Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9326.roa
File: AS9326.roa (raw, json)
Hash identifier: QWzqgDzGB0KbiDns/XsTCTM/oGOu9MkYxp7El9XQ82I=
Subject key identifier: 78:4F:02:D7:A0:D4:A3:42:09:3A:EF:F5:73:78:56:C2:C2:1E:60:F6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6E32193F9DEB74DE7E838E7ABC826662842A59CF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9326.roa
Signing time: Tue 09 Jan 2024 04:00:20 +0000
ROA not before: Tue 09 Jan 2024 03:55:20 +0000
ROA not after: Tue 07 Jan 2025 04:00:20 +0000
asID: 9326
IP address blocks: 113.11.128.0/19 maxlen: 24
124.153.0.0/18 maxlen: 24
202.57.0.0/20 maxlen: 24
202.146.224.0/19 maxlen: 24
203.166.192.0/20 maxlen: 24
2402:4100::/32 maxlen: 48
2406:b200::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 16:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:32:19:3f:9d:eb:74:de:7e:83:8e:7a:bc:82:66:62:84:2a:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 9 03:55:20 2024 GMT
Not After : Jan 7 04:00:20 2025 GMT
Subject: CN=784F02D7A0D4A342093AEFF5737856C2C21E60F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:06:2b:6f:06:ed:6a:29:97:7c:3d:01:ed:
74:54:1d:0b:7a:92:72:d1:d8:65:0c:4b:d0:e9:2e:
4e:be:c1:b6:44:7b:57:bc:07:6c:b2:57:8d:70:02:
05:ae:60:b8:23:af:2b:e8:8c:e0:ac:ce:d1:d4:55:
85:b9:54:0e:e9:98:cb:12:f7:ae:6c:8e:73:3c:f5:
71:7c:a7:85:5f:0d:30:e9:53:6a:84:98:0d:c9:2d:
4d:92:6d:79:cc:ee:c3:94:9b:11:41:0e:d4:15:83:
be:9e:da:71:f8:10:c3:4a:6d:8d:c6:56:8e:73:97:
43:0f:62:3a:48:1b:b0:f6:63:c7:0d:7f:89:34:e2:
b4:70:d2:19:65:bb:d8:0f:87:be:11:fa:de:7f:f6:
9f:37:30:fc:0b:97:c2:82:75:77:fb:bf:25:f9:b7:
fa:9e:f4:44:a3:73:0e:99:45:05:11:7e:cd:95:d6:
98:2f:ce:bc:51:a0:df:af:cb:9e:27:70:6d:f3:ec:
82:34:25:f0:13:48:bb:cf:8c:1f:62:b0:5f:b4:9d:
d7:42:ad:3a:ef:b8:f8:49:cb:6b:12:af:a3:18:49:
8c:d7:5f:74:59:7e:29:72:0f:55:a8:69:58:b4:d5:
5c:70:8b:47:26:4e:76:5e:a7:8a:60:c4:2a:90:9e:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4F:02:D7:A0:D4:A3:42:09:3A:EF:F5:73:78:56:C2:C2:1E:60:F6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.11.128.0/19
124.153.0.0/18
202.57.0.0/20
202.146.224.0/19
203.166.192.0/20
IPv6:
2402:4100::/32
2406:b200::/32
Signature Algorithm: sha256WithRSAEncryption
4a:c6:f8:f6:33:26:49:a3:1d:ef:a7:e1:52:c6:d9:ab:70:02:
8e:a0:72:c4:f8:29:59:1b:55:b9:6c:c1:b9:3d:d3:a8:67:66:
ff:cc:92:6d:d7:b4:c3:63:26:79:2c:a1:26:af:e1:32:7d:f4:
06:ab:8e:ad:41:d7:a7:1c:06:41:07:9e:38:2d:50:40:61:e0:
ad:e5:25:0b:8c:11:97:57:31:80:d0:41:fa:dd:ed:c6:6a:1f:
61:21:cc:7e:01:30:b3:b1:e9:16:58:67:b4:47:71:dc:d5:00:
f5:74:ca:8c:c8:c0:9e:0a:49:aa:06:38:de:49:09:f7:89:c4:
08:e4:d8:36:46:ba:26:46:26:50:9c:be:71:2e:4a:cc:24:28:
82:c1:4f:30:4a:b9:c8:e4:6d:74:e8:b3:35:43:ef:cd:be:93:
80:44:07:f4:78:60:46:71:fa:16:db:88:f2:1f:17:06:50:50:
8a:00:ea:5e:ed:dc:40:77:a5:c9:68:22:67:dd:2e:00:d1:8c:
7c:b0:92:c2:c4:74:8e:ad:3c:60:0f:e2:73:b5:3c:62:f1:ec:
91:40:dc:ee:50:6e:1e:84:6e:d8:c3:60:f7:c5:4f:06:d1:ea:
15:f4:5c:a7:c8:a3:ad:0d:2b:ac:92:6e:ea:53:4c:c1:36:4f:
05:b3:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:42:43 2024 by rpki-client on console-ams.rpki-client.org