Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17670.roa
File: AS17670.roa (raw, json)
Hash identifier: 91tFvBZLtmGPPjE8FkV+QTJ+xy92BczrP4WwCy4tDk0=
Subject key identifier: 7D:9C:DE:7C:B2:F2:F6:6C:BE:12:7B:80:68:E0:A8:19:B7:44:25:8F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0EE237A57E5C78A8EE758A8B3A7B8CB3149218B5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17670.roa
Signing time: Tue 04 Jun 2024 07:00:00 +0000
ROA not before: Tue 04 Jun 2024 06:55:00 +0000
ROA not after: Tue 03 Jun 2025 07:00:00 +0000
asID: 17670
IP address blocks: 103.162.236.0/23 maxlen: 24
103.163.6.0/23 maxlen: 24
103.196.164.0/23 maxlen: 24
103.203.248.0/23 maxlen: 24
202.80.208.0/24 maxlen: 24
202.80.210.0/23 maxlen: 24
202.80.212.0/23 maxlen: 24
202.80.214.0/23 maxlen: 24
202.80.216.0/23 maxlen: 24
202.80.218.0/23 maxlen: 24
202.80.221.0/24 maxlen: 24
202.80.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 25 Nov 2024 20:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e2:37:a5:7e:5c:78:a8:ee:75:8a:8b:3a:7b:8c:b3:14:92:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 4 06:55:00 2024 GMT
Not After : Jun 3 07:00:00 2025 GMT
Subject: CN=7D9CDE7CB2F2F66CBE127B8068E0A819B744258F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:f9:6d:e8:be:5e:c8:ce:55:fc:7b:f4:f3:
a8:95:81:62:bc:ff:58:9f:5b:2f:1b:32:1a:d7:7a:
d4:bb:da:5a:ca:66:70:9d:ad:66:76:f5:2c:32:c8:
5c:48:87:e1:b3:f6:d3:42:98:25:41:d2:92:9e:b6:
04:6c:78:70:97:c2:c4:a7:ec:da:cc:a1:f3:51:71:
78:14:99:a5:39:d9:05:d7:81:4d:92:78:0b:9f:b7:
91:58:2d:03:bb:d0:69:ef:05:8d:d2:e2:4d:97:88:
a6:77:61:20:02:5c:2e:87:1e:2b:ee:a8:c1:f1:87:
6b:08:c6:b2:7f:9b:95:b2:72:b6:16:f6:57:60:10:
7d:b2:2c:9d:f0:7a:be:e0:27:5d:cd:08:a6:51:fe:
79:69:9b:b7:c8:05:9f:98:ff:e5:2d:25:83:24:3f:
26:d8:d7:39:de:60:cf:3d:08:98:9f:a2:c8:50:3b:
e7:2d:25:d7:7a:be:e2:33:a7:41:e3:87:35:f8:c7:
ea:ef:c4:cb:79:70:3e:96:54:42:07:54:db:2d:fa:
28:13:62:c5:30:9e:53:9a:ad:4f:9f:4b:7e:a9:5c:
f0:70:a2:4a:c0:d8:66:44:de:39:1c:73:3e:c3:b8:
45:73:72:7d:96:40:6c:08:6b:3e:c7:a4:df:53:27:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9C:DE:7C:B2:F2:F6:6C:BE:12:7B:80:68:E0:A8:19:B7:44:25:8F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.236.0/23
103.163.6.0/23
103.196.164.0/23
103.203.248.0/23
202.80.208.0/24
202.80.210.0-202.80.219.255
202.80.221.0-202.80.223.255
Signature Algorithm: sha256WithRSAEncryption
35:17:68:08:1e:75:80:84:a0:2e:94:cc:a8:38:a3:56:40:29:
a1:d0:f5:64:96:f0:92:80:49:0a:4c:de:ce:a2:63:d9:31:5c:
7b:82:7d:65:81:56:bf:b9:47:26:e9:50:00:31:11:5b:62:df:
c2:c8:df:cd:96:44:e1:62:5c:2f:6f:42:db:ea:ba:5b:18:ad:
d0:48:e8:eb:18:80:1a:12:de:00:17:eb:7d:36:b2:d2:d0:fb:
fb:82:f7:8e:45:d8:98:43:83:5f:df:d3:d3:e7:71:9b:a9:37:
95:40:13:d6:9b:4d:68:59:72:1a:b4:2a:97:de:f0:b2:90:ab:
3d:0e:58:03:41:1d:4c:a6:4f:4e:89:e0:14:a3:c2:37:e6:05:
ff:73:c7:7b:bc:c3:48:4f:b8:07:fe:ac:5a:94:2c:d3:37:a5:
71:d5:70:b1:36:4d:fa:39:6f:22:d6:72:29:48:01:4b:f3:15:
a2:27:35:dc:16:3c:29:14:2f:86:72:8c:d1:12:c1:9c:f4:e1:
54:b0:47:53:06:19:74:46:55:b1:bc:30:b9:f2:66:2f:46:2d:
db:b6:9b:ef:6d:8b:39:48:fa:3a:90:2c:6d:49:2e:7a:9c:fd:
77:84:93:07:62:57:ee:5d:55:ac:1c:9e:fc:17:03:43:af:1f:
da:3d:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:50 2024 by rpki-client on console-ams.rpki-client.org