Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141898.roa
File: AS141898.roa (raw, json)
Hash identifier: fzJpxoo8OAxzf5XT1kT737s5+HPDm1Xls3yonamdg5Q=
Subject key identifier: 95:C7:FE:60:D4:FF:E9:41:F1:C0:5E:EA:EE:DB:78:AB:03:95:81:80
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6635E07A553AE5600214998475EE06B2E41F20CA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141898.roa
Signing time: Mon 28 Apr 2025 07:00:00 +0000
ROA not before: Mon 28 Apr 2025 06:55:00 +0000
ROA not after: Mon 27 Apr 2026 07:00:00 +0000
asID: 141898
IP address blocks: 103.51.206.0/23 maxlen: 24
103.52.110.0/23 maxlen: 24
103.164.12.0/23 maxlen: 24
103.177.176.0/23 maxlen: 24
103.184.52.0/23 maxlen: 24
103.206.72.0/23 maxlen: 24
202.180.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 18:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:35:e0:7a:55:3a:e5:60:02:14:99:84:75:ee:06:b2:e4:1f:20:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 28 06:55:00 2025 GMT
Not After : Apr 27 07:00:00 2026 GMT
Subject: CN=95C7FE60D4FFE941F1C05EEAEEDB78AB03958180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:d5:d8:b2:81:2c:e4:8f:f9:ad:9b:19:33:
98:5e:ac:af:03:f0:ff:35:b3:d1:8b:4d:e2:23:9a:
93:b7:eb:cb:59:90:33:17:44:6c:85:7b:a6:03:dd:
fe:f7:94:e1:f6:60:90:60:6b:be:0a:f8:38:13:f9:
72:7d:6c:77:39:06:56:19:b6:83:fe:f6:db:fd:fb:
a9:2f:6a:6e:8d:ab:e5:87:e3:f9:01:47:53:f8:e6:
45:b4:d1:24:65:4d:e7:10:55:67:77:2c:88:2f:72:
2f:ec:7c:ff:1c:e6:30:ef:08:ee:c0:67:8d:9e:48:
2e:13:95:82:ed:8b:cf:25:ea:95:1b:96:45:56:f0:
81:1e:c4:91:ec:d7:3a:48:22:64:4d:28:06:2e:7e:
ea:da:82:0a:87:ac:db:2d:c1:27:60:f5:54:ac:82:
83:85:50:29:e5:ec:32:ae:a4:30:65:a6:6c:a5:44:
6a:ea:39:1f:db:02:b2:e8:ae:3f:89:7b:4a:1a:f6:
04:bc:24:58:c9:39:64:fb:89:c7:b8:be:73:79:5f:
07:e9:7f:06:a4:4b:04:66:1e:8c:64:3c:e9:25:2d:
cf:a2:2b:3f:60:b4:3f:be:63:7c:8e:8e:82:d7:eb:
54:1f:5b:d1:26:0a:eb:9b:59:6e:60:6d:1e:56:17:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C7:FE:60:D4:FF:E9:41:F1:C0:5E:EA:EE:DB:78:AB:03:95:81:80
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.206.0/23
103.52.110.0/23
103.164.12.0/23
103.177.176.0/23
103.184.52.0/23
103.206.72.0/23
202.180.12.0/22
Signature Algorithm: sha256WithRSAEncryption
04:8c:aa:67:4d:83:a0:a6:d5:d2:9d:43:ba:8b:9a:6b:5f:00:
b1:8c:04:e8:c1:7e:e9:47:3f:1c:e2:bb:a4:4e:9a:fb:b7:c5:
01:2b:39:b8:c5:34:c8:76:86:f6:61:c7:e5:a4:c0:db:39:7c:
8f:88:ec:fa:ef:7f:af:de:a1:f6:6e:26:81:ab:cd:0d:4b:42:
6d:79:98:e0:23:12:26:23:35:4d:8c:13:01:4b:31:a8:f0:3c:
94:a2:79:cd:fa:85:a6:4a:d9:db:3d:21:4a:6a:97:ac:12:c8:
54:79:20:98:32:9c:7a:33:8e:ab:7a:5e:17:ab:d6:0c:2d:b6:
89:1d:21:45:3b:e9:06:90:75:79:b4:4d:ca:57:a3:5a:33:4f:
85:07:a0:f6:8c:26:41:77:bc:02:b7:c8:5a:63:06:84:d9:90:
98:1a:69:4b:89:ba:f4:2f:f9:b6:a7:e7:59:52:7b:54:f6:db:
79:88:ff:7e:5c:fc:0c:8e:15:88:82:77:f3:c0:52:53:5d:ef:
b0:bc:3b:ae:ae:a8:81:e0:44:83:6a:e7:8f:f3:f5:ab:c4:7f:
5c:c1:8a:8c:0c:a2:9e:ba:e2:60:b8:4b:fb:7f:e0:2c:93:1f:
d7:ad:e7:31:92:fb:6c:ac:fd:44:4c:b2:52:12:93:80:e5:bf:
1b:db:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:58 2025 by rpki-client