Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3230342e302f32332d3234203d3e20313533313434.roa
File: 3136302e3138372e3230342e302f32332d3234203d3e20313533313434.roa (raw, json)
Hash identifier: y/HYgdqOG2p1jCBw5nOFyLamismN40aAuO7g95kqm6c=
Subject key identifier: F9:97:48:9D:FB:CC:93:84:10:29:E0:A2:B7:2D:EE:0F:78:8A:72:7A
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 7C038B3C60DE6D320B42C22F7F9E97F03AE066E9
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3230342e302f32332d3234203d3e20313533313434.roa
Signing time: Tue 04 Feb 2025 06:34:31 +0000
ROA not before: Tue 04 Feb 2025 06:29:31 +0000
ROA not after: Tue 03 Feb 2026 06:34:31 +0000
asID: 153144
IP address blocks: 160.187.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:03:8b:3c:60:de:6d:32:0b:42:c2:2f:7f:9e:97:f0:3a:e0:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 4 06:29:31 2025 GMT
Not After : Feb 3 06:34:31 2026 GMT
Subject: CN=F997489DFBCC93841029E0A2B72DEE0F788A727A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:67:ac:3b:9c:c0:a1:7d:9b:40:bc:3b:87:
ca:4c:10:64:56:4d:9d:a1:1d:68:a0:dc:94:3e:93:
b3:90:91:51:9a:aa:72:a2:3b:e6:6e:0f:a0:60:6a:
67:5c:c2:f9:11:a5:56:b9:50:51:f2:51:6e:96:17:
53:c3:2a:88:f9:b0:cb:71:59:1d:30:e5:10:40:33:
bb:30:5d:1c:fe:c7:20:aa:2a:4f:60:02:18:a5:1d:
07:1a:02:50:df:59:17:2a:2f:c0:5b:27:2c:d8:5b:
b1:3d:8f:df:ab:48:f7:2e:57:9b:48:3d:85:a5:0e:
ee:8f:09:e8:eb:ea:d1:1e:7f:9a:c3:1f:31:65:d3:
c5:d9:fc:45:ee:8b:53:23:50:c5:6b:e1:db:e1:86:
3c:1e:93:2f:d5:3a:a8:41:9c:b7:c8:49:1e:ac:11:
a8:e7:03:3f:2d:c5:71:9b:cb:1e:64:ee:1b:a7:23:
46:43:0f:e3:f6:10:9f:ff:37:a0:e6:db:6a:87:6e:
d7:7e:5d:f0:ad:11:a4:ac:a3:39:d3:99:91:58:c2:
2b:13:e3:b2:e7:32:95:bb:b9:e1:dd:0a:46:bf:a6:
a3:d6:4b:a9:ca:05:07:e9:e0:44:d9:2d:a8:30:02:
ce:d7:1f:ef:a4:0f:7a:4b:07:3c:0b:0a:52:60:5e:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:97:48:9D:FB:CC:93:84:10:29:E0:A2:B7:2D:EE:0F:78:8A:72:7A
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3230342e302f32332d3234203d3e20313533313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.204.0/23
Signature Algorithm: sha256WithRSAEncryption
53:ed:1e:11:09:47:9f:a4:c3:6c:88:d2:f2:a8:ee:f9:db:df:
92:98:cc:fd:c3:96:40:08:77:29:37:3f:74:54:62:61:27:0e:
b3:24:6c:d1:c6:ab:fb:ba:4c:20:a2:4e:7e:62:5d:f3:19:5d:
bc:01:77:8e:75:72:9b:03:06:cc:8c:f2:fa:38:47:22:b9:e6:
d9:7f:27:c1:4d:15:f2:7b:c6:c6:78:51:85:fd:b8:39:6a:45:
e6:9f:53:8a:43:2f:20:5b:9c:f9:ec:fe:14:2e:bf:b9:74:c0:
52:0c:70:0c:ae:e6:19:4b:10:9d:29:56:3d:08:00:62:02:a4:
35:6e:6d:3e:1a:f8:21:e1:2c:20:40:5c:9e:40:14:87:7e:a4:
b2:b0:62:1f:15:95:16:3d:d0:60:7d:16:c0:70:b5:28:e4:22:
07:33:e0:fd:ae:85:af:49:eb:91:c2:7e:72:44:91:e1:2e:55:
01:c4:23:db:f1:7e:e7:71:6a:2e:4b:3b:d5:7b:bf:34:07:29:
5d:72:11:43:91:0a:3b:48:69:09:49:75:0d:a9:95:d7:5a:65:
87:91:46:db:45:d8:7f:6a:4e:71:37:3f:61:28:70:40:b4:10:
cf:f7:18:9b:6a:a9:5b:49:b3:43:3a:3f:82:ca:cc:ff:b0:af:
ce:1a:8e:82
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUfAOLPGDebTILQsIvf56X8DrgZukwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNDA2MjkzMVoX
DTI2MDIwMzA2MzQzMVowMzExMC8GA1UEAxMoRjk5NzQ4OURGQkNDOTM4NDEwMjlF
MEEyQjcyREVFMEY3ODhBNzI3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALWrZ6w7nMChfZtAvDuHykwQZFZNnaEdaKDclD6Ts5CRUZqqcqI75m4PoGBq
Z1zC+RGlVrlQUfJRbpYXU8MqiPmwy3FZHTDlEEAzuzBdHP7HIKoqT2ACGKUdBxoC
UN9ZFyovwFsnLNhbsT2P36tI9y5Xm0g9haUO7o8J6Ovq0R5/msMfMWXTxdn8Re6L
UyNQxWvh2+GGPB6TL9U6qEGct8hJHqwRqOcDPy3FcZvLHmTuG6cjRkMP4/YQn/83
oObbaodu135d8K0RpKyjOdOZkVjCKxPjsucylbu54d0KRr+mo9ZLqcoFB+ngRNkt
qDACztcf76QPeksHPAsKUmBe2AcCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBT5l0id
+8yThBAp4KK3Le4PeIpyejAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz
MTM4MzcyZTMyMzAzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzQz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaC7zDANBgkqhkiG9w0BAQsFAAOCAQEAU+0eEQlHn6TDbIjS
8qju+dvfkpjM/cOWQAh3KTc/dFRiYScOsyRs0car+7pMIKJOfmJd8xldvAF3jnVy
mwMGzIzy+jhHIrnm2X8nwU0V8nvGxnhRhf24OWpF5p9TikMvIFuc+ez+FC6/uXTA
UgxwDK7mGUsQnSlWPQgAYgKkNW5tPhr4IeEsIEBcnkAUh36ksrBiHxWVFj3QYH0W
wHC1KOQiBzPg/a6Fr0nrkcJ+ckSR4S5VAcQj2/F+53FqLks71Xu/NAcpXXIRQ5EK
O0hpCUl1DamV11plh5FG20XYf2pOcTc/YShwQLQQz/cYm2qpW0mzQzo/gsrM/7Cv
zhqOgg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:57 2025 by rpki-client