Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58369.roa
File: AS58369.roa (raw, json)
Hash identifier: sz8FuTKIeUIjXMI+LZ8so90xKnuByoO/KiiQ3xi600U=
Subject key identifier: E3:86:6C:AF:60:A4:64:FB:FA:8D:1D:7E:2C:89:A4:E0:50:AE:52:B1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7160A2655095F3CA82E970E0AA3C226510CAE287
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58369.roa
Signing time: Wed 19 Feb 2025 08:51:17 +0000
ROA not before: Wed 19 Feb 2025 08:46:17 +0000
ROA not after: Wed 18 Feb 2026 08:51:17 +0000
asID: 58369
IP address blocks: 103.18.46.0/23 maxlen: 24
103.41.250.0/23 maxlen: 24
103.75.64.0/23 maxlen: 24
103.130.182.0/23 maxlen: 24
103.132.200.0/23 maxlen: 24
103.144.21.0/24 maxlen: 24
103.144.126.0/23 maxlen: 24
103.144.212.0/23 maxlen: 24
103.148.232.0/23 maxlen: 24
103.151.14.0/23 maxlen: 24
103.153.186.0/23 maxlen: 24
103.156.216.0/23 maxlen: 24
103.157.82.0/23 maxlen: 24
103.159.220.0/23 maxlen: 24
103.165.244.0/23 maxlen: 24
103.166.210.0/23 maxlen: 24
103.167.12.0/23 maxlen: 24
103.167.108.0/23 maxlen: 24
103.167.108.0/24 maxlen: 24
103.167.109.0/24 maxlen: 24
103.168.168.0/23 maxlen: 24
103.172.246.0/23 maxlen: 24
103.172.248.0/23 maxlen: 24
103.173.76.0/23 maxlen: 24
103.188.170.0/23 maxlen: 24
103.224.73.0/24 maxlen: 24
115.187.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 20:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:60:a2:65:50:95:f3:ca:82:e9:70:e0:aa:3c:22:65:10:ca:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 19 08:46:17 2025 GMT
Not After : Feb 18 08:51:17 2026 GMT
Subject: CN=E3866CAF60A464FBFA8D1D7E2C89A4E050AE52B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:46:54:21:75:67:37:f9:03:8d:77:a9:d1:
82:6f:c8:de:ce:f4:0f:d4:15:81:8e:b2:26:df:8b:
fd:a5:74:9b:66:7c:12:99:f7:67:88:00:18:c3:96:
16:4e:26:f7:ed:ab:fb:00:47:81:89:14:45:85:5b:
3a:75:7f:b7:22:8d:8c:c4:da:47:cd:35:e2:39:e9:
c0:c4:9b:fc:e8:e4:b7:24:b1:b8:ca:5a:6e:73:1f:
cf:95:ab:a6:d8:5b:a8:73:1c:97:07:88:8c:c0:be:
46:19:62:c8:01:bd:69:27:9b:b9:9b:c6:25:1a:0a:
63:f9:b1:c8:0f:56:dc:9e:15:64:99:08:bd:9c:a4:
de:50:4c:d5:8b:54:2c:91:cd:d8:2f:04:d3:80:c2:
7d:df:09:cd:a7:61:3b:17:4b:bb:a8:fa:a0:99:54:
8a:77:ac:d1:e2:ef:cf:2a:0e:99:f0:73:d8:bb:fc:
fb:8b:ea:d1:88:09:63:80:db:3e:71:03:72:87:e3:
f4:54:f7:a0:2c:1a:f8:db:3e:53:61:b1:a6:98:07:
ec:47:fc:bc:54:c3:69:93:36:53:66:f3:0f:c4:c3:
bb:a2:b3:2e:c2:1a:a7:a3:58:1e:de:90:08:ff:fc:
c2:e8:4e:60:32:45:b9:ff:95:11:78:9f:43:b2:8f:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:6C:AF:60:A4:64:FB:FA:8D:1D:7E:2C:89:A4:E0:50:AE:52:B1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.46.0/23
103.41.250.0/23
103.75.64.0/23
103.130.182.0/23
103.132.200.0/23
103.144.21.0/24
103.144.126.0/23
103.144.212.0/23
103.148.232.0/23
103.151.14.0/23
103.153.186.0/23
103.156.216.0/23
103.157.82.0/23
103.159.220.0/23
103.165.244.0/23
103.166.210.0/23
103.167.12.0/23
103.167.108.0/23
103.168.168.0/23
103.172.246.0-103.172.249.255
103.173.76.0/23
103.188.170.0/23
103.224.73.0/24
115.187.30.0/23
Signature Algorithm: sha256WithRSAEncryption
37:4a:b7:f7:f1:ff:21:df:0d:c7:cd:ac:58:48:0b:3e:ef:07:
2a:20:84:06:4a:ad:9b:0e:09:1e:cd:8f:74:44:c6:ab:5a:48:
cd:09:89:40:46:fd:8d:9a:d0:e8:29:f6:47:1b:53:1a:4b:e7:
d8:02:ef:f6:45:85:af:f9:f6:bd:40:de:4c:48:14:5b:84:35:
23:48:c1:e1:8b:83:2a:6b:0a:89:9b:78:00:d0:18:a1:a4:7e:
a9:b8:e8:4b:53:6f:ff:a7:73:cd:f6:35:43:43:be:28:58:db:
fc:47:77:75:b9:2d:8f:36:85:24:0e:9f:e5:a9:35:35:5f:0e:
95:52:2f:3e:f9:47:5a:a1:4d:d8:18:e1:ad:c6:c7:cc:7c:0e:
25:8d:eb:b6:8b:7a:30:43:53:f2:42:c3:c3:28:c5:1b:f8:5d:
e6:b1:06:80:cb:4b:e1:32:9d:93:f4:7e:3f:66:f8:3f:7f:87:
0c:37:ca:68:07:0f:43:cb:6c:03:5c:04:c5:4e:b3:26:d0:c8:
3e:3b:f4:da:b0:ed:16:52:59:60:a1:f1:84:2e:b7:5f:5f:bc:
64:31:17:8c:62:d2:e1:cf:d9:1e:64:f5:11:35:5b:30:41:aa:
05:0b:40:e5:69:ad:a6:b6:c9:6b:ce:59:1e:b0:2d:a4:06:c6:
17:5b:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net