Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63515.roa
File: AS63515.roa (raw, json)
Hash identifier: YLqvS4oQQd5j1hWalogf+ReRM5duTEqqWBAyTfRWEp0=
Subject key identifier: 0F:A8:E5:51:8F:86:F4:C7:D9:6D:DB:00:A4:D8:9C:8E:9B:69:D6:C6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2A69C91E9EE15AB5AE0EFED3EEE6CCED821658EF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63515.roa
Signing time: Thu 16 May 2024 14:39:34 +0000
ROA not before: Thu 16 May 2024 14:34:34 +0000
ROA not after: Thu 15 May 2025 14:39:34 +0000
asID: 63515
IP address blocks: 116.193.188.0/24 maxlen: 24
116.193.189.0/24 maxlen: 24
2404:ef00::/32 maxlen: 48
2406:6cc0::/32 maxlen: 48
2406:6cc0:a300::/48 maxlen: 48
2406:6cc0:a400::/48 maxlen: 48
2406:6cc0:a600::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 25 Nov 2024 20:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:69:c9:1e:9e:e1:5a:b5:ae:0e:fe:d3:ee:e6:cc:ed:82:16:58:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 16 14:34:34 2024 GMT
Not After : May 15 14:39:34 2025 GMT
Subject: CN=0FA8E5518F86F4C7D96DDB00A4D89C8E9B69D6C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:1c:7c:06:7b:7f:df:e4:f6:9e:37:43:b5:
2d:83:9a:50:30:13:97:75:c0:21:8f:9c:c8:fb:9e:
59:de:a0:36:aa:37:c0:8b:e8:ba:27:40:53:e9:fa:
27:84:bf:a6:47:41:90:ba:8c:aa:1e:14:8e:7f:d9:
1f:f4:c6:35:c9:df:a7:14:c7:74:4a:c4:33:2f:c7:
0b:6d:3d:29:4b:41:75:99:03:99:7a:26:16:f3:ba:
e9:73:70:1a:2b:4f:0f:c1:6f:61:2b:29:1d:31:a7:
d2:35:55:86:f9:a2:f2:6e:e0:6c:3e:38:a7:b6:ca:
99:3d:be:26:0b:af:b3:af:bc:09:8a:8d:a0:d3:65:
81:a1:09:45:8e:6f:e1:72:3f:d5:db:86:74:21:5a:
ac:92:93:a5:94:32:2a:9d:ed:33:aa:4e:88:2d:81:
db:3b:3e:7e:c0:5a:53:62:51:63:81:3a:25:50:88:
c3:5f:ff:c7:4a:a5:02:d2:f9:e5:93:71:42:d5:41:
d4:60:8b:7e:b9:7a:22:21:21:df:32:37:a5:b0:21:
d4:f6:e6:ad:01:0d:bc:bc:0b:32:f2:68:33:9e:9c:
3a:cd:30:39:df:a3:b3:36:c3:9d:5c:ea:61:62:b8:
c4:af:c0:14:21:71:0b:26:21:38:03:0a:ab:28:1e:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:E5:51:8F:86:F4:C7:D9:6D:DB:00:A4:D8:9C:8E:9B:69:D6:C6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.193.188.0/23
IPv6:
2404:ef00::/32
2406:6cc0::/32
Signature Algorithm: sha256WithRSAEncryption
71:96:c6:a1:44:ba:33:21:c8:30:3b:58:81:2f:c1:d2:4d:44:
32:13:03:b5:a0:7a:97:eb:01:93:f8:7a:7f:a4:76:ec:d5:0d:
7e:29:cd:2f:33:c1:1b:d3:42:c4:3c:d0:14:73:3b:5e:ce:32:
b6:86:ac:99:da:44:c4:5c:d1:60:b5:7b:c6:77:59:1b:46:d8:
59:df:ee:87:ed:ac:8d:c2:d3:83:53:f5:aa:d7:49:a7:01:ac:
a0:9c:fb:87:1a:d2:9d:ca:44:44:6e:0e:a8:df:8e:35:d9:2f:
da:ce:d2:8f:98:ab:84:ad:15:51:1e:2e:ff:a4:b1:ea:32:f6:
54:b0:35:7e:ff:7b:ba:14:4f:c6:69:a0:66:a9:b2:13:5f:e4:
32:28:18:7a:85:50:7c:cf:42:d9:9a:56:97:6a:af:cd:6f:5e:
f1:82:8e:98:8f:59:db:a6:90:1f:b3:b1:74:bb:b4:60:d9:a1:
33:eb:5c:b9:6d:44:53:7f:17:14:ab:1c:5a:6d:97:93:d7:b9:
3f:e8:50:1e:bc:9b:be:10:e8:7e:d9:1f:fd:a8:b2:c7:57:ee:
b4:e9:9b:40:c5:e6:ba:4e:13:07:62:00:c6:19:bc:a3:f9:8c:
2f:6b:bc:3a:c8:c2:2c:c5:bf:cf:ec:69:30:58:70:fc:65:93:
5d:2a:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:28 2024 by rpki-client on console-fra.rpki-client.org