Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
File: AS23679.roa (raw, json)
Hash identifier: tGSxDeLRADJscG3avRS17HNMuBI8+XF09vRP39X1odA=
Subject key identifier: 05:CE:DF:05:31:4C:BE:B6:BE:FD:D1:62:95:88:A2:50:43:31:DF:D4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7CB21D91C5DF65DC8B455D5791E94FA7A844886B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
Signing time: Mon 04 Nov 2024 07:36:08 +0000
ROA not before: Mon 04 Nov 2024 07:31:08 +0000
ROA not after: Mon 03 Nov 2025 07:36:08 +0000
asID: 23679
IP address blocks: 103.31.46.0/24 maxlen: 24
103.114.76.0/24 maxlen: 24
110.232.65.0/24 maxlen: 24
110.232.68.0/23 maxlen: 24
110.232.70.0/24 maxlen: 24
110.232.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 25 Nov 2024 20:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b2:1d:91:c5:df:65:dc:8b:45:5d:57:91:e9:4f:a7:a8:44:88:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 4 07:31:08 2024 GMT
Not After : Nov 3 07:36:08 2025 GMT
Subject: CN=05CEDF05314CBEB6BEFDD1629588A2504331DFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:a9:c1:19:2d:bd:ad:45:01:d6:13:99:4a:
d9:7c:bf:60:2a:0a:6e:a8:43:95:7b:7e:98:88:f6:
74:45:49:8a:84:26:23:e3:e2:31:6f:af:68:fb:d4:
8c:57:19:30:55:49:6a:af:33:86:9b:fd:2b:56:0c:
e8:47:f4:16:20:6c:05:7f:5b:8d:08:27:c3:0f:4b:
ac:5e:ab:7e:45:01:a6:34:6b:ca:17:8e:97:77:15:
a7:bb:d8:ca:94:e8:0f:cf:46:c7:16:60:b3:de:1d:
93:27:5e:44:b9:04:0c:8c:aa:1a:86:f5:2a:97:a5:
f2:c0:65:b0:97:09:10:00:40:4b:98:a7:f1:96:f9:
b8:41:ac:d1:ef:73:42:37:90:56:88:5d:80:91:64:
3e:09:86:5e:3f:5b:29:66:95:8b:48:c5:20:0e:d3:
f5:90:b1:2a:35:62:94:de:2c:5a:6a:1d:0a:cb:b6:
d8:cb:c2:1e:d1:df:13:1b:20:0e:6e:07:9d:3e:93:
11:18:c2:fa:61:40:30:42:e4:f0:de:f3:6e:c3:15:
35:b8:41:e0:ac:f4:45:bf:ce:58:61:32:02:98:39:
c6:44:6e:00:17:cb:43:9c:f9:a0:0b:0a:f0:4d:87:
53:04:d4:4b:d3:ab:49:21:06:11:9e:53:da:81:0c:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:DF:05:31:4C:BE:B6:BE:FD:D1:62:95:88:A2:50:43:31:DF:D4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.46.0/24
103.114.76.0/24
110.232.65.0/24
110.232.68.0-110.232.70.255
110.232.91.0/24
Signature Algorithm: sha256WithRSAEncryption
10:aa:f4:a2:71:72:7d:1b:7c:e6:41:c7:86:5f:5b:9c:58:f1:
ef:84:7f:65:52:83:35:e5:67:8d:32:d2:e5:a3:29:da:43:c3:
5d:1e:bc:eb:0b:9a:7e:c7:e8:81:89:eb:aa:6d:b2:ee:06:8d:
ad:a3:2a:ee:85:7f:e8:bf:52:4d:a5:de:ad:4b:aa:0a:2b:dc:
16:ef:ae:18:10:54:44:22:43:82:31:b7:65:20:04:86:f6:64:
8b:5d:a0:a7:e6:4a:25:e3:53:5a:6e:84:18:26:50:5e:90:6a:
04:12:a6:c5:c1:5b:aa:15:50:c1:a1:46:ca:dc:a5:81:ee:62:
bb:9f:5a:4e:9b:ff:5e:11:28:86:41:2a:0b:95:b6:d6:3c:c5:
f6:94:72:8b:71:ab:ef:b7:c2:c8:e4:02:d0:a5:a1:6b:f5:d1:
d6:48:e7:cf:39:e5:b3:f4:14:05:8e:92:d8:92:c1:7d:8c:cd:
e9:c4:08:df:9f:f0:2d:6d:49:13:91:6c:d6:4f:81:fc:e0:b8:
63:55:8b:de:15:6b:ed:28:c9:08:8b:fe:50:6c:6d:47:2c:a3:
24:7b:e9:f4:92:43:de:09:6c:43:34:ec:0e:98:0a:f5:00:f0:
e8:e9:e0:e6:cc:04:52:42:db:aa:cb:71:b1:0d:ee:13:4b:77:
4c:5b:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:50 2024 by rpki-client on console-ams.rpki-client.org