Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
File: AS45727.roa (raw, json)
Hash identifier: WtzZsRajQENbntoDwh+5W8jtNxjMhFH9EGb/515dG6k=
Subject key identifier: 09:4F:9F:48:AB:C4:C6:FC:53:AD:D0:62:60:79:90:84:96:6B:AD:67
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2FC9E17177127B3DAB8995C02B8EF29342AFAC66
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
Signing time: Mon 05 May 2025 07:11:20 +0000
ROA not before: Mon 05 May 2025 07:06:20 +0000
ROA not after: Mon 04 May 2026 07:11:20 +0000
asID: 45727
IP address blocks: 103.10.66.0/24 maxlen: 24
114.142.172.0/24 maxlen: 24
114.142.173.0/24 maxlen: 24
116.206.10.0/24 maxlen: 24
116.206.11.0/24 maxlen: 24
116.206.12.0/24 maxlen: 24
116.206.13.0/24 maxlen: 24
116.206.14.0/24 maxlen: 24
116.206.15.0/24 maxlen: 24
116.206.28.0/24 maxlen: 24
116.206.29.0/24 maxlen: 24
116.206.34.0/24 maxlen: 24
116.206.40.0/24 maxlen: 24
116.206.41.0/24 maxlen: 24
180.214.232.0/24 maxlen: 24
180.214.233.0/24 maxlen: 24
180.214.234.0/24 maxlen: 24
202.67.40.0/24 maxlen: 24
202.67.41.0/24 maxlen: 24
202.67.42.0/24 maxlen: 24
202.67.43.0/24 maxlen: 24
202.67.46.0/24 maxlen: 24
223.255.225.0/24 maxlen: 24
223.255.229.0/24 maxlen: 24
223.255.230.0/24 maxlen: 24
2400:8b00:100::/44 maxlen: 44
2400:8b00:110::/44 maxlen: 44
2400:8b00:120::/44 maxlen: 44
2400:8b00:130::/44 maxlen: 44
2400:8b00:200::/44 maxlen: 44
2400:8b00:210::/44 maxlen: 44
2400:8b00:220::/44 maxlen: 44
2400:8b00:230::/44 maxlen: 44
2400:8b00:500::/44 maxlen: 44
2400:8b00:510::/44 maxlen: 44
2400:8b00:520::/44 maxlen: 44
2400:8b00:530::/44 maxlen: 44
2400:8b00:800::/44 maxlen: 44
2400:8b00:810::/44 maxlen: 44
2400:8b00:820::/44 maxlen: 44
2400:8b00:830::/44 maxlen: 44
2400:8b00:a80::/44 maxlen: 44
2400:8b00:a90::/44 maxlen: 44
2400:8b00:aa0::/44 maxlen: 44
2400:8b00:ab0::/44 maxlen: 44
2400:8b00:d90::/44 maxlen: 44
2400:8b00:da0::/44 maxlen: 44
2400:8b00:db0::/44 maxlen: 44
2400:8b00:1000::/44 maxlen: 44
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 May 2025 15:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c9:e1:71:77:12:7b:3d:ab:89:95:c0:2b:8e:f2:93:42:af:ac:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: May 5 07:06:20 2025 GMT
Not After : May 4 07:11:20 2026 GMT
Subject: CN=094F9F48ABC4C6FC53ADD06260799084966BAD67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:2b:d6:e6:23:05:2d:50:b5:63:3d:b6:6a:
df:5d:28:55:ab:6d:ac:22:dd:63:35:1c:ae:94:2d:
fa:60:54:9b:11:a3:e0:25:53:6f:dc:3d:09:c3:5d:
7b:91:d2:fe:6f:79:af:8c:6e:62:3f:48:87:a8:c7:
8f:b7:1f:f1:89:53:d3:09:8b:99:6f:c6:75:42:e4:
4d:f7:9a:20:ca:57:08:77:28:d5:28:40:fe:3b:a8:
6e:66:52:da:54:d0:27:5f:5e:8e:9c:22:74:66:65:
98:b3:fb:ad:62:7a:cc:58:9c:ad:f7:fa:06:41:56:
a4:8c:a8:56:d7:8c:d3:69:52:34:54:ab:7f:6e:ef:
1f:89:fd:1f:fd:fa:36:03:db:4c:6a:ab:c9:6a:ec:
ee:47:2b:45:ed:fa:6b:be:7c:17:30:4c:fe:ee:26:
73:d1:a6:bb:62:b5:09:7a:99:2a:48:42:86:dc:aa:
02:21:42:02:29:03:12:c7:92:d2:ea:5a:a0:6a:2b:
19:fb:f2:11:e8:5f:f9:17:3b:1d:87:25:fe:1a:62:
5e:9c:7a:81:ca:0e:b5:da:62:2f:d7:66:f1:ef:d5:
72:b7:aa:6a:7f:dd:41:16:a8:67:96:22:39:61:b3:
bf:e5:bb:d7:3d:54:ed:2e:25:53:77:97:74:61:5a:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:9F:48:AB:C4:C6:FC:53:AD:D0:62:60:79:90:84:96:6B:AD:67
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.66.0/24
114.142.172.0/23
116.206.10.0-116.206.15.255
116.206.28.0/23
116.206.34.0/24
116.206.40.0/23
180.214.232.0-180.214.234.255
202.67.40.0/22
202.67.46.0/24
223.255.225.0/24
223.255.229.0-223.255.230.255
IPv6:
2400:8b00:100::/42
2400:8b00:200::/42
2400:8b00:500::/42
2400:8b00:800::/42
2400:8b00:a80::/42
2400:8b00:d90::-2400:8b00:dbf:ffff:ffff:ffff:ffff:ffff
2400:8b00:1000::/44
Signature Algorithm: sha256WithRSAEncryption
34:ab:ab:5d:89:8d:72:a4:6f:42:cb:54:2f:61:5b:2b:a8:ed:
51:5d:58:4f:84:53:f0:ca:5a:32:9a:a2:68:3a:8c:50:f8:9f:
a6:d0:01:4a:bc:ba:33:9b:44:28:a4:42:a5:53:13:76:fb:d0:
31:3f:51:70:b3:e7:c0:1e:63:d7:13:52:76:b6:10:81:50:57:
55:76:6a:6b:eb:7d:fa:58:e8:77:3a:49:76:f2:58:5a:1b:ff:
d0:6e:a5:5a:81:ca:51:2c:b5:d6:8b:a8:06:ad:ad:1f:0f:53:
61:c6:3b:39:37:56:93:c4:ef:e4:37:c7:b9:bc:a6:a8:3c:83:
52:a4:85:27:a6:a8:78:f5:02:02:26:6d:40:21:40:97:0e:15:
67:61:3c:ca:f1:26:85:a2:d0:f8:5f:8b:22:d3:f9:e3:d9:ed:
6c:35:79:bd:e8:c6:d2:db:8d:a0:36:fd:50:19:a2:ef:3c:7f:
65:84:ee:6d:00:33:93:04:f4:96:c9:ba:d2:26:48:1c:87:78:
fe:35:7c:ee:4f:5b:0d:51:d6:f0:c2:2a:2c:93:f7:ce:40:12:
3b:66:dc:02:32:67:44:8b:15:54:69:55:93:ba:2b:0e:0f:3d:
01:b0:ad:33:15:6f:d6:0a:ab:a5:0b:97:8f:f1:95:3c:65:86:
08:c8:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:38:45 2025 by rpki-client