Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9341.roa
File: AS9341.roa (raw, json)
Hash identifier: FHsU42hsA8CiZN0ezplXVPk4SfgPjpLgvAThZzRdK5Q=
Subject key identifier: 40:42:50:13:36:77:0A:6D:B5:AD:B3:C8:60:D0:BB:F9:4A:9F:14:43
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 749A8B9120A3EB7A1082B8C84B4608017A023B2E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9341.roa
Signing time: Mon 21 Apr 2025 04:33:34 +0000
ROA not before: Mon 21 Apr 2025 04:28:34 +0000
ROA not after: Mon 20 Apr 2026 04:33:34 +0000
asID: 9341
IP address blocks: 43.240.80.0/22 maxlen: 24
103.17.172.0/22 maxlen: 24
103.17.172.0/23 maxlen: 24
103.17.174.0/23 maxlen: 24
103.49.188.0/22 maxlen: 24
103.55.220.0/22 maxlen: 24
103.76.168.0/22 maxlen: 24
103.78.72.0/22 maxlen: 24
103.88.196.0/22 maxlen: 24
103.88.200.0/22 maxlen: 24
103.88.204.0/22 maxlen: 24
103.88.208.0/22 maxlen: 24
103.88.244.0/22 maxlen: 24
103.88.248.0/22 maxlen: 24
103.88.252.0/22 maxlen: 24
103.89.32.0/22 maxlen: 24
103.91.14.0/23 maxlen: 24
103.101.22.0/23 maxlen: 24
103.142.182.0/23 maxlen: 24
103.145.150.0/24 maxlen: 24
103.181.244.0/23 maxlen: 24
103.210.230.0/23 maxlen: 24
103.215.178.0/23 maxlen: 24
103.229.164.0/22 maxlen: 24
103.238.138.0/23 maxlen: 24
160.202.40.0/22 maxlen: 24
202.46.64.0/19 maxlen: 24
202.57.18.0/24 maxlen: 24
202.57.28.0/22 maxlen: 24
202.74.43.0/24 maxlen: 24
202.74.72.0/23 maxlen: 24
202.146.48.0/20 maxlen: 24
202.154.176.0/21 maxlen: 24
202.164.216.0/22 maxlen: 24
202.171.236.0/24 maxlen: 24
203.171.216.0/24 maxlen: 24
203.171.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 20:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9a:8b:91:20:a3:eb:7a:10:82:b8:c8:4b:46:08:01:7a:02:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 21 04:28:34 2025 GMT
Not After : Apr 20 04:33:34 2026 GMT
Subject: CN=4042501336770A6DB5ADB3C860D0BBF94A9F1443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:2d:e3:bd:b8:af:12:bb:75:50:59:f7:53:
d5:2b:ce:bc:b1:b5:ea:41:4c:7a:19:07:50:ec:c5:
48:e0:09:b3:b7:52:21:b1:b8:0f:cc:95:c2:e3:f8:
ef:00:9b:20:3d:25:6f:35:a9:20:2b:6c:d9:5b:d5:
1e:0e:0f:06:68:f8:79:f2:d0:11:f4:b9:7e:f5:a7:
76:3d:02:7e:f0:e9:e8:ba:64:31:43:6a:9b:89:6b:
ac:b6:f6:ef:60:7e:97:69:aa:bf:75:1a:ba:0b:d1:
33:43:93:d6:7a:e9:47:f3:87:74:06:3a:b7:bc:2f:
92:0e:c0:0b:81:a6:ab:78:df:0f:ba:cf:6e:e3:d5:
83:c8:4f:25:ba:d5:e8:5f:4c:ff:bf:19:13:56:1e:
c1:fc:3f:4e:be:60:4e:a3:9d:de:79:56:67:f9:60:
86:f2:d1:01:5e:28:76:94:79:f2:59:73:ae:43:0c:
81:df:ff:da:80:e3:a1:62:df:1d:da:50:50:dc:14:
08:9d:a5:b7:84:01:70:21:45:b7:7c:2e:59:90:a5:
62:69:f5:5f:8c:e7:c5:21:ce:8d:a2:41:2f:32:fe:
05:77:5c:5e:39:8f:80:57:53:90:42:b2:98:81:32:
1d:49:02:00:66:4b:4a:64:e3:63:9e:59:58:c2:27:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:42:50:13:36:77:0A:6D:B5:AD:B3:C8:60:D0:BB:F9:4A:9F:14:43
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.80.0/22
103.17.172.0/22
103.49.188.0/22
103.55.220.0/22
103.76.168.0/22
103.78.72.0/22
103.88.196.0-103.88.211.255
103.88.244.0-103.88.255.255
103.89.32.0/22
103.91.14.0/23
103.101.22.0/23
103.142.182.0/23
103.145.150.0/24
103.181.244.0/23
103.210.230.0/23
103.215.178.0/23
103.229.164.0/22
103.238.138.0/23
160.202.40.0/22
202.46.64.0/19
202.57.18.0/24
202.57.28.0/22
202.74.43.0/24
202.74.72.0/23
202.146.48.0/20
202.154.176.0/21
202.164.216.0/22
202.171.236.0/24
203.171.216.0/23
Signature Algorithm: sha256WithRSAEncryption
06:30:0d:85:6c:08:9b:c1:f4:54:cc:25:a5:7c:c2:aa:47:92:
ad:80:a9:d1:d3:ad:49:a3:4e:9c:69:e5:7a:03:e9:5f:10:2a:
19:7a:18:89:ac:23:4b:a8:15:14:de:34:25:f4:fd:94:72:23:
de:c8:9d:67:8c:06:0d:75:7b:d4:e4:74:ff:f5:b7:9b:dc:36:
c6:3e:29:55:f2:d6:a0:02:04:2c:fb:d8:1f:80:15:f5:f5:b6:
42:e1:84:59:9c:01:ef:f6:a2:59:2f:7b:06:05:db:64:5f:5c:
19:21:cc:75:06:9a:0f:99:c3:6c:23:06:53:9c:68:0d:84:04:
3e:43:d3:98:83:d4:a1:fb:b7:d4:f1:4d:69:a3:d4:37:c0:cf:
ac:2e:10:00:77:8e:79:9b:72:6d:b8:97:d1:3e:34:53:8c:a3:
fd:66:68:72:dd:23:40:6f:1e:89:b9:c6:69:7f:52:fe:da:30:
f7:50:8f:ca:75:d7:2b:11:6e:17:96:92:a9:ad:1f:c1:66:0e:
53:19:67:25:de:3e:8a:f9:a1:62:36:70:8a:2f:34:e1:ec:86:
fe:a4:8c:6a:24:63:8c:dd:12:10:80:94:2c:ea:6a:58:5d:22:
6f:3b:94:c6:bf:b1:e6:11:3b:40:e5:a1:ce:f4:da:62:f5:32:
ca:b7:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:21 2025 by rpki-client on console.sobornost.net