Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
File: AS131111.roa (raw, json)
Hash identifier: MEp98khmB85mtckSVxECtXfdsesR4dsAK5/OWD/Lyw0=
Subject key identifier: 26:58:12:58:38:F0:50:F3:0D:E9:8E:4A:21:EE:F2:19:C3:D6:3B:08
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 01FED444927E9E05F92AC0A0DF35AD264DFEA11D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
Signing time: Sat 12 Apr 2025 01:00:00 +0000
ROA not before: Sat 12 Apr 2025 00:55:00 +0000
ROA not after: Sat 11 Apr 2026 01:00:00 +0000
asID: 131111
IP address blocks: 103.75.24.0/22 maxlen: 24
103.75.208.0/22 maxlen: 24
103.76.24.0/22 maxlen: 24
103.78.80.0/22 maxlen: 24
103.78.96.0/22 maxlen: 24
103.78.212.0/22 maxlen: 24
103.81.132.0/22 maxlen: 24
103.82.12.0/22 maxlen: 24
103.83.4.0/22 maxlen: 24
103.83.92.0/22 maxlen: 24
103.85.60.0/22 maxlen: 24
103.85.64.0/22 maxlen: 24
103.122.32.0/24 maxlen: 24
103.122.33.0/24 maxlen: 24
103.122.34.0/24 maxlen: 24
103.122.35.0/24 maxlen: 24
103.123.64.0/24 maxlen: 24
103.123.65.0/24 maxlen: 24
103.123.66.0/24 maxlen: 24
103.123.67.0/24 maxlen: 24
103.123.68.0/24 maxlen: 24
103.123.69.0/24 maxlen: 24
103.123.70.0/24 maxlen: 24
103.123.71.0/24 maxlen: 24
103.123.248.0/24 maxlen: 24
103.123.249.0/24 maxlen: 24
103.123.250.0/24 maxlen: 24
103.123.251.0/24 maxlen: 24
103.124.112.0/24 maxlen: 24
103.124.113.0/24 maxlen: 24
103.124.114.0/24 maxlen: 24
103.124.115.0/24 maxlen: 24
103.124.118.0/24 maxlen: 24
103.124.119.0/24 maxlen: 24
103.125.208.0/24 maxlen: 24
103.125.209.0/24 maxlen: 24
103.125.210.0/24 maxlen: 24
103.125.211.0/24 maxlen: 24
103.135.212.0/24 maxlen: 24
103.135.213.0/24 maxlen: 24
103.135.214.0/24 maxlen: 24
103.135.215.0/24 maxlen: 24
103.135.220.0/22 maxlen: 24
103.135.222.0/24 maxlen: 24
103.135.223.0/24 maxlen: 24
103.136.56.0/24 maxlen: 24
103.136.57.0/24 maxlen: 24
103.136.58.0/24 maxlen: 24
103.136.59.0/24 maxlen: 24
103.154.78.0/24 maxlen: 24
103.154.79.0/24 maxlen: 24
103.154.80.0/24 maxlen: 24
103.154.81.0/24 maxlen: 24
103.154.82.0/24 maxlen: 24
103.154.83.0/24 maxlen: 24
103.154.84.0/24 maxlen: 24
103.154.85.0/24 maxlen: 24
103.154.86.0/24 maxlen: 24
103.154.87.0/24 maxlen: 24
103.154.88.0/24 maxlen: 24
103.154.89.0/24 maxlen: 24
103.154.90.0/24 maxlen: 24
103.154.91.0/24 maxlen: 24
103.154.92.0/24 maxlen: 24
103.154.93.0/24 maxlen: 24
103.154.108.0/24 maxlen: 24
103.154.109.0/24 maxlen: 24
103.154.110.0/24 maxlen: 24
103.154.111.0/24 maxlen: 24
103.154.112.0/24 maxlen: 24
103.154.113.0/24 maxlen: 24
103.154.114.0/24 maxlen: 24
103.154.115.0/24 maxlen: 24
103.154.116.0/24 maxlen: 24
103.154.117.0/24 maxlen: 24
103.154.118.0/24 maxlen: 24
103.154.119.0/24 maxlen: 24
103.154.120.0/24 maxlen: 24
103.154.121.0/24 maxlen: 24
103.154.122.0/24 maxlen: 24
103.154.123.0/24 maxlen: 24
103.154.124.0/24 maxlen: 24
103.154.125.0/24 maxlen: 24
103.154.126.0/24 maxlen: 24
103.154.127.0/24 maxlen: 24
103.154.128.0/24 maxlen: 24
103.154.129.0/24 maxlen: 24
103.154.130.0/24 maxlen: 24
103.154.131.0/24 maxlen: 24
103.154.134.0/24 maxlen: 24
103.154.135.0/24 maxlen: 24
103.154.136.0/24 maxlen: 24
103.154.137.0/24 maxlen: 24
103.154.138.0/24 maxlen: 24
103.154.139.0/24 maxlen: 24
103.154.140.0/24 maxlen: 24
103.154.141.0/24 maxlen: 24
103.154.142.0/24 maxlen: 24
103.154.143.0/24 maxlen: 24
103.154.144.0/24 maxlen: 24
103.154.145.0/24 maxlen: 24
103.154.146.0/24 maxlen: 24
103.154.147.0/24 maxlen: 24
103.154.148.0/24 maxlen: 24
103.154.149.0/24 maxlen: 24
