Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17995.roa
File: AS17995.roa (raw, json)
Hash identifier: qXjc1B6dx06gPSca7IRsjv2YVGKH5dke5W2NcEYZcXY=
Subject key identifier: 06:53:03:83:9F:98:A0:61:47:F2:69:03:97:A1:73:EF:20:C9:DD:74
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 532226FF567542E27C504FF870A3076C9B119902
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17995.roa
Signing time: Sun 19 May 2024 02:50:31 +0000
ROA not before: Sun 19 May 2024 02:45:31 +0000
ROA not after: Sun 18 May 2025 02:50:31 +0000
asID: 17995
IP address blocks: 103.6.200.0/22 maxlen: 24
103.16.188.0/22 maxlen: 24
103.16.232.0/22 maxlen: 24
103.105.64.0/22 maxlen: 24
103.105.68.0/22 maxlen: 24
103.124.188.0/22 maxlen: 23
103.124.220.0/22 maxlen: 23
103.124.228.0/22 maxlen: 23
103.125.4.0/22 maxlen: 23
103.125.8.0/22 maxlen: 23
103.125.212.0/22 maxlen: 24
103.127.8.0/22 maxlen: 23
103.127.12.0/22 maxlen: 23
103.127.52.0/22 maxlen: 23
103.150.108.0/23 maxlen: 24
103.150.110.0/23 maxlen: 24
103.150.112.0/23 maxlen: 24
103.150.114.0/23 maxlen: 24
103.157.114.0/23 maxlen: 24
103.157.190.0/24 maxlen: 24
103.157.191.0/24 maxlen: 24
103.158.66.0/23 maxlen: 24
103.158.68.0/23 maxlen: 24
103.161.188.0/23 maxlen: 24
103.163.10.0/23 maxlen: 24
103.163.128.0/23 maxlen: 24
103.164.16.0/23 maxlen: 24
103.164.98.0/23 maxlen: 24
103.164.100.0/23 maxlen: 24
103.164.102.0/23 maxlen: 24
103.164.104.0/23 maxlen: 24
103.164.106.0/23 maxlen: 24
103.164.108.0/23 maxlen: 24
103.164.110.0/23 maxlen: 24
103.164.112.0/23 maxlen: 24
103.164.114.0/23 maxlen: 24
103.164.116.0/23 maxlen: 24
103.164.118.0/23 maxlen: 24
103.164.120.0/23 maxlen: 24
103.164.122.0/23 maxlen: 24
103.164.124.0/23 maxlen: 24
103.164.136.0/23 maxlen: 24
103.164.190.0/23 maxlen: 24
103.164.194.0/23 maxlen: 24
103.164.212.0/23 maxlen: 24
103.164.214.0/23 maxlen: 24
103.164.216.0/23 maxlen: 24
103.164.218.0/23 maxlen: 24
103.164.220.0/23 maxlen: 24
103.164.222.0/23 maxlen: 24
103.165.32.0/23 maxlen: 24
103.165.34.0/23 maxlen: 24
103.165.36.0/23 maxlen: 24
103.165.38.0/23 maxlen: 24
103.165.40.0/23 maxlen: 24
103.165.42.0/23 maxlen: 24
103.165.58.0/23 maxlen: 24
103.165.60.0/23 maxlen: 24
103.165.122.0/23 maxlen: 24
103.165.124.0/23 maxlen: 24
103.165.126.0/23 maxlen: 24
103.165.128.0/23 maxlen: 24
103.165.130.0/23 maxlen: 24
103.165.132.0/23 maxlen: 24
103.165.134.0/23 maxlen: 24
103.165.136.0/23 maxlen: 24
103.165.138.0/23 maxlen: 24
103.165.140.0/23 maxlen: 24
103.165.194.0/23 maxlen: 24
103.165.196.0/23 maxlen: 24
103.165.198.0/23 maxlen: 24
103.165.200.0/23 maxlen: 24
103.165.202.0/23 maxlen: 24
103.165.204.0/23 maxlen: 24
103.165.206.0/23 maxlen: 24
103.165.208.0/23 maxlen: 24
103.165.210.0/23 maxlen: 24
103.165.212.0/23 maxlen: 24
103.165.214.0/23 maxlen: 24
103.165.216.0/23 maxlen: 24
103.165.218.0/23 maxlen: 24
103.165.220.0/23 maxlen: 24
103.165.222.0/23 maxlen: 24
103.165.224.0/23 maxlen: 24
103.165.226.0/23 maxlen: 24
103.165.228.0/23 maxlen: 24
103.165.230.0/23 maxlen: 24
103.165.232.0/23 maxlen: 24
103.165.234.0/23 maxlen: 24
103.165.236.0/23 maxlen: 24
103.165.238.0/23 maxlen: 24
103.165.240.0/23 maxlen: 24
103.166.104.0/23 maxlen: 24
103.167.218.0/23 maxlen: 24
103.182.180.0/23 maxlen: 24
103.182.182.0/23 maxlen: 24
103.182.184.0/23 maxlen: 24
103.182.186.0/23 maxlen: 24
103.182.188.0/23 maxlen: 24
103.182.190.0/23 maxlen: 24
103.182.192.0/23 maxlen: 24
103.182.194.0/23 maxlen: 24
103.182.200.0/23 maxlen: 24
103.182.202.0/23 maxlen: 24
103.182.204.0/23 maxlen: 24
103.182.206.0/23 maxlen: 24
103.182.208.0/23 maxlen: 24
