Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58369.roa
File: AS58369.roa (raw, json)
Hash identifier: 3UffO38kc6Clo9i2pMWtIXFj3Qb1mN6T5nAVgZChNvQ=
Subject key identifier: A5:0D:73:E9:7C:7E:6F:E4:B9:60:07:69:64:B3:51:4C:57:01:64:DE
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 24ED7C39E43633D3B772CCBE1AEB73512FB180BE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58369.roa
Signing time: Mon 04 Aug 2025 02:42:41 +0000
ROA not before: Mon 04 Aug 2025 02:37:41 +0000
ROA not after: Mon 03 Aug 2026 02:42:41 +0000
asID: 58369
IP address blocks: 103.18.46.0/23 maxlen: 24
103.41.250.0/23 maxlen: 24
103.75.64.0/23 maxlen: 24
103.130.182.0/23 maxlen: 24
103.132.200.0/23 maxlen: 24
103.144.21.0/24 maxlen: 24
103.144.126.0/23 maxlen: 24
103.144.212.0/23 maxlen: 24
103.148.232.0/23 maxlen: 24
103.151.14.0/23 maxlen: 24
103.153.186.0/23 maxlen: 24
103.156.216.0/23 maxlen: 24
103.157.82.0/23 maxlen: 24
103.159.220.0/23 maxlen: 24
103.165.244.0/23 maxlen: 24
103.166.210.0/23 maxlen: 24
103.167.12.0/23 maxlen: 24
103.167.108.0/23 maxlen: 24
103.167.108.0/24 maxlen: 24
103.167.109.0/24 maxlen: 24
103.168.168.0/23 maxlen: 24
103.172.246.0/23 maxlen: 24
103.172.248.0/23 maxlen: 24
103.173.76.0/23 maxlen: 24
103.177.104.0/23 maxlen: 24
103.188.170.0/23 maxlen: 24
103.224.73.0/24 maxlen: 24
115.187.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 Aug 2025 13:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ed:7c:39:e4:36:33:d3:b7:72:cc:be:1a:eb:73:51:2f:b1:80:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Aug 4 02:37:41 2025 GMT
Not After : Aug 3 02:42:41 2026 GMT
Subject: CN=A50D73E97C7E6FE4B960076964B3514C570164DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:ac:b8:f0:54:1c:35:86:82:09:6a:0d:9a:
da:84:69:4a:02:6a:f0:53:ce:9f:eb:01:c4:e6:e7:
44:0d:bf:06:20:23:2a:34:0b:47:c6:02:ca:0a:8c:
e1:ad:ef:99:e3:4b:77:6d:dd:bc:8f:14:43:ed:7a:
70:3d:9c:b6:81:a0:19:cc:a2:c2:3b:35:b4:5b:c0:
84:9a:48:86:f9:c6:e3:3d:5e:6e:1d:ec:3f:0f:49:
99:19:4f:ab:73:3f:b7:f2:ae:10:58:dd:91:8c:33:
a4:c6:cd:a7:43:ca:4a:8f:26:06:a4:42:37:74:bd:
7c:f2:8e:3c:fe:d1:64:dd:2d:0a:29:a6:0b:4d:03:
36:c3:f4:90:c8:55:a7:0d:c5:6c:e7:b7:90:dc:25:
bb:d7:9b:0c:c4:5f:68:b5:e1:03:e3:5e:10:39:2d:
b3:7d:a6:fb:1a:2e:58:7a:9f:eb:e4:3a:4f:d4:36:
e0:2a:b7:90:ef:b7:f3:be:cf:03:6c:80:d7:26:3c:
75:17:54:6d:bf:be:9c:b3:c8:76:25:d5:ec:30:6e:
3e:a7:76:46:0d:3d:42:96:8b:02:6f:c7:49:62:55:
84:4c:d0:af:f0:3c:51:2c:9a:64:0b:08:41:7a:c6:
e7:d5:9d:17:f6:79:62:84:d2:b8:ec:17:27:4c:21:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0D:73:E9:7C:7E:6F:E4:B9:60:07:69:64:B3:51:4C:57:01:64:DE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.46.0/23
103.41.250.0/23
103.75.64.0/23
103.130.182.0/23
