Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36352e302f32342d3234203d3e20313338303634.roa
File: 3130332e3132322e36352e302f32342d3234203d3e20313338303634.roa (raw, json)
Hash identifier: rEylrvBUJx+n2iYfDFTqRnK7LrdOmXKGbp0zmp959iM=
Subject key identifier: FF:98:F8:70:07:AB:02:53:67:02:C9:D1:D7:67:89:3C:1E:04:CF:22
Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Certificate serial: 16130A93C416EF051BF0268968B31E9B649A7A7E
Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36352e302f32342d3234203d3e20313338303634.roa
Signing time: Wed 31 May 2023 21:51:29 +0000
ROA not before: Wed 31 May 2023 21:46:29 +0000
ROA not after: Wed 29 May 2024 21:51:29 +0000
asID: 138064
IP address blocks: 103.122.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:13:0a:93:c4:16:ef:05:1b:f0:26:89:68:b3:1e:9b:64:9a:7a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Validity
Not Before: May 31 21:46:29 2023 GMT
Not After : May 29 21:51:29 2024 GMT
Subject: CN=FF98F87007AB02536702C9D1D767893C1E04CF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:36:d2:17:b1:f3:0f:fb:b3:59:25:3b:d8:
6a:ef:39:b1:65:a4:4d:bc:3d:3c:49:76:7a:25:6e:
e6:08:a1:27:d5:99:ad:c8:34:2d:a9:ab:86:81:97:
d9:e3:e9:3f:06:db:37:fe:a5:b2:c3:72:ac:5f:d3:
12:2e:81:a0:6e:14:df:c3:39:ea:39:0e:59:fb:19:
49:d2:4f:b7:25:7c:4f:78:89:31:25:ed:c5:a8:05:
78:20:51:99:30:0e:03:02:d5:16:17:67:23:24:1c:
5c:b0:9b:fd:4e:06:75:dd:dc:f0:e9:58:34:89:00:
a2:d3:2f:48:8f:3b:13:fc:10:15:c6:e1:83:75:8a:
45:ea:ae:aa:47:18:5a:32:cf:5a:af:90:38:17:08:
8a:e1:3f:ee:3d:cf:e1:20:5b:6d:9f:37:c9:de:5d:
0a:fe:fd:b0:0d:b8:e5:51:75:3a:42:46:d3:c0:f1:
d6:34:41:de:9c:50:57:7b:b7:1d:5b:79:e8:c0:e3:
2c:65:77:b7:e9:c7:aa:c3:e6:6e:26:b4:d4:d0:5e:
53:19:3b:26:8e:a1:c4:5e:17:ca:fe:dc:07:b5:c3:
4d:b8:04:c9:ec:30:ad:e9:cf:9d:7b:42:6c:d6:2f:
46:c3:6d:3a:f3:3f:f3:c5:2a:b6:89:3c:db:2c:97:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:F8:70:07:AB:02:53:67:02:C9:D1:D7:67:89:3C:1E:04:CF:22
X509v3 Authority Key Identifier:
keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36352e302f32342d3234203d3e20313338303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.65.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5e:cc:01:51:97:2a:19:12:f1:3a:72:8d:94:1b:e4:f3:8d:
c6:7e:94:48:2b:27:11:43:cd:6c:b2:44:cd:35:0f:ab:e1:1b:
69:53:8d:45:92:75:60:1a:77:1a:e2:2e:eb:a3:eb:cf:3c:4d:
7b:29:cb:b7:33:a1:d4:ab:19:43:50:b4:e9:bc:eb:f8:c5:16:
bd:ec:8e:54:c8:8a:b4:ee:63:89:80:76:f7:2a:c4:e5:49:bf:
b8:43:38:cf:42:88:04:c4:b2:e0:f5:28:3f:26:54:b8:4b:84:
74:0b:58:70:7c:d7:35:5b:4b:c8:61:47:b6:df:c0:da:2d:d6:
1a:a3:85:4b:91:34:8f:bb:e1:a1:b1:bf:8f:f5:99:2f:97:e9:
23:70:eb:cd:5d:ab:2c:a8:1e:b1:b9:48:3a:38:eb:b5:52:c0:
82:c3:c4:22:10:1e:ed:1d:c3:64:7f:81:ae:10:4d:64:ba:2d:
a3:2c:8f:2f:19:c9:d5:5c:48:31:6c:1f:71:3d:21:db:a0:8e:
22:ea:c2:42:b0:9a:02:bd:49:a7:a9:47:d6:4d:af:b9:c8:3c:
b5:4e:d3:c8:2a:64:18:ad:3c:24:e9:6b:38:e4:6c:da:fa:5c:
aa:70:23:02:b1:9b:71:6a:0f:56:34:df:f8:e6:16:0f:b5:18:
81:27:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:51:48 2025 by rpki-client