103.182.222.0/23 maxlen: 24
103.182.224.0/23 maxlen: 24
103.182.228.0/23 maxlen: 24
103.182.230.0/23 maxlen: 24
103.182.232.0/23 maxlen: 24
103.182.234.0/23 maxlen: 24
103.182.236.0/23 maxlen: 24
103.182.238.0/23 maxlen: 24
103.182.240.0/23 maxlen: 24
103.182.242.0/23 maxlen: 24
103.182.244.0/23 maxlen: 24
103.182.252.0/23 maxlen: 24
103.182.254.0/23 maxlen: 24
103.183.0.0/23 maxlen: 24
103.183.12.0/23 maxlen: 24
103.183.14.0/23 maxlen: 24
103.183.18.0/23 maxlen: 24
103.183.20.0/23 maxlen: 24
103.183.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Feb 2025 06:34:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:22:26:ff:56:75:42:e2:7c:50:4f:f8:70:a3:07:6c:9b:11:99:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: May 19 02:45:31 2024 GMT
Not After : May 18 02:50:31 2025 GMT
Subject: CN=065303839F98A06147F2690397A173EF20C9DD74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:76:4b:62:9c:de:65:e9:ea:89:86:eb:93:
97:15:cb:3a:29:e3:f9:53:d5:83:c8:58:e1:35:4a:
2c:7f:b1:87:ae:74:ad:20:46:f4:55:2f:f3:b9:62:
1d:46:0f:ea:1a:89:f2:d5:f1:b0:c7:47:d3:1a:2b:
00:d9:b5:71:15:b5:f8:a0:61:84:c1:74:19:18:9d:
dc:d6:85:2d:35:8a:82:33:8f:e5:0e:af:a1:13:db:
bd:72:b2:17:94:85:32:82:9e:cf:42:16:e3:30:7b:
0a:fd:86:bc:df:5f:6b:af:45:18:91:31:a2:12:b9:
c5:85:1c:57:b6:dd:ed:c7:db:66:e7:87:c1:97:f5:
69:69:8e:f2:8a:e0:99:7a:f0:8c:b8:b2:8e:ea:52:
dc:18:3d:f3:c8:a3:08:c8:d1:0e:ca:1f:f3:4c:6e:
36:4e:27:d8:49:0f:8a:98:65:c9:f0:32:d6:eb:42:
41:db:69:ef:eb:2a:72:a9:fa:46:70:17:bd:28:b4:
e1:e1:8d:5e:0b:18:a4:a0:5c:96:3c:68:13:b6:ff:
f2:cb:d9:0a:c0:ee:1f:a5:d6:bb:39:42:9a:19:9a:
ca:f8:dd:18:88:50:23:2e:dc:2e:3f:75:ba:85:c0:
78:d9:1d:9a:e9:91:79:d7:b0:f0:64:fc:0d:29:f4:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:03:83:9F:98:A0:61:47:F2:69:03:97:A1:73:EF:20:C9:DD:74
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.6.200.0/22
103.16.188.0/22
103.16.232.0/22
103.105.64.0/21
103.124.188.0/22
103.124.220.0/22
103.124.228.0/22
103.125.4.0-103.125.11.255
103.125.212.0/22
103.127.8.0/21
103.127.52.0/22
103.150.108.0-103.150.115.255
103.157.114.0/23
103.157.190.0/23
103.158.66.0-103.158.69.255
103.161.188.0/23
103.163.10.0/23
103.163.128.0/23
103.164.16.0/23
103.164.98.0-103.164.125.255
103.164.136.0/23
103.164.190.0/23
103.164.194.0/23
103.164.212.0-103.164.223.255
103.165.32.0-103.165.43.255
103.165.58.0-103.165.61.255
103.165.122.0-103.165.141.255
103.165.194.0-103.165.241.255
103.166.104.0/23
103.167.218.0/23
103.182.180.0-103.182.195.255
103.182.200.0-103.182.209.255
103.182.222.0-103.182.225.255
103.182.228.0-103.182.245.255
103.182.252.0-103.183.1.255
103.183.12.0/22
103.183.18.0-103.183.23.255
Signature Algorithm: sha256WithRSAEncryption
8e:65:af:2a:27:28:f8:98:48:0a:8f:35:d2:58:31:00:e8:a8:
08:84:7d:3d:4c:12:ab:bf:fe:30:fc:96:cf:76:cb:f5:af:45:
f7:08:d0:35:33:fc:93:71:90:68:9c:b9:0f:21:fb:b1:8c:33:
29:63:84:f8:bc:8b:70:7c:dd:34:06:47:30:70:bb:fe:0d:8b:
1f:26:69:e5:b4:5a:f8:52:a6:ea:9e:d7:ee:7d:cd:38:e8:31:
12:9a:57:b4:96:3e:93:7a:34:06:f7:4d:9f:50:5f:c4:e6:39:
4d:62:58:38:48:d9:5e:5e:75:b1:4f:cc:c9:cf:df:0a:44:33:
54:ae:c2:b3:00:87:a1:84:25:e5:dd:29:5b:ee:9a:ca:40:cf:
d7:ab:37:18:31:4e:80:e7:d4:40:b7:d6:66:2e:e1:6a:1a:f1:
1b:3f:ea:37:9d:cc:b0:09:a4:c3:f5:3f:45:5a:0a:18:7d:2c:
48:73:3b:1f:74:7a:c7:aa:19:1a:8b:5e:4a:6d:91:f7:9e:f2:
01:87:6f:79:77:0e:80:84:e8:75:fb:34:9c:85:7f:8b:c2:50:
a0:6a:58:08:84:08:63:84:50:e1:c4:20:dc:a3:16:b5:cf:a2:
81:1e:99:d3:2d:ac:38:06:b0:1d:5a:59:b9:2b:2a:48:df:8d:
93:f2:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:33 2025 by rpki-client