Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32352e34362e302f32332d3234203d3e20313533303539.roa
File: 3136302e32352e34362e302f32332d3234203d3e20313533303539.roa (raw, json)
Hash identifier: wx+QNaamSJYBgUeaIjwQHmfZPmNh87VKc1ZgNzenvvk=
Subject key identifier: 48:FB:9E:7E:60:E1:C6:21:FF:7D:25:5D:A3:A5:B4:A9:51:AB:D9:00
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 7732DE2452F1C5D9FEEA770F4CD8D8B267B71942
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32352e34362e302f32332d3234203d3e20313533303539.roa
Signing time: Tue 21 Jan 2025 03:20:24 +0000
ROA not before: Tue 21 Jan 2025 03:15:24 +0000
ROA not after: Tue 20 Jan 2026 03:20:24 +0000
asID: 153059
IP address blocks: 160.25.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:32:de:24:52:f1:c5:d9:fe:ea:77:0f:4c:d8:d8:b2:67:b7:19:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 21 03:15:24 2025 GMT
Not After : Jan 20 03:20:24 2026 GMT
Subject: CN=48FB9E7E60E1C621FF7D255DA3A5B4A951ABD900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:63:e7:09:16:47:a0:ee:71:48:89:cd:2b:
51:a9:37:f7:e0:55:13:96:6e:26:30:ba:ca:ae:1e:
4b:04:d9:64:82:67:4d:f3:83:ab:f8:dd:f2:a2:65:
76:f3:a1:5a:ce:11:41:0e:14:b0:26:87:18:a1:cf:
bb:e1:22:66:63:37:a5:df:c7:a7:2e:52:e7:1e:25:
58:7c:06:b4:14:df:33:c3:da:48:9a:f0:78:1e:f4:
ef:61:f2:bf:43:5a:e5:e8:f4:6d:6d:5a:77:84:b0:
6b:b8:13:b7:07:0b:74:20:48:49:ec:72:56:09:91:
47:b3:ce:ed:89:5c:0f:5c:65:24:77:69:c8:80:5f:
59:87:db:25:32:8f:9f:11:36:58:3e:7c:00:69:2a:
5e:88:64:fb:7a:06:42:ba:86:7f:43:5b:df:bf:1f:
cf:ac:6c:c4:b1:a0:2b:33:32:82:6e:68:19:0a:8a:
0d:79:aa:15:68:0d:f7:c4:71:73:e0:2e:77:2b:3e:
a1:cb:e7:21:2a:be:4e:6b:a4:5b:9e:e0:6e:9b:f6:
6c:ee:ac:d7:17:fd:c8:85:27:90:f6:64:f2:6f:ac:
c2:38:fe:88:90:45:f8:4d:a5:dc:16:80:41:c7:ea:
c9:3d:c9:02:7d:11:5c:eb:fe:7e:8b:61:20:54:f7:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FB:9E:7E:60:E1:C6:21:FF:7D:25:5D:A3:A5:B4:A9:51:AB:D9:00
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32352e34362e302f32332d3234203d3e20313533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.46.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:57:8d:78:87:9f:7c:27:1a:69:57:15:5e:e8:d5:b5:40:6d:
0a:73:8d:3e:b8:ec:bf:47:76:80:8a:f1:c4:02:10:f9:26:9f:
98:c1:bf:e8:33:de:f8:32:29:5b:0e:3a:ec:21:57:de:e0:62:
ef:93:46:5c:42:9d:f6:bd:36:9a:72:18:a2:2f:03:67:7f:87:
1b:12:95:43:e4:fe:18:76:f2:0d:a9:77:4b:97:3f:0a:29:6d:
dd:11:e3:ea:ba:eb:9a:69:35:be:d0:0f:e6:37:ba:ea:3a:f3:
fb:5b:0d:7c:ef:9f:fd:cf:4c:18:f0:0d:07:28:6c:56:6f:06:
05:c6:17:87:f8:a2:1e:dc:fd:f1:14:93:ce:ce:bc:10:26:84:
f4:35:44:d6:cd:49:38:be:6c:35:80:41:da:a3:34:10:f6:78:
06:8b:91:7d:ab:ce:69:21:e8:d7:ac:08:09:f3:a9:34:05:4b:
0c:1f:78:f7:35:02:fd:8b:e3:bb:f6:5d:44:ef:31:61:a0:57:
d3:63:d0:1c:fb:8a:c0:72:f8:97:83:55:aa:1f:95:e6:fb:07:
04:dc:52:58:42:30:90:b9:ed:1f:52:8d:90:23:99:0a:e9:05:
82:5f:c2:49:9b:96:79:14:35:c5:ff:05:a7:b5:77:57:9d:b2:
37:7e:67:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:55 2025 by rpki-client