Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/AS23693.roa
File: AS23693.roa (raw, json)
Hash identifier: 5HlJn3Dvgch+mBeDaZ3dX97A1G5eMj//UlIcz/+00Z0=
Subject key identifier: 35:CD:FD:0A:70:D3:28:54:73:5C:4C:5B:33:B7:C1:61:D8:6F:86:EF
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 27AE5A671EF4B717DC61912DD1803F84F7A701BF
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/AS23693.roa
Signing time: Wed 11 Dec 2024 10:32:33 +0000
ROA not before: Wed 11 Dec 2024 10:27:33 +0000
ROA not after: Wed 10 Dec 2025 10:32:33 +0000
asID: 23693
IP address blocks: 114.120.0.0/13 maxlen: 13
114.120.0.0/18 maxlen: 18
114.120.64.0/18 maxlen: 18
114.120.128.0/19 maxlen: 19
114.120.128.0/20 maxlen: 20
114.120.144.0/20 maxlen: 20
114.120.224.0/19 maxlen: 19
114.120.240.0/20 maxlen: 20
114.121.0.0/18 maxlen: 18
114.121.64.0/18 maxlen: 18
114.121.128.0/18 maxlen: 18
114.121.160.0/19 maxlen: 19
114.121.224.0/19 maxlen: 19
114.121.224.0/20 maxlen: 20
114.121.240.0/20 maxlen: 20
114.122.0.0/19 maxlen: 19
114.122.32.0/19 maxlen: 19
114.122.35.0/24 maxlen: 24
114.122.64.0/19 maxlen: 19
114.122.96.0/19 maxlen: 19
114.122.128.0/19 maxlen: 19
114.122.160.0/19 maxlen: 19
114.122.192.0/19 maxlen: 19
114.122.224.0/19 maxlen: 19
114.122.227.0/24 maxlen: 24
114.123.0.0/17 maxlen: 17
114.123.0.0/24 maxlen: 24
114.123.128.0/17 maxlen: 17
114.124.0.0/18 maxlen: 18
114.124.32.0/19 maxlen: 19
114.124.128.0/18 maxlen: 18
114.124.160.0/19 maxlen: 19
114.124.192.0/18 maxlen: 18
114.124.224.0/19 maxlen: 19
114.125.0.0/19 maxlen: 19
114.125.32.0/19 maxlen: 19
114.125.64.0/19 maxlen: 19
114.125.67.0/24 maxlen: 24
114.125.80.0/20 maxlen: 20
114.125.96.0/19 maxlen: 19
114.125.112.0/20 maxlen: 20
114.125.128.0/20 maxlen: 20
114.125.144.0/20 maxlen: 20
114.125.160.0/19 maxlen: 19
114.125.176.0/20 maxlen: 20
114.125.192.0/19 maxlen: 19
114.125.208.0/20 maxlen: 20
114.125.224.0/19 maxlen: 19
114.126.0.0/16 maxlen: 16
114.127.0.0/16 maxlen: 16
114.127.220.0/24 maxlen: 24
114.127.222.0/24 maxlen: 24
114.127.240.0/24 maxlen: 24
114.127.245.0/24 maxlen: 24
114.127.255.0/24 maxlen: 24
182.0.0.0/12 maxlen: 12
182.0.16.0/22 maxlen: 22
182.0.20.0/22 maxlen: 22
182.0.24.0/22 maxlen: 22
182.0.96.0/21 maxlen: 21
182.0.128.0/18 maxlen: 18
182.0.160.0/19 maxlen: 19
182.0.192.0/18 maxlen: 18
182.0.216.0/23 maxlen: 23
182.0.224.0/19 maxlen: 19
182.1.0.0/19 maxlen: 19
182.1.32.0/19 maxlen: 19
182.1.64.0/19 maxlen: 19
182.1.96.0/19 maxlen: 19
182.1.128.0/19 maxlen: 19
182.1.128.0/24 maxlen: 24
182.1.160.0/19 maxlen: 19
182.1.176.0/20 maxlen: 20
182.1.192.0/19 maxlen: 19
182.1.208.0/20 maxlen: 20
182.1.224.0/19 maxlen: 19
182.1.224.0/20 maxlen: 20
182.2.0.0/19 maxlen: 19
182.2.32.0/19 maxlen: 19
182.2.33.0/24 maxlen: 24
182.2.48.0/20 maxlen: 20
182.2.64.0/19 maxlen: 19
182.2.65.0/24 maxlen: 24
182.2.80.0/20 maxlen: 20
182.2.96.0/19 maxlen: 19
182.2.128.0/19 maxlen: 19
182.2.152.0/23 maxlen: 23
182.2.160.0/20 maxlen: 20
182.2.192.0/19 maxlen: 19
