Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38758.roa
File: AS38758.roa (raw, json)
Hash identifier: 5C6Dyb027BS/Jup1bIOIIC71VEKXIyNVxOLpXweH3Kw=
Subject key identifier: 09:86:20:0C:DE:85:02:A2:B0:B4:8D:F9:E9:16:5D:D7:9F:8E:0D:0D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6112993ECB0A55E34F0811BD4034978BDC39196E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38758.roa
Signing time: Wed 07 Aug 2024 07:44:46 +0000
ROA not before: Wed 07 Aug 2024 07:39:46 +0000
ROA not after: Wed 06 Aug 2025 07:44:46 +0000
asID: 38758
IP address blocks: 103.142.110.0/23 maxlen: 24
103.149.226.0/24 maxlen: 24
103.166.190.0/23 maxlen: 24
103.166.194.0/23 maxlen: 24
103.166.196.0/23 maxlen: 24
103.166.200.0/23 maxlen: 24
103.183.4.0/23 maxlen: 24
103.233.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Feb 2025 06:34:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:12:99:3e:cb:0a:55:e3:4f:08:11:bd:40:34:97:8b:dc:39:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Aug 7 07:39:46 2024 GMT
Not After : Aug 6 07:44:46 2025 GMT
Subject: CN=0986200CDE8502A2B0B48DF9E9165DD79F8E0D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:5f:f9:78:2d:24:cb:9a:8e:cb:9a:39:19:
02:cf:ea:73:6f:45:28:35:99:45:30:b6:eb:73:9b:
4a:95:94:5b:79:95:37:e1:c5:ca:8f:50:8e:21:dd:
4a:82:35:ef:42:cd:7d:e5:a9:21:df:1a:e2:6d:1d:
74:dd:4c:39:f2:f6:ab:3a:bb:d6:f4:48:3e:c6:5f:
a2:62:ff:b8:1c:2d:52:30:4d:04:36:f1:54:ab:7e:
ba:b4:75:7d:55:33:a9:fd:60:22:b1:50:e0:62:91:
95:66:81:a1:af:6f:6e:f7:f3:38:39:3b:97:a0:7b:
25:64:77:08:fe:3d:49:62:82:8e:18:7c:58:4f:38:
39:a0:bd:b3:16:a8:56:05:46:73:1b:8e:14:6f:1a:
02:ba:30:7e:52:13:a8:e0:d4:10:df:2f:81:7a:09:
97:a4:c3:50:a4:be:5a:ed:80:24:c7:62:b5:bc:96:
41:61:fe:9d:71:8e:a5:ab:6d:7e:48:68:67:e4:8a:
db:50:d5:fc:65:e7:3a:ab:be:2d:b2:98:e3:93:2e:
33:48:4f:1a:64:c1:c0:92:af:83:b1:49:1e:27:14:
be:16:0f:a0:af:e6:35:9b:a0:97:00:3c:68:d6:70:
21:fb:5a:d5:75:63:e6:34:b3:d0:31:40:6b:de:e8:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:20:0C:DE:85:02:A2:B0:B4:8D:F9:E9:16:5D:D7:9F:8E:0D:0D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.110.0/23
103.149.226.0/24
103.166.190.0/23
103.166.194.0-103.166.197.255
103.166.200.0/23
103.183.4.0/23
103.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
71:01:ec:d4:40:aa:f9:5e:42:1f:fc:b9:06:df:37:be:b4:d6:
3c:70:ac:10:11:42:99:ea:80:02:8b:43:5b:05:fd:d8:83:d1:
93:9e:5b:10:33:5e:a2:2c:b5:f8:20:a7:ee:7d:69:05:3f:b6:
7c:45:c9:4a:7d:87:dd:4f:7c:f2:6a:e5:49:32:9b:75:4e:64:
0b:fd:bb:de:e4:4a:3d:5d:94:97:82:56:5f:6b:9e:90:f4:f5:
ae:a9:f7:25:99:56:d7:93:a1:21:6f:b7:00:23:92:b9:d1:98:
d2:c0:57:85:bb:55:b3:07:4e:ca:89:66:b6:6b:df:bc:ae:4f:
a7:9b:56:c0:ef:f2:0f:08:76:af:4a:fe:69:38:af:50:1b:ef:
b1:a2:de:68:52:dd:d5:52:1d:6e:27:95:a6:01:07:fa:07:ad:
c7:89:14:f8:15:7a:ba:a3:34:39:95:bf:43:91:28:39:12:f6:
b5:66:1f:2f:48:b2:48:5b:82:5b:be:b5:14:50:1e:79:07:26:
67:54:15:20:e0:fa:b9:14:f3:50:a5:de:bb:a4:4c:22:87:85:
37:c4:4d:43:b9:2a:1c:ef:f1:d0:27:6d:a3:33:a5:03:47:b6:
79:45:79:b7:be:f2:a6:13:98:83:02:14:c4:89:7d:73:a8:e0:
5f:ba:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:37 2025 by rpki-client