Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa
File: AS141137.roa (raw, json)
Hash identifier: 8u6m4v+aoGae2fiIy/HRpbnBhObfhem2kvXAXYE81sY=
Subject key identifier: CE:D4:FB:E2:D5:4B:2E:E5:42:39:B3:1D:17:99:32:65:2A:3C:94:4D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3A435DB27302C965E51DEE8F432C20C4EB6F1E20
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa
Signing time: Wed 29 Apr 2026 08:21:11 +0000
ROA not before: Wed 29 Apr 2026 08:16:11 +0000
ROA not after: Wed 28 Apr 2027 08:21:11 +0000
asID: 141137
IP address blocks: 103.167.11.0/24 maxlen: 24
117.102.162.0/23 maxlen: 24
202.56.170.0/23 maxlen: 24
202.56.170.0/24 maxlen: 24
202.56.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:43:5d:b2:73:02:c9:65:e5:1d:ee:8f:43:2c:20:c4:eb:6f:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 29 08:16:11 2026 GMT
Not After : Apr 28 08:21:11 2027 GMT
Subject: CN=CED4FBE2D54B2EE54239B31D179932652A3C944D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:dc:56:5f:6e:62:42:bc:4d:e9:27:35:5c:
4b:d7:7e:a0:6e:b9:24:df:9a:21:14:83:df:5d:ab:
51:76:6b:16:fd:ea:ca:34:3f:1f:1d:b8:4c:38:86:
ff:0f:cb:b8:26:eb:4b:06:bd:5e:66:3b:59:17:41:
fa:44:5d:f7:53:32:ac:64:ed:c5:73:45:31:02:9c:
21:ff:8f:75:71:4f:83:cd:fa:cc:ab:27:42:28:6b:
e9:77:66:36:1b:0c:21:5b:7c:40:17:7d:f8:a2:fa:
80:d4:38:ce:45:e9:12:f1:14:f2:39:11:bb:5e:09:
26:66:8b:56:da:0b:bc:ab:a7:f0:18:2c:b1:79:97:
7d:29:ec:a7:67:6f:9a:f9:e6:cf:32:76:e8:89:4d:
7d:f7:18:53:1e:af:e2:9a:81:f3:95:b0:ad:0f:5c:
c3:e9:64:39:ce:ce:c6:a1:93:f4:ef:d9:35:e3:ac:
fe:ac:1a:9a:6f:9d:a1:f0:44:ed:3e:39:f2:82:17:
49:c6:e5:5b:51:0b:9e:53:be:8a:6b:97:ca:6a:e2:
86:a2:8f:2a:6a:e3:30:92:76:16:b1:c1:a2:92:73:
86:e2:55:11:25:14:6e:65:91:72:eb:a7:6a:f6:32:
ae:f9:68:e2:fa:72:35:a4:71:8f:24:fa:b8:a3:64:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D4:FB:E2:D5:4B:2E:E5:42:39:B3:1D:17:99:32:65:2A:3C:94:4D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.11.0/24
117.102.162.0/23
202.56.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:0f:48:c1:dd:59:9b:fc:5a:f6:66:e8:43:38:78:46:2e:e2:
9d:3f:46:7d:6f:94:20:3b:40:c0:bb:fe:12:c3:cd:69:f5:f4:
f1:19:86:56:a4:59:92:c0:2c:2a:22:9a:af:ed:5c:07:5f:d8:
72:7e:4c:cb:dc:16:2b:49:1e:e0:c4:5f:ac:38:5d:4f:65:1b:
15:6e:9f:10:1c:0e:c5:9d:ee:e8:a5:67:6c:43:51:6b:cc:38:
cf:8b:5d:2a:6c:33:6f:c5:79:5e:0f:e8:7f:75:b7:df:86:12:
2a:a9:c2:74:a1:fc:1c:4b:45:e6:9a:a6:d4:6c:c9:16:00:ff:
33:e3:15:1c:8c:a8:7e:22:8a:1b:8c:d8:a6:10:0e:53:63:91:
2b:cc:56:b5:70:ae:5d:a2:2b:62:96:fc:ac:7d:25:15:0c:e2:
0c:8b:0c:fd:18:51:a8:e5:59:68:cd:48:71:4c:a9:f3:2b:d6:
0f:fe:9a:68:68:8e:73:e2:9d:cd:17:08:8d:aa:80:85:9b:66:
2f:10:ce:5d:5a:97:7f:e1:77:49:f9:9a:2f:78:77:68:57:05:
3a:cd:2d:f3:68:a7:99:67:ee:16:58:c0:16:86:6b:87:79:b1:
ff:9c:27:e1:01:70:1d:fa:8b:d4:03:12:b9:fa:43:e4:a9:e0:
77:49:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:58 2026 by rpki-client