182.2.224.0/19 maxlen: 19
182.2.224.0/24 maxlen: 24
182.3.0.0/19 maxlen: 19
182.3.32.0/19 maxlen: 19
182.3.64.0/19 maxlen: 19
182.3.96.0/19 maxlen: 19
182.3.99.0/24 maxlen: 24
182.3.128.0/19 maxlen: 19
182.3.142.0/23 maxlen: 23
182.3.160.0/19 maxlen: 19
182.3.163.0/24 maxlen: 24
182.3.180.0/23 maxlen: 23
182.3.192.0/19 maxlen: 19
182.3.195.0/24 maxlen: 24
182.4.0.0/19 maxlen: 19
182.4.32.0/19 maxlen: 19
182.4.64.0/19 maxlen: 19
182.4.96.0/19 maxlen: 19
182.4.128.0/19 maxlen: 19
182.4.192.0/19 maxlen: 19
182.5.0.0/19 maxlen: 19
182.5.64.0/20 maxlen: 20
182.5.96.0/19 maxlen: 19
182.5.128.0/19 maxlen: 19
182.5.160.0/19 maxlen: 19
182.5.192.0/19 maxlen: 19
182.5.196.0/23 maxlen: 23
182.5.228.0/23 maxlen: 23
182.6.0.0/19 maxlen: 19
182.6.32.0/19 maxlen: 19
202.3.208.0/20 maxlen: 20
221.132.192.0/18 maxlen: 18
2404:c0::/32 maxlen: 32
2404:c0:1000::/38 maxlen: 38
2404:c0:1400::/38 maxlen: 38
2404:c0:1800::/38 maxlen: 38
2404:c0:1c00::/38 maxlen: 38
2404:c0:2000::/38 maxlen: 38
2404:c0:2000::/39 maxlen: 39
2404:c0:2400::/38 maxlen: 38
2404:c0:2800::/38 maxlen: 38
2404:c0:2c00::/38 maxlen: 38
2404:c0:3000::/38 maxlen: 38
2404:c0:3400::/38 maxlen: 38
2404:c0:3800::/38 maxlen: 38
2404:c0:3c00::/38 maxlen: 38
2404:c0:4000::/38 maxlen: 38
2404:c0:4200::/39 maxlen: 39
2404:c0:4290::/44 maxlen: 44
2404:c0:42a0::/44 maxlen: 44
2404:c0:42b0::/44 maxlen: 44
2404:c0:4400::/38 maxlen: 38
2404:c0:4401::/48 maxlen: 48
2404:c0:4600::/39 maxlen: 39
2404:c0:4690::/44 maxlen: 44
2404:c0:4800::/39 maxlen: 39
2404:c0:4a00::/39 maxlen: 39
2404:c0:4c00::/38 maxlen: 38
2404:c0:5000::/38 maxlen: 38
2404:c0:5400::/39 maxlen: 39
2404:c0:5600::/39 maxlen: 39
2404:c0:5800::/39 maxlen: 39
2404:c0:5a00::/39 maxlen: 39
2404:c0:5c00::/39 maxlen: 39
2404:c0:6000::/38 maxlen: 38
2404:c0:6600::/39 maxlen: 39
2404:c0:6800::/39 maxlen: 39
2404:c0:6a00::/39 maxlen: 39
2404:c0:7000::/38 maxlen: 38
2404:c0:7400::/38 maxlen: 38
2404:c0:7430::/44 maxlen: 44
2404:c0:7530::/44 maxlen: 44
2404:c0:7a00::/39 maxlen: 39
2404:c0:8000::/38 maxlen: 38
2404:c0:8400::/38 maxlen: 38
2404:c0:8800::/38 maxlen: 38
2404:c0:8c00::/39 maxlen: 39
2404:c0:9000::/38 maxlen: 38
2404:c0:9400::/38 maxlen: 38
2404:c0:9800::/40 maxlen: 40
2404:c0:9a00::/39 maxlen: 39
2404:c0:9c00::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ae:5a:67:1e:f4:b7:17:dc:61:91:2d:d1:80:3f:84:f7:a7:01:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Dec 11 10:27:33 2024 GMT
Not After : Dec 10 10:32:33 2025 GMT
Subject: CN=35CDFD0A70D32854735C4C5B33B7C161D86F86EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:b8:c1:15:00:fd:88:5f:c9:11:8a:c6:26:
f0:05:e6:8e:18:f7:72:03:c5:96:e8:4f:f8:1a:d0:
8d:cd:da:01:80:c5:7b:7b:55:99:f7:61:5c:a9:d8:
2d:7c:bb:1d:ca:bc:47:86:c7:6d:1c:2a:21:43:0c:
ac:90:a3:c2:47:28:cb:3d:91:1c:79:6f:a8:28:b6:
66:75:f7:14:b1:96:ce:89:07:e2:3e:14:cc:2e:9a:
01:8d:30:98:e5:51:28:db:e4:4e:4c:b5:77:12:16:
83:b2:cd:47:fb:3d:9a:19:b7:3d:36:96:5e:30:1e:
58:46:ea:fb:7e:52:db:42:7d:2a:d0:c3:ec:67:f7:
