Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
File: AS23679.roa (raw, json)
Hash identifier: MgovYxRVBkqXccIYtmbyxjmOB6x9QwZ3DtLVCyzAH/c=
Subject key identifier: 2F:76:4B:F1:AC:CC:54:FC:71:7C:CF:ED:2F:F3:87:90:F3:42:FF:0F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0AA36F788E371C5157A530009A1386A9FF01091F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
Signing time: Wed 03 Sep 2025 08:29:10 +0000
ROA not before: Wed 03 Sep 2025 08:24:10 +0000
ROA not after: Wed 02 Sep 2026 08:29:10 +0000
asID: 23679
IP address blocks: 103.31.46.0/24 maxlen: 24
103.114.76.0/24 maxlen: 24
110.232.65.0/24 maxlen: 24
110.232.68.0/23 maxlen: 24
110.232.70.0/24 maxlen: 24
110.232.91.0/24 maxlen: 24
124.158.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Sep 2025 09:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a3:6f:78:8e:37:1c:51:57:a5:30:00:9a:13:86:a9:ff:01:09:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 3 08:24:10 2025 GMT
Not After : Sep 2 08:29:10 2026 GMT
Subject: CN=2F764BF1ACCC54FC717CCFED2FF38790F342FF0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:20:e2:79:08:f7:a9:ff:b9:e8:17:74:68:
87:c1:25:63:a3:a7:b1:db:12:ea:0f:db:11:e4:95:
4f:56:93:80:cb:14:a6:9c:99:8e:c7:91:ac:bb:a2:
5d:eb:af:85:23:d6:6e:2e:b7:90:ca:4d:c3:aa:4d:
c3:bd:58:23:0c:04:28:f6:1c:b6:72:9f:f1:cd:54:
2c:a6:7c:6b:73:57:44:2c:69:f2:27:a1:35:b3:11:
aa:f1:90:24:08:00:58:bd:f4:33:8c:1b:f7:06:5f:
a7:cd:c9:88:8a:70:1b:47:17:ea:20:5b:3e:d2:03:
7d:03:ad:89:e7:3d:3e:c9:db:80:59:5a:f2:31:1c:
cd:fb:2f:15:21:1e:6d:93:f4:2a:d8:1a:b1:68:19:
6a:e1:18:ed:09:77:e3:96:7d:8e:cb:ee:da:67:e4:
ac:3e:86:a3:9e:28:e8:61:f8:28:f4:e7:49:42:41:
c7:f7:81:e9:4b:7c:13:9d:de:b2:cc:c0:2c:de:e3:
7c:ab:aa:de:43:e7:48:00:8b:41:a4:36:67:92:69:
90:75:30:fc:ad:a2:23:32:70:63:92:9f:fc:ce:c4:
b2:d1:4f:d2:e9:09:99:9f:c2:1b:16:50:01:73:a8:
1e:63:58:14:ca:ba:01:98:48:c2:c2:d1:c0:3b:e6:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:76:4B:F1:AC:CC:54:FC:71:7C:CF:ED:2F:F3:87:90:F3:42:FF:0F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.46.0/24
103.114.76.0/24
110.232.65.0/24
110.232.68.0-110.232.70.255
110.232.91.0/24
124.158.116.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:01:8b:3d:5b:57:5c:79:67:1d:7a:6d:cc:18:0a:fb:57:5b:
0e:bb:18:32:d8:1e:dc:6d:ed:0f:4c:f6:69:2f:44:c7:c4:d9:
65:ac:ad:bf:04:40:5a:0f:a5:96:41:f8:53:a4:0c:c5:63:53:
b0:65:77:f2:1d:cb:c8:15:9a:ac:34:38:f7:3d:4b:e1:ac:3f:
77:ff:d8:b0:75:1b:5e:95:f4:a2:db:b1:f5:6b:5e:50:69:d1:
93:1f:77:08:e1:35:8c:3f:f9:6a:30:89:45:14:5a:68:e6:82:
f2:3f:b1:98:e6:41:d6:b6:23:82:24:be:9d:f3:df:f5:f8:53:
a5:c2:ef:85:31:43:04:d6:56:54:13:08:b3:73:91:93:e6:dd:
31:c5:a4:d4:f9:59:db:a4:6c:a8:af:eb:22:10:57:3a:64:2d:
d3:7a:62:c0:34:bb:9f:63:7a:b5:47:fa:97:f2:97:68:66:21:
59:91:41:8e:3b:36:22:9a:dc:d5:bd:76:05:e0:42:3a:02:8d:
22:58:ca:ab:7b:8f:a2:d5:af:08:67:05:f0:4e:cd:89:6c:19:
23:b4:04:7e:b8:b0:7d:5a:7a:c6:c0:b0:ac:e7:ca:83:7a:d4:
58:78:4d:9c:2b:a7:42:e0:9c:bc:26:3f:f2:70:14:42:c2:84:
b9:08:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:09:29 2025 by rpki-client