f:68:15:
ca:75:c6:54:51:37:21:87:e0:cd:be:49:de:16:65:eb:0e:df:
15:42:15:6d:69:2c:7c:a7:95:b1:14:ec:7f:2d:48:03:f7:b8:
cb:55:39:00:13:f7:4d:5e:d2:89:4a:9d:0c:1d:79:33:cc:13:
fd:b9:38:7b:05:9c:50:9f:f9:06:ce:f7:4f:18:e5:0a:e9:9b:
fe:94:99:ce
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUAnTzqgeUw38GqnxWNO0zPf51yQAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxNDA5NDUyNloX
DTI2MDIxMzA5NTAyNlowMzExMC8GA1UEAxMoNkY5NTAxNzUyMURGMEVGMjg5NEJC
MEZDMUQ2OTBERDE3MTJGMUI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKUlf8KzYMkax9PiPRueJPJ/hb4lsqn42ObFHEJ05IUpaHO/pAMkTCQzExwl
3BLBly6yHVZNqwPR0TQ1COQXEm2rgKvNhunP2U0KsX1/xmkxfHkWg1aDv1fJQlA+
FIWsHpLZxoqObccS+7ODcS1LmNBxbRVm86DeepXS5twxNfoXkfEeuJfJ9brgDHcR
KPCuardYty++2ouG7gXCUtsoPNaurrKh+88tTk7kemdKGU8f5TBT8dY8Dlkp0t6q
Ug7izyR34SfkZtNuRfpwLcznWL37qQdH0dmwlM9xbzsaPrcXK8uJi2ySZtqNWoU/
0uvj6rE+DT1yPTq7lx04LZmttTMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRvlQF1
Id8O8olLsPwdaQ3RcS8bUDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg4Ni5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAnUSFAMEA8o6SDANBgkqhkiG9w0BAQsFAAOCAQEAHKQ3lcI+ktu6
Slr6CFRgGkX/DerWbaC05FZrX0fDHtAkDZR5FfOr/3E6yeJujZLRuI8x88rTW8to
wf4rXH6UF7eopWTKD1BrautY0jH38RXzZyq9SAL6LqttXqB2i10obK1Grn7QxAMf
Jfx1VHJwFEhc9e8X1fYAW1c1J/UAZvlKYplb8RRqRAfuBCyiaQwFArGmclO19ECM
vshHICNhfneBdcfXu3jyW04O5BStuAjkP2gVynXGVFE3IYfgzb5J3hZl6w7fFUIV
bWksfKeVsRTsfy1IA/e4y1U5ABP3TV7SiUqdDB15M8wT/bk4ewWcUJ/5Bs73Txjl
Cumb/pSZzg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:10 2025 by rpki-client