Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
File: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=
Subject key identifier: 9D:01:89:AC:69:DE:A0:96:56:84:7E:5D:EF:3A:EA:87:92:7A:FB:7F
Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Certificate serial: 41314DDD8F072E2C100DF2A564E68318E2091A4E
Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
Signing time: Wed 09 Apr 2025 06:00:00 +0000
ROA not before: Wed 09 Apr 2025 05:55:00 +0000
ROA not after: Wed 08 Apr 2026 06:00:00 +0000
asID: 9341
IP address blocks: 103.190.47.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:31:4d:dd:8f:07:2e:2c:10:0d:f2:a5:64:e6:83:18:e2:09:1a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Validity
Not Before: Apr 9 05:55:00 2025 GMT
Not After : Apr 8 06:00:00 2026 GMT
Subject: CN=9D0189AC69DEA09656847E5DEF3AEA87927AFB7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:21:b8:21:3e:b9:5c:0d:aa:03:c7:40:8b:
26:5f:ce:c1:61:49:f6:ed:c3:03:b1:ae:be:d0:f0:
9c:be:d5:33:36:87:61:a8:0b:11:f2:95:45:c0:85:
54:25:dc:e9:d8:49:81:ae:b5:b1:e8:83:19:ef:63:
87:6b:0b:10:05:c2:4d:82:b2:67:8e:d4:c0:ed:a8:
db:3c:93:5b:3b:32:29:97:71:4d:05:e5:98:46:99:
d2:46:55:00:a0:aa:6f:4b:10:34:39:c6:63:cd:95:
67:54:53:75:9f:a3:30:11:af:d8:56:9e:2e:ca:af:
ea:b0:6a:d0:f9:98:89:1b:60:e8:4a:e4:18:2b:78:
52:87:04:43:b0:4f:55:99:60:50:49:29:da:82:77:
44:9b:d2:97:0e:f4:ac:ec:68:47:58:a7:fb:21:6b:
c4:94:f4:3f:57:7c:0d:dc:76:d7:2b:c2:a9:d7:51:
76:ef:08:ce:e1:eb:67:40:3e:97:99:90:c2:42:a0:
56:c3:08:59:a9:fb:15:ba:2a:b6:e0:08:66:c2:7a:
9d:ac:e4:b3:12:3f:05:a8:a4:69:27:83:76:d7:2a:
2e:3c:02:8a:7d:da:c2:0d:0d:c0:7b:3b:c8:4d:3a:
f9:71:c4:7f:e8:7b:6f:1d:7d:cc:66:5a:b4:73:03:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:01:89:AC:69:DE:A0:96:56:84:7E:5D:EF:3A:EA:87:92:7A:FB:7F
X509v3 Authority Key Identifier:
keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.47.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6b:82:ba:c1:9a:d1:26:23:c6:7f:c2:b3:82:64:60:6c:75:
c5:ad:ed:d2:d0:42:d4:d9:a8:eb:63:2b:38:15:19:2d:14:ff:
93:8d:9e:80:4b:38:12:1d:89:97:9c:be:a7:8c:e0:8b:7c:89:
c7:f1:71:92:c7:75:df:fb:c5:09:a8:56:41:ff:dd:14:a6:fd:
18:36:c8:ad:03:58:a4:17:78:f1:0f:79:e9:be:4f:81:98:b2:
ab:ce:d9:31:09:a6:8a:50:82:02:0f:29:a9:e8:56:4a:3c:a2:
f4:a5:4a:b3:44:d4:84:27:cf:0c:fa:9b:25:fd:83:99:2b:e2:
07:b7:80:6f:89:13:3a:71:9d:ff:d9:93:e5:d7:9f:62:90:71:
50:c5:c4:a0:dd:6b:89:54:8e:c9:59:6f:c3:66:90:ee:2d:cf:
1d:0c:e2:77:cc:b1:93:90:fc:b8:5a:d8:f8:31:b1:18:7e:31:
e0:1b:5f:2d:20:6c:76:94:b9:34:c9:c9:55:54:02:47:66:c6:
84:92:3f:1b:c8:91:d8:6d:b9:07:2a:d7:71:9f:d9:5c:21:bb:
dc:f6:39:fe:19:2e:00:6c:ea:18:ba:c2:fb:1f:ee:da:47:6b:
dd:71:f6:f3:cd:ba:67:54:da:74:8b:02:7b:04:5f:ff:98:f4:
5d:10:e1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:25:17 2025 by rpki-client