Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9326.roa
File: AS9326.roa (raw, json)
Hash identifier: W0mothPObTMNmOBe9jLGcOqr/BNag1RhF23yPoa7Now=
Subject key identifier: A9:F1:68:09:58:48:E8:BF:B8:90:82:45:41:BB:26:10:A2:11:15:5B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 416A6C991E8A6134872CBFEE4F4B0632679BD91C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9326.roa
Signing time: Tue 10 Dec 2024 05:00:16 +0000
ROA not before: Tue 10 Dec 2024 04:55:16 +0000
ROA not after: Tue 09 Dec 2025 05:00:16 +0000
asID: 9326
IP address blocks: 113.11.128.0/19 maxlen: 24
124.153.0.0/18 maxlen: 24
202.57.0.0/20 maxlen: 24
202.146.224.0/19 maxlen: 24
203.166.192.0/20 maxlen: 24
2402:4100::/32 maxlen: 48
2406:b200::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Apr 2025 17:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6a:6c:99:1e:8a:61:34:87:2c:bf:ee:4f:4b:06:32:67:9b:d9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:16 2024 GMT
Not After : Dec 9 05:00:16 2025 GMT
Subject: CN=A9F168095848E8BFB890824541BB2610A211155B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:b4:d9:e6:41:5a:5b:ea:a3:2c:20:8a:07:
ec:2b:f5:f7:2f:28:7b:94:fc:35:93:ea:5e:89:a0:
78:9f:9f:46:20:03:23:be:6d:18:bd:ee:8f:38:e3:
b5:25:2e:b1:66:2b:26:45:57:dd:20:75:97:3a:32:
fb:07:74:5b:8c:cd:ff:df:28:f3:90:c9:ca:68:c6:
a3:11:24:75:59:55:09:71:f7:73:55:4f:19:ab:48:
ed:1f:21:ed:b2:52:ca:d8:b8:4c:45:72:41:4a:f7:
40:ce:0c:96:f2:af:19:86:47:4a:44:35:eb:66:71:
7b:53:e0:dd:af:3e:f6:3a:95:90:c0:f5:36:be:47:
f0:ad:c2:27:72:a9:e9:c4:67:9c:03:37:6e:73:56:
b5:ac:e4:61:1d:fa:1c:ea:65:6d:01:36:9d:a4:71:
02:6a:df:d3:74:f3:b4:75:c1:94:8f:74:82:04:4e:
30:38:b4:1d:9d:6b:9d:e2:9b:df:de:43:7a:69:4d:
74:46:21:39:60:f5:30:ea:5f:2a:82:d3:c3:ad:2d:
b8:f5:ff:32:cc:62:31:b5:97:9d:5f:88:8e:89:6d:
cf:9c:30:31:50:02:06:6b:f3:f3:3e:7e:d7:70:c3:
df:76:ff:78:db:8f:8a:52:63:67:b3:da:46:91:12:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F1:68:09:58:48:E8:BF:B8:90:82:45:41:BB:26:10:A2:11:15:5B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.11.128.0/19
124.153.0.0/18
202.57.0.0/20
202.146.224.0/19
203.166.192.0/20
IPv6:
2402:4100::/32
2406:b200::/32
Signature Algorithm: sha256WithRSAEncryption
6b:59:fe:b0:de:a7:a0:2f:43:d1:2d:76:34:36:b3:50:75:50:
ab:07:08:08:a5:97:cf:49:a3:d2:d0:81:9c:24:b6:8d:f7:99:
1d:8e:7d:5b:32:12:54:80:bc:a2:42:29:7d:6b:3f:38:27:d2:
de:0d:d3:5d:c4:0b:3b:df:ba:9d:bb:3a:9d:fd:a0:94:59:d0:
ec:ea:86:07:de:3e:92:c6:5d:8f:5c:a8:11:c5:8e:94:1b:d8:
c1:ee:bd:61:3a:f1:0e:f6:19:82:54:1a:5b:15:66:49:b4:17:
a0:0d:dd:cc:ba:69:1b:79:19:a4:a7:77:e6:b6:13:db:51:a3:
4c:03:a2:3a:6b:9d:2c:fa:3e:b5:06:7e:95:f7:a2:d2:fb:6a:
e3:6a:73:6c:1d:77:b6:16:68:42:26:3b:99:06:74:c7:6f:76:
c5:3e:da:09:6a:35:86:41:f4:c4:f8:a3:f7:8b:ea:5d:33:84:
e2:eb:f2:11:77:7a:86:2a:2e:82:66:a1:fc:5b:8b:0f:f6:fe:
04:57:12:de:ff:a7:97:0f:b0:66:6f:7a:73:e6:00:65:a7:1a:
de:e6:87:e9:54:e4:ad:47:bb:89:b1:0e:f5:59:70:43:9c:59:
e5:c3:da:c7:ac:d4:80:8d:a6:0e:ed:21:90:f5:37:de:fd:67:
6a:f7:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:24 2025 by rpki-client