Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38513.roa
File: AS38513.roa (raw, json)
Hash identifier: m7QRNJh9L0v5BS1O0MUuVG/XhaVR8/DUC06nO0FnU+M=
Subject key identifier: 05:43:70:15:17:E9:CA:3F:72:E6:0F:55:21:B1:C9:85:60:22:13:C1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 725E52183AE4DDC33C26FDE0443342A48DAC799A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38513.roa
Signing time: Wed 18 Jun 2025 07:00:00 +0000
ROA not before: Wed 18 Jun 2025 06:55:00 +0000
ROA not after: Wed 17 Jun 2026 07:00:00 +0000
asID: 38513
IP address blocks: 103.42.244.0/23 maxlen: 24
103.67.40.0/23 maxlen: 24
103.67.42.0/23 maxlen: 24
103.125.90.0/23 maxlen: 24
103.125.100.0/23 maxlen: 24
103.125.102.0/23 maxlen: 24
103.190.214.0/23 maxlen: 24
103.191.14.0/23 maxlen: 24
103.191.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Jul 2025 07:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5e:52:18:3a:e4:dd:c3:3c:26:fd:e0:44:33:42:a4:8d:ac:79:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 18 06:55:00 2025 GMT
Not After : Jun 17 07:00:00 2026 GMT
Subject: CN=0543701517E9CA3F72E60F5521B1C985602213C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:0a:dc:0c:3d:c3:ee:85:30:5f:fe:b2:ea:
fd:59:17:75:e9:e9:a2:88:c1:c8:7d:92:74:d4:c6:
4f:31:7a:25:ca:9d:f2:2e:d0:d6:ee:72:54:16:bb:
27:6a:cc:ee:1e:2c:b6:0b:75:6c:3e:f2:ef:89:18:
2e:4a:3a:80:82:10:54:c8:6b:18:5e:ff:01:35:f5:
3e:8a:cc:3b:95:8f:b1:d5:0e:19:16:90:bd:07:cf:
06:9b:ba:c2:f0:dd:2b:c0:7e:d8:ad:7c:8a:42:00:
af:65:6a:2d:fd:e2:a7:f8:6a:04:22:10:83:a9:44:
f6:9b:2b:67:e8:b9:11:b9:d5:d5:d3:4d:88:d3:d6:
1a:26:9f:3f:ba:29:fd:0b:8e:51:05:ff:51:da:a7:
34:5a:4f:13:0f:b6:3e:34:11:49:8f:50:cb:f9:e9:
26:b4:0a:0c:a4:70:da:1e:f2:f9:22:1c:bd:c1:06:
f7:c6:70:39:91:71:85:01:1e:c7:bc:75:d0:e6:5b:
64:cc:83:ed:6d:3e:7e:f5:5d:27:38:9e:27:aa:3f:
0c:cc:12:c9:52:42:52:f8:1a:c0:ba:0f:09:9e:eb:
98:30:79:b5:3f:ff:3a:78:11:01:b6:62:5e:0a:d9:
51:55:3b:c8:d9:fa:a7:50:02:6d:7d:f2:ae:60:ac:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:70:15:17:E9:CA:3F:72:E6:0F:55:21:B1:C9:85:60:22:13:C1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.244.0/23
103.67.40.0/22
103.125.90.0/23
103.125.100.0/22
103.190.214.0/23
103.191.14.0-103.191.17.255
Signature Algorithm: sha256WithRSAEncryption
2c:b3:ec:e3:f7:f7:3f:c6:9d:3e:36:fd:4a:be:e1:25:23:e4:
8e:15:dc:42:bf:02:d8:08:83:07:db:ef:df:13:a2:e5:e5:5d:
c5:31:09:c0:24:cb:12:ac:4d:d1:54:90:25:5b:61:6d:13:fd:
a2:ab:81:3e:82:57:22:64:27:bf:7e:4d:21:18:80:b7:55:b6:
b9:21:9e:c1:a2:71:5c:3f:7c:1a:99:79:94:a2:54:8c:40:40:
fa:ef:c6:8b:b9:1e:78:6d:b5:d7:93:c6:14:9d:ae:2a:6c:f5:
91:94:98:33:08:c1:20:77:85:55:64:6f:10:15:22:a1:9f:83:
f7:d0:96:25:6b:42:9c:da:8c:c2:ba:b2:9a:ca:e7:60:8e:63:
c1:b1:f2:4d:9b:bf:b8:c0:42:cc:85:64:7d:9b:a5:e8:f8:d8:
35:74:de:54:7d:be:35:fe:ee:45:38:34:fb:a8:ca:53:85:69:
75:a1:46:dc:e0:40:c8:98:e5:ea:07:61:df:c1:72:2b:58:78:
49:f2:61:d0:c5:79:a1:88:78:ba:3f:fa:d1:be:61:3d:a1:68:
31:00:d8:f7:57:b2:40:9c:63:9c:87:81:22:0f:bb:35:1b:e4:
ce:be:d7:86:26:f2:12:f1:9d:0d:78:66:35:79:7f:08:32:94:
c6:8d:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:06:30 2025 by rpki-client