Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa
File: AS55699.roa (raw, json)
Hash identifier: QUVSnrF2cOPfiAzGhgfCWj3sZCuxInKwSZAvbHVfaKY=
Subject key identifier: 84:E3:61:63:3D:7B:53:04:6A:9A:AD:C0:00:8A:38:62:39:B5:44:41
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 48840A8882C7E807FB1B0B094B9D8CCAB8908827
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa
Signing time: Fri 07 Feb 2025 07:00:00 +0000
ROA not before: Fri 07 Feb 2025 06:55:00 +0000
ROA not after: Fri 06 Feb 2026 07:00:00 +0000
asID: 55699
IP address blocks: 45.127.204.0/22 maxlen: 24
103.14.16.0/22 maxlen: 24
103.57.36.0/22 maxlen: 24
103.73.60.0/22 maxlen: 24
103.77.48.0/22 maxlen: 24
103.78.216.0/22 maxlen: 24
103.81.220.0/22 maxlen: 24
103.84.140.0/22 maxlen: 24
103.84.144.0/22 maxlen: 24
103.84.228.0/22 maxlen: 24
103.85.120.0/22 maxlen: 24
103.100.128.0/22 maxlen: 24
103.100.132.0/22 maxlen: 24
103.139.10.0/23 maxlen: 24
103.139.30.0/23 maxlen: 24
103.139.32.0/23 maxlen: 24
103.139.36.0/23 maxlen: 24
103.147.8.0/23 maxlen: 24
103.247.196.0/23 maxlen: 24
192.144.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Apr 2025 17:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:84:0a:88:82:c7:e8:07:fb:1b:0b:09:4b:9d:8c:ca:b8:90:88:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 7 06:55:00 2025 GMT
Not After : Feb 6 07:00:00 2026 GMT
Subject: CN=84E361633D7B53046A9AADC0008A386239B54441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:34:1d:50:e9:8d:06:61:60:e6:94:66:2e:
64:0f:b8:be:9d:c7:97:f7:08:86:08:81:1d:0e:c6:
cc:b2:a9:db:18:c0:78:94:7b:a0:0f:3a:c9:44:62:
43:db:31:55:28:c7:bc:4d:31:61:18:32:16:02:25:
40:1f:c6:31:ce:19:a1:cf:1c:61:89:a4:52:0d:4f:
34:63:2e:6d:bc:e3:be:18:27:91:38:70:8f:b5:7e:
15:41:e9:8a:eb:d0:f6:d3:c9:55:fc:3b:ad:f5:df:
ba:ea:ec:8c:2e:f6:2b:33:11:ff:b4:80:f1:94:87:
0b:4b:87:cb:ee:5e:71:96:a6:9d:66:35:07:0b:c8:
65:3f:d7:bc:b3:6f:3c:e1:56:63:5c:d3:59:9e:38:
e5:99:9c:f0:08:8f:ae:3f:e8:90:bc:fd:d1:aa:9a:
ec:e3:ef:2d:da:dd:e0:f4:23:d2:05:31:ea:52:f2:
39:00:a6:65:07:c1:fb:32:2e:e4:9a:61:d1:1f:74:
88:9b:c9:28:32:8d:b7:b7:c5:5f:3a:16:a7:2f:44:
21:23:53:a8:6c:63:11:b1:8b:17:c3:6f:5e:93:d9:
eb:d2:3f:9f:ec:aa:7d:de:ea:37:4b:f9:86:2b:5e:
b7:a3:fc:78:95:51:5e:79:19:44:e6:da:cc:4c:24:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:61:63:3D:7B:53:04:6A:9A:AD:C0:00:8A:38:62:39:B5:44:41
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.204.0/22
103.14.16.0/22
103.57.36.0/22
103.73.60.0/22
103.77.48.0/22
103.78.216.0/22
103.81.220.0/22
103.84.140.0-103.84.147.255
103.84.228.0/22
103.85.120.0/22
103.100.128.0/21
103.139.10.0/23
103.139.30.0-103.139.33.255
103.139.36.0/23
103.147.8.0/23
103.247.196.0/23
192.144.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:04:98:04:34:7c:bb:a2:4f:6d:4a:22:fc:48:2d:11:c7:9e:
67:34:14:b6:85:9a:56:ca:c8:2b:3d:20:8c:dd:87:49:4c:f2:
05:c2:8e:ae:ff:93:7c:68:3d:ec:48:b6:83:d4:6b:d5:1e:59:
2f:5e:28:8b:df:ea:71:15:8b:31:ee:e3:f9:6f:b4:92:76:e8:
b5:47:21:71:41:62:1b:46:ef:dd:52:9e:2e:2f:2b:40:12:99:
6f:94:d4:ab:d5:41:68:b0:fd:5f:e7:64:10:51:59:21:cb:4d:
10:8e:ed:94:a0:6f:1f:c8:cc:29:7d:b7:c8:59:49:99:9c:6e:
b8:14:6c:34:4f:60:cb:b9:df:b5:c1:cc:d5:6f:08:ba:7f:a9:
cd:49:6b:cc:c4:26:6d:8d:d5:d1:50:04:77:2f:5e:ca:b6:53:
de:7b:4c:5a:32:66:47:86:ec:c8:1b:74:37:4e:a4:fa:69:99:
aa:75:01:ef:bd:ba:75:36:76:66:83:86:83:97:9f:b2:20:af:
f5:27:3a:5f:79:d8:2e:02:9e:fa:b9:c2:31:db:0a:62:6b:4d:
f0:9d:7a:0a:0f:22:26:0f:29:f2:00:f8:75:a1:bb:c7:46:04:
1b:04:05:29:e8:04:73:48:9b:cb:78:be:93:68:4e:c9:e9:12:
94:69:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:28 2025 by rpki-client