Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
File: AS45727.roa (raw, json)
Hash identifier: 7y6lDmIW1oBRs0GjX8PJW0BoKTWo8Qpkr1r+WIxIQos=
Subject key identifier: 6A:39:B5:12:08:A6:72:53:D2:3F:55:EB:C9:4B:4D:27:12:93:E5:43
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 16FD33706E8B813E1F3E6C0E105BA6A61595457E
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
Signing time: Thu 05 Dec 2024 08:15:26 +0000
ROA not before: Thu 05 Dec 2024 08:10:26 +0000
ROA not after: Thu 04 Dec 2025 08:15:26 +0000
asID: 45727
IP address blocks: 103.10.66.0/24 maxlen: 24
114.142.172.0/24 maxlen: 24
114.142.173.0/24 maxlen: 24
116.206.10.0/24 maxlen: 24
116.206.11.0/24 maxlen: 24
116.206.12.0/24 maxlen: 24
116.206.13.0/24 maxlen: 24
116.206.14.0/24 maxlen: 24
116.206.15.0/24 maxlen: 24
116.206.28.0/24 maxlen: 24
116.206.29.0/24 maxlen: 24
116.206.40.0/24 maxlen: 24
116.206.41.0/24 maxlen: 24
180.214.232.0/24 maxlen: 24
180.214.233.0/24 maxlen: 24
180.214.234.0/24 maxlen: 24
202.67.40.0/24 maxlen: 24
202.67.41.0/24 maxlen: 24
202.67.42.0/24 maxlen: 24
202.67.43.0/24 maxlen: 24
202.67.46.0/24 maxlen: 24
223.255.225.0/24 maxlen: 24
223.255.229.0/24 maxlen: 24
223.255.230.0/24 maxlen: 24
2400:8b00:100::/44 maxlen: 44
2400:8b00:110::/44 maxlen: 44
2400:8b00:120::/44 maxlen: 44
2400:8b00:130::/44 maxlen: 44
2400:8b00:200::/44 maxlen: 44
2400:8b00:210::/44 maxlen: 44
2400:8b00:220::/44 maxlen: 44
2400:8b00:230::/44 maxlen: 44
2400:8b00:500::/44 maxlen: 44
2400:8b00:510::/44 maxlen: 44
2400:8b00:520::/44 maxlen: 44
2400:8b00:530::/44 maxlen: 44
2400:8b00:800::/44 maxlen: 44
2400:8b00:810::/44 maxlen: 44
2400:8b00:820::/44 maxlen: 44
2400:8b00:830::/44 maxlen: 44
2400:8b00:a80::/44 maxlen: 44
2400:8b00:a90::/44 maxlen: 44
2400:8b00:aa0::/44 maxlen: 44
2400:8b00:ab0::/44 maxlen: 44
2400:8b00:d90::/44 maxlen: 44
2400:8b00:da0::/44 maxlen: 44
2400:8b00:db0::/44 maxlen: 44
2400:8b00:1000::/44 maxlen: 44
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 10:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fd:33:70:6e:8b:81:3e:1f:3e:6c:0e:10:5b:a6:a6:15:95:45:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 5 08:10:26 2024 GMT
Not After : Dec 4 08:15:26 2025 GMT
Subject: CN=6A39B51208A67253D23F55EBC94B4D271293E543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:ff:33:ac:8c:d8:20:db:6e:91:16:04:ca:
4a:2a:0a:05:7c:89:38:24:1a:d4:79:6a:db:43:48:
75:e0:75:c0:2c:4c:b9:57:93:3c:f2:74:6a:90:c9:
79:b5:86:77:69:bc:34:d2:df:7c:cf:60:91:33:e3:
f9:0f:4a:d6:f6:6d:7e:e1:34:43:cc:ca:8d:e7:12:
28:fc:c2:b9:4a:0c:f0:59:d4:ca:46:93:99:58:1b:
9e:dc:29:89:05:55:3d:41:41:eb:28:47:79:ed:28:
57:bb:7e:92:05:a4:03:29:d3:d4:94:27:48:26:46:
3c:c8:e0:ee:a5:98:24:0b:e1:a9:a2:8e:01:54:61:
69:4a:3f:30:b3:02:59:69:f1:a9:3c:8b:fc:d8:72:
fe:fc:ca:0f:c0:78:39:15:05:77:76:cc:f0:69:b9:
85:dc:b4:b9:71:6a:43:d9:00:4e:6b:e5:61:a3:89:
00:9e:4c:6a:bc:dd:9a:cb:da:fb:3c:33:d8:70:cd:
9c:64:78:45:84:92:9e:52:5b:3b:ab:84:5e:59:6a:
0b:5d:bb:4a:66:a1:98:8e:c1:6f:cb:7d:01:b4:5b:
e2:b8:71:80:8d:cf:aa:f0:4c:4c:ff:e8:9b:db:a5:
5d:96:8f:1c:05:08:9c:f1:a9:52:2f:31:de:30:67:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:B5:12:08:A6:72:53:D2:3F:55:EB:C9:4B:4D:27:12:93:E5:43
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.66.0/24
114.142.172.0/23
116.206.10.0-116.206.15.255
116.206.28.0/23
116.206.40.0/23
180.214.232.0-180.214.234.255
202.67.40.0/22
202.67.46.0/24
223.255.225.0/24
223.255.229.0-223.255.230.255
IPv6:
2400:8b00:100::/42
2400:8b00:200::/42
2400:8b00:500::/42
2400:8b00:800::/42
2400:8b00:a80::/42
2400:8b00:d90::-2400:8b00:dbf:ffff:ffff:ffff:ffff:ffff
2400:8b00:1000::/44
Signature Algorithm: sha256WithRSAEncryption
97:1c:89:ca:36:ac:a4:0d:fe:fa:fa:dd:31:3d:3a:41:4b:21:
c2:14:d3:8d:93:f2:c9:54:e4:08:25:7b:33:62:35:5e:af:c5:
d0:76:28:c1:ac:93:2d:37:bf:35:1c:47:56:cf:31:00:17:2c:
88:f3:f7:a5:06:28:1e:de:b8:a9:54:47:a9:e2:c9:2f:f5:19:
86:87:35:ec:1f:a6:f5:3a:53:15:7f:59:f9:25:7d:95:d1:d6:
bf:77:5c:f0:31:3e:c4:21:8c:f1:be:8d:56:ee:26:07:57:cb:
f6:f3:22:52:58:83:43:b8:31:c1:68:4a:f1:e0:29:ce:8e:d9:
f6:cb:fe:fc:9b:60:d3:c0:15:c4:15:48:fb:b0:8f:ea:a3:c8:
39:77:94:44:67:18:b7:9e:cd:2e:12:4f:b2:5b:24:5a:e3:eb:
82:f6:41:b0:c0:7d:e8:f0:49:51:d8:34:94:43:bd:41:50:c9:
b2:bb:b4:04:71:5f:b2:f6:66:47:5e:98:68:59:65:1f:e8:2c:
2f:a8:30:60:3b:17:9f:b7:c8:ad:1f:ed:6e:7e:89:47:11:a9:
5b:2a:51:43:00:49:51:f2:5a:bb:d3:d4:68:db:1b:d8:7b:bc:
10:d4:d1:e0:df:26:29:0b:de:cf:10:22:22:15:c8:6e:0e:ea:
13:b7:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:06:14 2025 by rpki-client