4c:61:3c:dc:20:26:83:56:49:57:de:bf:3b:b2:07:
25:89:0b:ee:e8:b3:b0:7b:14:6e:40:ac:a1:d9:86:
49:bb:19:87:fc:7b:64:69:48:ed:d2:62:2b:bf:23:
4a:a3:ca:9c:3f:ae:6b:6a:22:13:9e:26:bc:07:16:
db:ca:b0:0a:22:29:33:f7:f4:a0:6f:98:5c:8a:d4:
e4:f5:e3:0a:34:96:f6:47:d6:30:44:08:68:3a:7d:
cd:59:23:7d:52:86:04:69:f7:93:80:2b:89:b4:db:
89:73:42:b4:4e:49:eb:69:5c:a3:09:a2:b6:05:6e:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:FD:0A:70:D3:28:54:73:5C:4C:5B:33:B7:C1:61:D8:6F:86:EF
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/AS23693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.120.0.0/13
182.0.0.0/12
202.3.208.0/20
221.132.192.0/18
IPv6:
2404:c0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:a9:a5:33:be:66:e0:35:1c:12:b5:fe:67:21:79:ef:f2:d1:
30:74:ee:d4:56:c0:88:f4:c0:a5:75:19:a0:68:e6:4f:ea:0d:
b4:e8:a1:f4:eb:9b:cb:6b:75:7e:1b:01:fd:c3:4c:c5:f9:06:
87:af:46:0e:d8:a8:41:16:9d:02:0c:f7:c4:1e:9e:67:d9:35:
c0:63:62:3f:93:ce:6e:e1:f9:9f:1d:5c:ea:86:af:db:53:58:
4e:61:24:f5:bd:7e:ce:4b:a4:39:b0:11:07:30:87:1e:78:ee:
5e:0a:8c:cc:de:90:55:b3:3e:06:3b:39:61:5f:45:d0:db:8b:
9d:7a:4e:e7:d3:ae:a7:22:52:eb:93:52:6c:1b:d4:32:f3:74:
77:65:0d:32:b6:2d:32:0a:5b:0d:a7:8b:70:5c:af:33:2d:80:
a4:e3:5f:4c:12:64:04:1c:6c:78:15:48:91:21:4d:9d:9d:5b:
9f:22:08:a8:8d:60:a3:ee:cf:f8:74:03:f8:d7:52:ef:62:9b:
28:6c:76:d8:3c:8f:7a:88:ca:a6:ac:85:80:ae:01:4a:27:89:
a6:45:35:06:e2:49:2d:7f:56:5c:2d:ae:2b:40:59:54:fc:d7:
91:9c:7c:9c:17:bd:cc:17:52:28:1a:17:b7:bd:de:76:13:7d:
24:9a:fd:dd
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJ65aZx70txfcYZEt0YA/hPenAb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNDEyMTExMDI3MzNaFw0yNTEyMTAxMDMyMzNaMDMxMTAvBgNV
BAMTKDM1Q0RGRDBBNzBEMzI4NTQ3MzVDNEM1QjMzQjdDMTYxRDg2Rjg2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vLjBFQD9iF/JEYrGJvAF5o4Y
93IDxZboT/ga0I3N2gGAxXt7VZn3YVyp2C18ux3KvEeGx20cKiFDDKyQo8JHKMs9
kRx5b6gotmZ19xSxls6JB+I+FMwumgGNMJjlUSjb5E5MtXcSFoOyzUf7PZoZtz02
ll4wHlhG6vt+UttCfSrQw+xn90xhPNwgJoNWSVfevzuyByWJC+7os7B7FG5ArKHZ
hkm7GYf8e2RpSO3SYiu/I0qjypw/rmtqIhOeJrwHFtvKsAoiKTP39KBvmFyK1OT1
4wo0lvZH1jBECGg6fc1ZI31ShgRp95OAK4m024lzQrROSetpXKMJorYFboRXAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUNc39CnDTKFRzXExbM7fBYdhvhu8wHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl
cG8tcnBraS5pZG5pYy5uZXQvcmVwby8zMzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1l
MmUzOGMzNjc3ZDEvMC9BUzIzNjkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAcBAIAATAWAwMDcngDAwS2AAMEBMoD0AME
Bt2EwDANBAIAAjAHAwUAJAQAwDANBgkqhkiG9w0BAQsFAAOCAQEAnKmlM75m4DUc
ErX+ZyF57/LRMHTu1FbAiPTApXUZoGjmT+oNtOih9Ouby2t1fhsB/cNMxfkGh69G
DtioQRadAgz3xB6eZ9k1wGNiP5PObuH5nx1c6oav21NYTmEk9b1+zkukObARBzCH
HnjuXgqMzN6QVbM+Bjs5YV9F0NuLnXpO59OupyJS65NSbBvUMvN0d2UNMrYtMgpb
DaeLcFyvMy2ApONfTBJkBBxseBVIkSFNnZ1bnyIIqI1go+7P+HQD+NdS72KbKGx2
2DyPeojKpqyFgK4BSieJpkU1BuJJLX9WXC2uK0BZVPzXkZx8nBe9zBdSKBoXt73e
dhN9JJr93Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:23:00 2025 by rpki-client