Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
File: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: 0Sr17ZS5g/9qrs8tU7iCF/elKox+hEAVw5uAvHtOQwI=
Subject key identifier: 4A:09:8F:D5:0D:96:B0:90:3F:EC:1C:2B:11:EC:B6:DC:AD:26:84:61
Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial: 310962048096B0A89631D21BD94EE822979BE6BD
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
Signing time: Mon 10 Mar 2025 09:00:00 +0000
ROA not before: Mon 10 Mar 2025 08:55:00 +0000
ROA not after: Mon 09 Mar 2026 09:00:00 +0000
asID: 138818
IP address blocks: 103.103.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:09:62:04:80:96:b0:a8:96:31:d2:1b:d9:4e:e8:22:97:9b:e6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Validity
Not Before: Mar 10 08:55:00 2025 GMT
Not After : Mar 9 09:00:00 2026 GMT
Subject: CN=4A098FD50D96B0903FEC1C2B11ECB6DCAD268461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:f3:03:66:76:8d:d2:5a:52:1f:7f:96:a1:
a8:18:d5:ad:b6:c6:0b:ce:2c:8e:0e:cd:00:9d:2c:
95:6f:f1:36:69:9b:30:c3:86:b0:cd:bc:b4:59:54:
8e:3b:8a:0f:a0:2c:e5:cc:73:a4:13:81:f3:78:b1:
94:bb:a4:68:b7:3a:d1:2c:54:3f:2b:19:d8:cb:32:
68:8b:47:07:a6:a8:fe:64:16:7b:a4:b6:98:b8:b7:
08:61:06:8c:34:49:d6:59:3e:85:da:56:60:ba:ef:
69:79:1b:52:85:68:31:65:e9:99:b8:76:fd:21:90:
1d:ab:01:f2:51:22:18:c6:c8:f6:96:e1:be:b9:a3:
43:03:2f:11:27:9e:27:ae:89:8a:2f:03:1f:b5:59:
d7:04:a4:63:09:1e:0c:32:06:f0:ed:c3:38:62:2c:
0b:93:15:57:1f:65:37:28:fb:d3:5a:59:08:18:a7:
0d:23:bb:82:06:ce:90:09:3f:6a:66:71:06:63:cb:
3a:12:1a:df:80:2e:5a:73:a6:f9:70:48:71:4c:de:
43:7c:c0:db:3f:3a:52:09:2a:29:13:00:38:f7:83:
6d:1f:8c:77:ff:08:08:65:ea:32:56:13:61:c9:57:
75:5c:e1:56:ef:22:99:52:de:f9:2a:45:c4:66:15:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:09:8F:D5:0D:96:B0:90:3F:EC:1C:2B:11:EC:B6:DC:AD:26:84:61
X509v3 Authority Key Identifier:
keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.136.0/24
Signature Algorithm: sha256WithRSAEncryption
47:88:99:f1:3f:61:96:0f:4f:1b:b6:e0:d6:05:82:d2:4a:d5:
27:7d:c6:a3:59:04:b9:02:39:b0:15:e3:7e:75:85:2b:6e:b7:
f6:9c:a2:18:a1:c1:ed:b5:3b:04:29:6c:9d:3b:50:92:c2:c3:
10:b6:f8:95:9d:49:4e:3f:92:01:e8:4f:b5:3f:ad:2a:85:a8:
3e:97:c7:e0:35:74:96:44:d5:35:a0:23:7c:53:dc:91:88:50:
6b:2b:54:b4:c8:60:9d:26:ba:66:d2:64:66:56:fe:fc:32:4c:
84:4f:dd:e8:c7:1c:f1:ab:a8:0f:07:72:6e:17:59:cb:b1:6d:
9a:ef:ea:d6:16:84:86:8c:57:c6:0f:a4:ba:01:e4:f8:25:6d:
44:cb:ca:5c:d6:ae:52:f1:c7:bf:8a:20:ae:e4:05:58:a9:f5:
d1:a1:d9:7b:4c:ab:7e:3a:7c:59:8f:22:81:0c:e5:82:a5:5e:
31:51:eb:11:88:6b:47:93:70:bf:68:7a:35:49:dc:1d:f6:4b:
e4:62:2c:22:84:e4:6b:a0:29:3c:84:31:37:ca:e1:79:72:27:
91:15:c9:47:2d:7c:85:99:ac:74:84:1d:dc:74:1f:e4:16:2f:
e4:46:05:6c:dc:08:ab:98:78:65:39:7a:17:2b:39:e5:1d:21:
ae:e5:3d:e0
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMQliBICWsKiWMdIb2U7oIpeb5r0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB
ODRCOUE2QjAeFw0yNTAzMTAwODU1MDBaFw0yNjAzMDkwOTAwMDBaMDMxMTAvBgNV
BAMTKDRBMDk4RkQ1MEQ5NkIwOTAzRkVDMUMyQjExRUNCNkRDQUQyNjg0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZvMDZnaN0lpSH3+WoagY1a22
xgvOLI4OzQCdLJVv8TZpmzDDhrDNvLRZVI47ig+gLOXMc6QTgfN4sZS7pGi3OtEs
VD8rGdjLMmiLRwemqP5kFnuktpi4twhhBow0SdZZPoXaVmC672l5G1KFaDFl6Zm4
dv0hkB2rAfJRIhjGyPaW4b65o0MDLxEnnieuiYovAx+1WdcEpGMJHgwyBvDtwzhi
LAuTFVcfZTco+9NaWQgYpw0ju4IGzpAJP2pmcQZjyzoSGt+ALlpzpvlwSHFM3kN8
wNs/OlIJKikTADj3g20fjHf/CAhl6jJWE2HJV3Vc4VbvIplS3vkqRcRmFS5LAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUSgmP1Q2WsJA/7BwrEey23K0mhGEwHwYDVR0j
BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC
MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC
OUE2Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhZGZjYjQ0LWFlN2EtNDQyMy1h
ZTdkLTA4NjQ4YmYxZGViMS8wLzMxMzAzMzJlMzEzMDMzMmUzMTMzMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ4gwDQYJ
KoZIhvcNAQELBQADggEBAEeImfE/YZYPTxu24NYFgtJK1Sd9xqNZBLkCObAV4351
hStut/acohihwe21OwQpbJ07UJLCwxC2+JWdSU4/kgHoT7U/rSqFqD6Xx+A1dJZE
1TWgI3xT3JGIUGsrVLTIYJ0mumbSZGZW/vwyTIRP3ejHHPGrqA8Hcm4XWcuxbZrv
6tYWhIaMV8YPpLoB5PglbUTLylzWrlLxx7+KIK7kBVip9dGh2XtMq346fFmPIoEM
5YKlXjFR6xGIa0eTcL9oejVJ3B32S+RiLCKE5GugKTyEMTfK4XlyJ5EVyUctfIWZ
rHSEHdx0H+QWL+RGBWzcCKuYeGU5ehcrOeUdIa7lPeA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:18:43 2025 by rpki-client