Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e3130302e302f32342d3234203d3e20313532303030.roa
File: 3136302e32322e3130302e302f32342d3234203d3e20313532303030.roa (raw, json)
Hash identifier: EiHIq8RY+n8X+mGqjVN2k6CB6ASPJQ2N94vzQR2Vl58=
Subject key identifier: 9A:D3:35:E8:26:A8:3E:82:18:B9:88:0F:40:BF:5F:8A:FB:86:16:13
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 12D562AF9A922761881082AC06124804154DB3E0
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e3130302e302f32342d3234203d3e20313532303030.roa
Signing time: Mon 15 Jul 2024 07:33:30 +0000
ROA not before: Mon 15 Jul 2024 07:28:30 +0000
ROA not after: Mon 14 Jul 2025 07:33:30 +0000
asID: 152000
IP address blocks: 160.22.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d5:62:af:9a:92:27:61:88:10:82:ac:06:12:48:04:15:4d:b3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jul 15 07:28:30 2024 GMT
Not After : Jul 14 07:33:30 2025 GMT
Subject: CN=9AD335E826A83E8218B9880F40BF5F8AFB861613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:9c:b6:c7:4c:28:fd:ca:33:11:92:56:b5:
a5:da:fb:42:05:75:e0:6b:59:f3:81:4f:f1:33:0c:
e6:14:47:6b:d9:25:58:12:a3:96:e2:93:f9:3c:e5:
b7:75:04:32:9b:88:3a:27:e6:26:d2:08:98:90:c3:
ec:23:72:b9:ca:31:97:98:9a:1f:39:b1:06:f6:16:
0e:ea:71:4b:29:32:f8:9f:f1:b8:b5:76:e7:10:c5:
58:1a:bc:ef:81:71:94:d7:5c:da:af:48:a8:9c:65:
e2:d7:ae:90:5e:7f:ed:35:aa:3e:ef:20:f2:6e:8a:
4a:77:90:30:c7:0a:f4:20:18:d8:ef:04:06:27:03:
1c:aa:85:4d:97:9a:8d:ee:33:c9:c7:67:fc:71:68:
15:d6:b6:65:49:05:f7:40:40:1f:e2:19:12:2c:b9:
14:f9:52:85:26:d5:a7:8b:c5:1b:88:7a:49:98:71:
12:d0:a2:f5:b3:5c:b8:2b:13:5c:43:bb:57:53:f0:
bb:55:dc:7f:e3:34:29:70:29:a8:f7:a5:f4:a7:9f:
d1:b6:0e:53:72:e7:76:e9:e0:1b:c2:b3:a6:42:99:
a5:6c:8a:61:9a:e7:ea:a7:d6:57:85:e8:ea:92:31:
65:49:ac:cd:80:bd:88:fb:fb:8d:e5:05:52:1c:14:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D3:35:E8:26:A8:3E:82:18:B9:88:0F:40:BF:5F:8A:FB:86:16:13
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e3130302e302f32342d3234203d3e20313532303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:08:77:f5:87:0e:04:d9:96:d0:17:da:a8:30:40:7c:67:80:
97:11:64:04:95:a7:47:42:01:29:9d:62:0b:5c:f6:15:f1:79:
89:ba:01:69:8e:00:6c:8c:b1:32:41:7a:42:19:9a:aa:58:a5:
b7:a9:c5:dd:e3:55:bd:5d:7c:cc:5f:3f:02:46:78:ba:43:25:
2c:28:54:d5:4d:76:d9:c9:1b:85:0d:b6:f5:38:82:8f:66:94:
79:cd:b6:90:2c:1e:b2:8a:7a:2f:65:fe:1f:c9:bc:01:25:c4:
00:ed:48:d2:05:c0:a5:d1:e8:fb:1a:2e:88:51:21:5a:52:5f:
df:7e:34:79:fb:c0:a8:79:58:f3:af:d7:fc:79:df:bb:74:f3:
f7:22:ff:d8:11:e7:80:35:9d:59:5e:3d:5a:44:68:91:ee:53:
ad:ab:79:3d:51:16:ee:ba:bb:c5:85:f5:bf:4c:c2:10:0c:c0:
64:49:c5:46:00:57:47:c4:3b:bd:94:7e:fe:e6:de:f6:5a:67:
ba:d9:b7:7f:c7:fd:0d:b5:17:3b:a6:64:3a:21:c1:c3:ef:55:
71:e0:1e:79:c4:be:04:ac:4f:4a:33:f3:75:df:a8:98:37:0f:
e6:61:78:f3:2c:98:a4:89:31:6a:24:fb:6c:6b:c6:59:8f:52:
7c:b6:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 14:00:19 2026 by rpki-client