Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38758.roa
File: AS38758.roa (raw, json)
Hash identifier: JAzbN3YhoqGxZIXvnLrwMPIup0dwkH4edro0aNnE5f8=
Subject key identifier: 9F:0E:47:EF:25:5B:93:74:15:8B:79:92:DA:62:E1:19:47:CF:28:CD
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 301443E16C1B959DF2F00556D33A5A33D3F21BC3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38758.roa
Signing time: Wed 14 Jun 2023 05:00:00 +0000
ROA not before: Wed 14 Jun 2023 04:55:00 +0000
ROA not after: Wed 12 Jun 2024 05:00:00 +0000
asID: 38758
IP address blocks: 103.142.110.0/23 maxlen: 24
103.149.226.0/24 maxlen: 24
103.166.190.0/23 maxlen: 24
103.166.194.0/23 maxlen: 24
103.166.196.0/23 maxlen: 24
103.166.200.0/23 maxlen: 24
103.183.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 May 2024 17:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:14:43:e1:6c:1b:95:9d:f2:f0:05:56:d3:3a:5a:33:d3:f2:1b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 14 04:55:00 2023 GMT
Not After : Jun 12 05:00:00 2024 GMT
Subject: CN=9F0E47EF255B9374158B7992DA62E11947CF28CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4f:75:7e:4e:e4:4d:ce:f7:62:fc:95:3a:0a:
e0:75:d4:7a:5c:5c:f5:f6:88:63:d8:b2:3a:09:31:
ed:39:c5:bd:6f:4d:df:8c:80:ba:dd:2b:dc:f4:de:
ad:d5:c3:5a:1c:37:dd:e4:e1:50:d8:9f:07:7c:f4:
4e:05:e3:b5:32:ac:93:5f:bc:3b:47:36:11:ed:c6:
b6:20:3a:d4:c0:57:6d:15:c4:7f:ef:40:1a:68:78:
97:43:00:a9:a3:8c:0f:27:2f:5c:c9:de:c9:6f:bc:
a7:b0:78:2e:ce:6f:0b:30:4f:7f:f2:49:f6:ff:3f:
42:02:c4:e0:a1:26:4c:a9:41:bf:31:b7:26:fe:23:
d3:35:de:05:dd:b0:9c:b3:c7:5e:70:e3:b8:95:fd:
c5:4f:b0:91:76:31:b2:0e:20:f4:9f:0c:4f:dd:ce:
df:00:5e:d3:f4:49:c7:dd:ff:c9:2e:76:57:b3:6a:
1d:81:29:17:9b:ab:c3:a9:fb:33:7d:fa:e7:e0:04:
6a:96:56:35:70:b2:06:70:40:77:c3:67:35:0a:2f:
91:04:74:76:17:b9:99:12:37:21:27:9e:71:5f:82:
ea:cb:df:d5:ff:9f:a8:87:c4:68:9c:c1:ae:26:67:
b5:78:03:f8:bc:38:24:71:2b:be:30:7c:51:99:90:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:47:EF:25:5B:93:74:15:8B:79:92:DA:62:E1:19:47:CF:28:CD
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.110.0/23
103.149.226.0/24
103.166.190.0/23
103.166.194.0-103.166.197.255
103.166.200.0/23
103.183.4.0/23
Signature Algorithm: sha256WithRSAEncryption
69:5d:84:37:77:8e:a2:60:f5:36:a0:93:8d:04:41:42:45:c0:
45:30:7d:00:37:ca:32:e0:eb:d8:d6:95:7b:56:2a:dd:d0:7c:
16:52:56:58:db:2a:e2:18:ea:5d:b3:cf:6c:ec:af:d4:4d:0d:
73:80:1c:bb:2c:3d:aa:1a:f3:bf:13:5d:b6:47:0a:05:e8:d9:
e5:7c:9e:85:17:52:9a:85:05:b4:fa:b2:a9:65:03:22:45:f7:
34:16:02:c5:99:7b:af:45:51:b1:bc:f4:d4:98:d1:3b:b3:97:
34:44:ad:11:43:67:be:0d:0e:60:fe:39:11:36:e0:e1:b5:c1:
68:d8:47:68:b3:6c:88:8b:8e:66:73:51:c5:f7:22:ce:11:37:
c2:42:59:4c:4e:7f:10:82:5e:7d:30:30:7b:f2:d1:ba:f5:7b:
5b:6d:60:2f:fb:90:16:6f:28:9e:2f:d2:74:81:83:48:d2:6f:
a1:8c:b9:70:92:24:b0:79:4e:7d:1f:cb:43:6d:2a:04:ad:93:
9c:66:d6:ae:70:0c:ca:1b:9f:62:62:da:d7:c7:b9:64:09:69:
3b:79:45:15:25:1e:9e:93:74:0f:4d:8f:93:97:03:b6:b7:54:
c5:57:3a:4d:f8:61:6e:50:57:62:77:b1:01:07:33:5a:f3:b9:
91:88:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 14:59:57 2024 by rpki-client on console-ams.rpki-client.org