Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa
File: AS55699.roa (raw, json)
Hash identifier: Xgg0wMNAJ76Caeyg4ahR7oDsKbPsSxm5u+HwE4RK5Kw=
Subject key identifier: 70:47:9C:CE:9E:2A:9C:22:1A:79:D9:1E:FF:AB:91:08:EB:F3:3C:03
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2723D4930A7623C6034B09D0FA02FD0FD623C7A7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa
Signing time: Fri 08 Mar 2024 06:35:42 +0000
ROA not before: Fri 08 Mar 2024 06:30:42 +0000
ROA not after: Fri 07 Mar 2025 06:35:42 +0000
asID: 55699
IP address blocks: 45.127.204.0/22 maxlen: 24
103.14.16.0/22 maxlen: 24
103.57.36.0/22 maxlen: 24
103.73.60.0/22 maxlen: 24
103.77.48.0/22 maxlen: 24
103.78.216.0/22 maxlen: 24
103.81.220.0/22 maxlen: 24
103.84.140.0/22 maxlen: 24
103.84.144.0/22 maxlen: 24
103.84.228.0/22 maxlen: 24
103.85.120.0/22 maxlen: 24
103.100.128.0/22 maxlen: 24
103.100.132.0/22 maxlen: 24
103.139.10.0/23 maxlen: 24
103.139.30.0/23 maxlen: 24
103.139.32.0/23 maxlen: 24
103.139.36.0/23 maxlen: 24
103.147.8.0/23 maxlen: 24
103.247.196.0/23 maxlen: 24
192.144.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 May 2024 20:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:23:d4:93:0a:76:23:c6:03:4b:09:d0:fa:02:fd:0f:d6:23:c7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 8 06:30:42 2024 GMT
Not After : Mar 7 06:35:42 2025 GMT
Subject: CN=70479CCE9E2A9C221A79D91EFFAB9108EBF33C03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:13:be:98:33:a1:16:42:38:6d:b1:82:96:
56:43:cc:cd:c1:73:18:9c:24:11:98:b2:fd:6d:f3:
f4:df:0c:63:d2:e6:38:b9:c1:c7:61:16:71:75:22:
e1:4c:c7:1f:99:db:d5:34:98:27:a7:7a:41:e0:28:
87:0c:a7:e4:35:48:83:c8:81:a9:20:98:11:08:90:
70:60:6a:81:35:4d:fc:56:23:bd:0c:ee:a9:a5:12:
60:c3:71:16:72:b2:59:7e:30:fd:5e:ce:1d:e8:d6:
73:15:09:37:fe:9d:52:af:17:fb:05:8a:22:49:ee:
77:9d:eb:64:70:5f:7b:bf:db:4e:f4:ab:42:15:5c:
f1:ab:c7:32:c7:b2:17:14:fe:15:ce:fc:84:34:74:
3e:9c:46:d5:f5:b7:59:ca:ab:14:03:f0:66:ef:b6:
70:f3:75:3e:73:7f:5c:8a:97:b2:74:e0:52:2b:20:
48:b1:ca:51:6a:99:5c:ea:c4:db:7c:70:23:6a:dd:
1c:d3:aa:c5:25:cf:50:6d:9d:c1:04:9b:60:9d:32:
17:d2:0d:3f:ea:cd:c8:a6:b4:2f:2f:ed:f4:ad:fb:
40:e2:16:07:01:d0:46:e0:a0:a8:e5:47:83:c3:45:
9a:49:7d:90:6d:a2:33:34:e2:63:fe:cf:39:b1:bc:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:9C:CE:9E:2A:9C:22:1A:79:D9:1E:FF:AB:91:08:EB:F3:3C:03
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55699.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.204.0/22
103.14.16.0/22
103.57.36.0/22
103.73.60.0/22
103.77.48.0/22
103.78.216.0/22
103.81.220.0/22
103.84.140.0-103.84.147.255
103.84.228.0/22
103.85.120.0/22
103.100.128.0/21
103.139.10.0/23
103.139.30.0-103.139.33.255
103.139.36.0/23
103.147.8.0/23
103.247.196.0/23
192.144.92.0/22
Signature Algorithm: sha256WithRSAEncryption
41:c0:9f:6c:1a:13:54:36:a1:b0:b3:a0:2b:6d:d6:bd:08:33:
c3:00:e7:aa:a6:64:74:12:da:4f:d4:53:34:36:ae:ef:38:c9:
d6:2d:ce:f9:d6:05:22:73:8f:5a:0f:fd:f8:6a:02:41:ef:35:
09:fb:c0:0e:95:cd:2d:52:b8:38:c0:0c:ca:35:af:32:72:71:
dc:8d:c4:fe:8b:49:07:31:c4:1c:4b:b5:9b:d3:a4:56:f7:cc:
9a:aa:e9:fd:d5:be:2c:e4:1b:ab:50:a7:b9:fe:35:ad:d9:56:
3c:18:97:48:97:c2:2d:29:df:6b:01:ce:5a:bf:3d:c4:45:c6:
44:f7:4c:41:23:a3:cb:a3:e6:68:83:4e:9d:21:47:3d:e1:9c:
b7:d1:79:61:1e:13:7e:18:05:41:ec:9c:08:14:78:5b:6e:2f:
c1:53:c8:b9:89:01:25:81:7b:70:ef:5a:9e:fc:6b:c2:61:34:
3e:25:fd:81:86:94:38:e3:47:c4:c9:53:94:0d:d4:7d:b9:c3:
39:04:0c:40:e1:0b:54:9b:7c:0c:f1:67:90:9e:96:36:4c:8a:
23:c2:3c:3b:ca:2d:3e:b3:28:44:31:f0:51:85:c9:d4:35:3a:
0b:b0:c8:32:fb:31:d1:82:3b:3b:47:00:37:d0:cf:af:5e:41:
29:36:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:25 2024 by rpki-client on console-fra.rpki-client.org