103.132.200.0/23
103.144.21.0/24
103.144.126.0/23
103.144.212.0/23
103.148.232.0/23
103.151.14.0/23
103.153.186.0/23
103.156.216.0/23
103.157.82.0/23
103.159.220.0/23
103.165.244.0/23
103.166.210.0/23
103.167.12.0/23
103.167.108.0/23
103.168.168.0/23
103.172.246.0-103.172.249.255
103.173.76.0/23
103.177.104.0/23
103.188.170.0/23
103.224.73.0/24
115.187.30.0/23
Signature Algorithm: sha256WithRSAEncryption
95:ae:0c:6f:80:b1:41:ab:a7:d8:e2:ff:9f:d1:fd:03:a8:64:
27:97:d1:ad:65:fa:5a:59:9c:32:05:95:a9:e0:20:85:4b:ac:
b4:a3:fc:e5:34:c0:7a:cc:a6:78:96:5c:03:65:22:df:07:3b:
04:90:66:38:63:54:b8:fb:8c:e5:4a:f0:f7:e8:8d:48:fa:f3:
bc:bc:1f:9c:e2:7a:57:3f:30:71:35:83:60:30:f1:27:da:d9:
02:2c:09:91:28:ea:f0:e4:f8:a6:7a:4c:1b:11:45:7a:5f:56:
3c:2e:01:9d:43:08:0e:f7:e5:79:0e:1e:9a:f9:89:20:96:6e:
a6:3a:95:90:e4:3c:14:1a:d8:83:43:e8:0d:a0:46:78:e9:ef:
55:9c:2c:5e:a8:f1:54:63:01:0a:5f:29:5c:e0:aa:3d:ed:9d:
5b:a5:eb:ce:0e:96:bf:b7:6a:b8:ca:69:ad:88:f4:ed:79:e7:
49:bc:b1:01:75:12:1b:ba:1f:8f:7d:e4:35:df:dd:f8:00:d8:
48:9c:35:5e:55:2a:94:39:07:81:b7:b2:8b:82:6d:16:ff:95:
67:ea:6f:a0:d8:61:b7:5b:e4:ce:4a:0a:ff:7d:3f:5d:55:43:
1c:54:71:ae:eb:1a:d4:b3:fd:39:a8:30:d6:e1:69:56:b0:f5:
0d:87:0e:68
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUJO18OeQ2M9O3csy+GutzUS+xgL4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwNDAyMzc0MVoX
DTI2MDgwMzAyNDI0MVowMzExMC8GA1UEAxMoQTUwRDczRTk3QzdFNkZFNEI5NjAw
NzY5NjRCMzUxNEM1NzAxNjRERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMafrLjwVBw1hoIJag2a2oRpSgJq8FPOn+sBxObnRA2/BiAjKjQLR8YCygqM
4a3vmeNLd23dvI8UQ+16cD2ctoGgGcyiwjs1tFvAhJpIhvnG4z1ebh3sPw9JmRlP
q3M/t/KuEFjdkYwzpMbNp0PKSo8mBqRCN3S9fPKOPP7RZN0tCimmC00DNsP0kMhV
pw3FbOe3kNwlu9ebDMRfaLXhA+NeEDkts32m+xouWHqf6+Q6T9Q24Cq3kO+3877P
A2yA1yY8dRdUbb++nLPIdiXV7DBuPqd2Rg09QpaLAm/HSWJVhEzQr/A8USyaZAsI
QXrG59WdF/Z5YoTSuOwXJ0whhccCAwEAAaOCAmwwggJoMB0GA1UdDgQWBBSlDXPp
fH5v5LlgB2lks1FMVwFk3jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU4MzY5LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCB
qDCBpQQCAAEwgZ4DBAFnEi4DBAFnKfoDBAFnS0ADBAFngrYDBAFnhMgDBABnkBUD
BAFnkH4DBAFnkNQDBAFnlOgDBAFnlw4DBAFnmboDBAFnnNgDBAFnnVIDBAFnn9wD
BAFnpfQDBAFnptIDBAFnpwwDBAFnp2wDBAFnqKgwDAMEAWes9gMEAWes+AMEAWet
TAMEAWexaAMEAWe8qgMEAGfgSQMEAXO7HjANBgkqhkiG9w0BAQsFAAOCAQEAla4M
b4CxQaun2OL/n9H9A6hkJ5fRrWX6WlmcMgWVqeAghUustKP85TTAesymeJZcA2Ui
3wc7BJBmOGNUuPuM5Urw9+iNSPrzvLwfnOJ6Vz8wcTWDYDDxJ9rZAiwJkSjq8OT4
pnpMGxFFel9WPC4BnUMIDvfleQ4emvmJIJZupjqVkOQ8FBrYg0PoDaBGeOnvVZws
XqjxVGMBCl8pXOCqPe2dW6Xrzg6Wv7dquMpprYj07XnnSbyxAXUSG7ofj33kNd/d
+ADYSJw1XlUqlDkHgbeyi4JtFv+VZ+pvoNhht1vkzkoK/30/XVVDHFRxrusa1LP9
Oagw1uFpVrD1DYcOaA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 03:58:17 2025 by rpki-client