Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
File: AS45305.roa (raw, json)
Hash identifier: dfyieQ0CvtHQRUsCuGfZdbEIaicdrNkUmDNk7m+Wlhg=
Subject key identifier: D7:B4:AF:D7:3E:B3:B9:FB:A7:5F:AE:99:BF:0E:92:8A:D3:B5:19:5F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 738EF68DD6FD1D6AB00932D42C05A46E1E8EDE7E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
Signing time: Wed 04 Dec 2024 03:00:00 +0000
ROA not before: Wed 04 Dec 2024 02:55:00 +0000
ROA not after: Wed 03 Dec 2025 03:00:00 +0000
asID: 45305
IP address blocks: 103.22.99.0/24 maxlen: 24
103.46.10.0/23 maxlen: 24
103.54.80.0/23 maxlen: 24
103.83.98.0/24 maxlen: 24
103.87.148.0/23 maxlen: 24
103.98.122.0/24 maxlen: 24
103.164.228.0/24 maxlen: 24
103.183.254.0/23 maxlen: 24
103.184.180.0/23 maxlen: 24
103.190.114.0/23 maxlen: 24
103.220.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8e:f6:8d:d6:fd:1d:6a:b0:09:32:d4:2c:05:a4:6e:1e:8e:de:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 4 02:55:00 2024 GMT
Not After : Dec 3 03:00:00 2025 GMT
Subject: CN=D7B4AFD73EB3B9FBA75FAE99BF0E928AD3B5195F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:40:fb:8e:97:72:27:3a:64:01:94:cf:09:
54:9e:c9:ea:b6:d0:f5:b5:40:42:52:4b:29:d8:86:
95:fb:81:3c:27:30:69:d2:d8:b5:6c:5f:b3:17:95:
a6:92:c2:12:e9:ea:70:7f:e8:ff:32:28:2c:36:3c:
68:7f:fd:90:1b:46:f8:5b:eb:19:d0:89:56:23:1a:
92:fc:0f:dc:87:e5:f7:d5:96:1b:0d:7d:3c:7a:4e:
f7:0e:0d:3b:2f:68:7d:2d:a7:b4:c6:fd:25:a7:9b:
24:55:0d:2b:91:75:0e:82:96:22:59:74:8f:45:b8:
7a:85:d7:3b:9f:40:82:08:0b:f7:69:7d:81:bb:32:
73:83:a5:24:7b:29:43:f9:9b:31:c5:3f:f5:7c:7c:
b2:42:46:6a:c6:03:19:d1:c4:65:56:6d:6e:1f:74:
1e:46:7d:59:63:c2:06:92:b3:52:f0:4c:15:ab:21:
02:ec:f6:e0:0c:df:5a:19:03:ea:13:62:09:ed:92:
8d:51:74:39:0b:cf:03:51:a0:ad:71:25:48:96:bd:
6a:15:2f:c6:0b:9b:06:a8:7c:b7:95:62:da:d1:fd:
4c:83:00:0d:18:87:f4:49:55:2f:b3:d9:9f:1d:76:
43:63:52:a9:f4:d6:88:8a:29:2e:c5:aa:75:97:58:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B4:AF:D7:3E:B3:B9:FB:A7:5F:AE:99:BF:0E:92:8A:D3:B5:19:5F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.99.0/24
103.46.10.0/23
103.54.80.0/23
103.83.98.0/24
103.87.148.0/23
103.98.122.0/24
103.164.228.0/24
103.183.254.0/23
103.184.180.0/23
103.190.114.0/23
103.220.22.0/23
Signature Algorithm: sha256WithRSAEncryption
72:59:63:00:69:49:9a:af:e0:7c:b4:8b:ef:f7:21:54:d0:e9:
0b:49:25:c8:b9:01:3b:ff:73:d0:1b:69:4f:0a:91:66:7a:a4:
21:89:ff:c0:6d:86:91:af:b5:bf:e2:01:1a:76:1f:77:87:9b:
e2:61:5f:97:58:61:fe:32:15:9d:f7:09:d2:80:1d:e7:d4:6c:
3a:fc:77:cc:69:5d:d9:e1:8c:90:86:91:15:5f:e8:61:8f:db:
ec:9e:da:c3:5a:4f:f9:39:aa:40:e6:e6:f2:61:d0:40:90:14:
6e:e7:c7:ef:89:c9:d0:66:f6:9f:ff:e7:d1:92:c3:e5:1c:5a:
c9:d6:ba:25:48:46:f9:8c:ff:77:aa:7f:2c:58:83:c7:33:08:
08:ac:c3:09:21:b8:c8:0a:ed:7e:4e:07:4b:c1:2a:72:d0:f2:
28:2e:0b:16:eb:51:29:46:4a:b5:61:b9:df:d6:2a:a9:b7:a1:
10:a1:b2:ed:7c:76:9c:ba:66:81:2c:6d:0b:93:33:54:09:7a:
2b:c6:80:a6:7e:42:ee:e9:d1:eb:d5:e5:3c:63:4d:e2:40:f0:
df:56:81:72:8b:c9:91:81:22:36:da:99:eb:56:a3:c1:cf:c1:
52:32:dd:5a:96:c4:93:fa:b0:4a:66:f3:a2:63:87:d0:cc:64:
e2:cc:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:05 2025 by rpki-client