Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
File: AS45305.roa (raw, json)
Hash identifier: adNQGaWWcVW7JbHpkc/B8r5bE6DvcZSfHWhOg8QPt0I=
Subject key identifier: 00:77:19:F6:A7:CF:D2:8F:34:74:C6:0B:18:73:C8:AB:8F:1E:8B:ED
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6EB9A1520CF5FAB04F69C9D60AB8DAE7FBDD2FA2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
Signing time: Fri 29 Aug 2025 09:19:48 +0000
ROA not before: Fri 29 Aug 2025 09:14:48 +0000
ROA not after: Fri 28 Aug 2026 09:19:48 +0000
asID: 45305
IP address blocks: 103.22.99.0/24 maxlen: 24
103.46.10.0/23 maxlen: 24
103.54.80.0/23 maxlen: 24
103.83.98.0/24 maxlen: 24
103.87.148.0/23 maxlen: 24
103.98.122.0/24 maxlen: 24
103.164.228.0/24 maxlen: 24
103.183.254.0/24 maxlen: 24
103.184.180.0/23 maxlen: 24
103.190.114.0/23 maxlen: 24
103.220.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Sep 2025 00:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b9:a1:52:0c:f5:fa:b0:4f:69:c9:d6:0a:b8:da:e7:fb:dd:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Aug 29 09:14:48 2025 GMT
Not After : Aug 28 09:19:48 2026 GMT
Subject: CN=007719F6A7CFD28F3474C60B1873C8AB8F1E8BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:5e:fc:cd:de:87:5c:c1:d6:bf:c9:dd:d1:
dd:84:6f:6d:a5:b9:68:cf:44:90:f9:b9:63:37:f6:
20:30:76:a7:a3:4d:0b:c2:2e:8c:8d:79:08:8a:e0:
db:be:20:0e:36:b6:4b:67:79:ed:7f:12:27:9f:91:
44:f5:35:c5:2d:b7:3e:a1:2f:c4:4d:ff:19:5c:ac:
d2:00:0b:90:3e:5a:7d:e9:54:dc:b4:3c:78:a4:92:
7a:65:02:7f:12:c5:5e:0a:3b:1b:f3:84:0e:7b:61:
8c:2f:47:94:dd:26:5b:86:69:9b:c7:93:b1:ea:d7:
73:e4:92:10:7e:5f:98:a6:90:4f:83:2a:17:e4:43:
9f:a7:da:7c:35:73:d6:c3:6f:75:ed:ff:c2:ac:33:
79:8f:cd:50:5f:4d:33:48:10:ff:25:5b:06:30:61:
cd:61:e7:3b:4f:28:03:86:07:c0:04:89:62:2e:71:
5f:de:90:ae:f4:c6:e6:8b:be:e6:ec:2a:5a:2d:94:
fb:a0:68:99:74:46:b3:a2:67:93:ce:4e:97:30:30:
61:26:f4:d1:f7:24:7e:ff:c6:f5:bd:97:a7:a3:38:
a9:1b:15:11:6c:34:40:4a:ea:93:6f:71:d7:9d:d2:
5b:cd:a3:a6:ec:52:d4:99:00:63:9f:1e:cd:d8:87:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:19:F6:A7:CF:D2:8F:34:74:C6:0B:18:73:C8:AB:8F:1E:8B:ED
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.99.0/24
103.46.10.0/23
103.54.80.0/23
103.83.98.0/24
103.87.148.0/23
103.98.122.0/24
103.164.228.0/24
103.183.254.0/24
103.184.180.0/23
103.190.114.0/23
103.220.22.0/23
Signature Algorithm: sha256WithRSAEncryption
94:5c:c7:eb:44:01:49:6d:b6:f6:b6:36:84:99:0b:fa:55:8b:
ad:30:0a:51:9a:6a:13:e6:c0:87:3f:b0:19:6e:4a:b5:3f:60:
fd:a9:22:48:f0:15:59:d8:ac:18:23:a5:6c:db:92:20:06:57:
2c:f1:36:21:b1:3b:93:d8:99:28:3a:cd:b4:3d:f9:41:f7:82:
b6:bd:37:54:7f:de:ab:d9:28:a0:5d:37:40:48:45:63:95:ad:
7f:64:68:07:52:8a:9c:bc:e2:b6:bd:4a:8c:af:5c:55:30:30:
b9:93:3c:fb:49:3d:57:d5:52:21:00:f5:c8:88:d9:65:54:c9:
b9:d5:c8:8b:d7:80:84:61:75:b1:62:7b:4c:0b:16:35:8b:a0:
5c:73:87:89:c1:11:c7:f8:3a:6f:ac:ff:e4:83:1f:d6:5f:8f:
54:3c:85:35:26:38:c6:5a:62:62:25:88:7c:d4:45:17:90:9d:
db:9f:65:65:d2:0f:a9:e4:29:b0:b3:4c:cc:e2:42:72:33:96:
8e:1c:e5:f1:ab:74:f8:78:a5:66:42:87:dd:87:7c:65:77:05:
5b:db:3a:44:68:b5:33:9f:90:d9:d3:4b:67:07:e4:31:43:b4:
d1:10:e0:b8:c2:02:de:e3:27:8c:e1:80:15:0d:5e:db:b3:3a:
3d:99:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 19:30:04 2025 by rpki-client