103.154.150.0/24 maxlen: 24
103.154.151.0/24 maxlen: 24
103.154.152.0/24 maxlen: 24
103.154.153.0/24 maxlen: 24
103.154.210.0/24 maxlen: 24
103.154.211.0/24 maxlen: 24
103.154.212.0/24 maxlen: 24
103.154.213.0/24 maxlen: 24
103.154.214.0/24 maxlen: 24
103.154.215.0/24 maxlen: 24
103.154.216.0/24 maxlen: 24
103.154.217.0/24 maxlen: 24
103.154.218.0/24 maxlen: 24
103.154.219.0/24 maxlen: 24
103.154.220.0/24 maxlen: 24
103.154.221.0/24 maxlen: 24
103.154.222.0/24 maxlen: 24
103.154.223.0/24 maxlen: 24
103.154.224.0/24 maxlen: 24
103.154.225.0/24 maxlen: 24
103.154.226.0/24 maxlen: 24
103.154.227.0/24 maxlen: 24
103.154.228.0/24 maxlen: 24
103.154.229.0/24 maxlen: 24
119.235.208.0/20 maxlen: 20
202.150.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 20:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fe:d4:44:92:7e:9e:05:f9:2a:c0:a0:df:35:ad:26:4d:fe:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 12 00:55:00 2025 GMT
Not After : Apr 11 01:00:00 2026 GMT
Subject: CN=2658125838F050F30DE98E4A21EEF219C3D63B08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:80:a2:5b:1d:39:2d:49:66:84:00:4c:02:
a9:fa:83:23:71:67:fb:8e:1a:9e:58:42:bc:c0:07:
d9:b9:d8:37:38:d3:87:0a:61:d5:72:24:8d:c3:9c:
c2:f4:75:24:9c:9e:9f:5f:fe:7d:62:e9:70:a2:8f:
18:9d:54:01:42:38:4c:db:ed:83:9b:ff:29:76:74:
4b:8f:a7:1f:13:7a:4f:4a:11:80:00:8e:2f:3e:53:
a4:18:aa:7b:e1:b2:b7:cc:2b:bd:90:f7:af:61:37:
77:68:73:5e:99:93:b1:70:fe:ee:a0:81:8f:7a:36:
5c:d9:4d:c0:bb:bc:e5:6a:08:49:95:2b:00:ec:50:
28:d0:87:08:da:f3:1e:8e:e1:35:b5:87:ea:52:97:
5c:d3:71:81:d1:e1:12:9f:72:ca:d4:c5:be:e3:c1:
5f:72:eb:fb:fc:ea:59:b3:60:02:e7:e1:bf:cf:dd:
dd:bd:75:96:56:4e:f8:61:16:c2:49:a2:b3:a8:89:
1b:28:2f:e3:ed:00:27:68:d1:a2:a3:03:72:a5:78:
ac:22:2a:3f:85:97:f1:41:a8:f7:0f:f4:8d:2b:46:
50:75:88:db:e4:b1:40:21:de:6d:c9:b0:f1:55:02:
6a:2e:7e:16:28:34:58:b5:a1:d9:55:88:01:17:c1:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:12:58:38:F0:50:F3:0D:E9:8E:4A:21:EE:F2:19:C3:D6:3B:08
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.24.0/22
103.75.208.0/22
103.76.24.0/22
103.78.80.0/22
103.78.96.0/22
103.78.212.0/22
103.81.132.0/22
103.82.12.0/22
103.83.4.0/22
103.83.92.0/22
103.85.60.0-103.85.67.255
103.122.32.0/22
103.123.64.0/21
103.123.248.0/22
103.124.112.0/22
103.124.118.0/23
103.125.208.0/22
103.135.212.0/22
103.135.220.0/22
103.136.56.0/22
103.154.78.0-103.154.93.255
103.154.108.0-103.154.131.255
103.154.134.0-103.154.153.255
103.154.210.0-103.154.229.255
119.235.208.0/20
202.150.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:f5:a4:b3:1f:8d:15:80:77:a0:7d:b4:b7:5e:be:c7:0a:0c:
27:dc:dc:f5:ad:ab:1f:11:65:54:71:0e:4a:be:bc:d8:8e:a1:
93:ee:56:8c:25:b7:de:4f:41:7f:2e:a2:cb:b7:00:c8:37:dc:
e5:d2:6a:dc:e9:db:92:2c:0c:0e:c7:c1:cc:cb:bc:1e:7e:81:
1a:2e:c9:cf:a4:d2:1d:ab:8a:16:3a:25:19:7f:6d:d9:8e:78:
04:6f:c5:03:f6:7c:7d:cf:60:3c:7d:82:53:96:00:f1:49:cb:
58:3e:19:d8:d2:d9:cf:f3:ea:43:2e:1c:43:f9:85:3c:d1:b4:
42:5e:8d:f8:22:88:bc:26:de:0f:a6:78:26:77:89:23:b3:1d:
df:b7:95:29:de:c9:10:e4:8e:2f:be:fc:0e:18:1c:4c:a4:87:
56:fb:e6:b3:5c:38:8d:51:46:e3:89:ab:35:96:d7:8b:f0:1b:
52:ca:7b:de:9e:35:f4:9e:c3:81:bc:a1:ec:9c:e1:4d:69:10:
ff:a0:dd:0d:d5:2b:88:9e:53:a4:a4:0e:38:3c:b6:ee:0b:7e:
2a:b7:ce:58:33:56:17:fd:6f:98:e3:30:85:6f:b9:5a:c5:f7:
8a:6d:5a:ed:f4:64:08:c1:7f:18:af:37:86:99:b1:22:08:55:
d6:c3:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:17 2025 by rpki-client on console.sobornost.net