Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa
File: AS136052.roa (raw, json)
Hash identifier: tpq3tvNQ/Er0EK8XoazrqTeKbfbZCR6Sb51V/j82X8g=
Subject key identifier: CF:D9:8A:B2:27:2B:30:66:05:6E:EA:B0:71:6D:38:15:86:C3:AD:20
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 07AB043FC31F07124B9B0867EDB21D61255D7B27
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa
Signing time: Thu 06 Feb 2025 10:44:47 +0000
ROA not before: Thu 06 Feb 2025 10:39:47 +0000
ROA not after: Thu 05 Feb 2026 10:44:47 +0000
asID: 136052
IP address blocks: 157.10.160.0/23 maxlen: 24
157.20.96.0/23 maxlen: 24
157.20.154.0/23 maxlen: 24
160.19.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ab:04:3f:c3:1f:07:12:4b:9b:08:67:ed:b2:1d:61:25:5d:7b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 6 10:39:47 2025 GMT
Not After : Feb 5 10:44:47 2026 GMT
Subject: CN=CFD98AB2272B3066056EEAB0716D381586C3AD20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:eb:76:0c:65:d7:db:73:0f:a9:0f:d0:4d:
c4:f0:0f:84:e0:2d:33:d6:b1:46:7c:cc:ba:87:ed:
54:b6:42:fd:39:63:7e:1d:40:c7:cf:37:88:48:6c:
27:ac:dd:78:3e:81:75:56:b5:d3:cb:97:8a:0f:21:
07:a6:d7:a1:47:07:e6:05:53:64:55:ab:95:33:38:
95:f1:75:46:0f:69:da:e5:32:8a:00:bb:74:02:61:
f6:36:fb:7a:08:3e:27:e2:2b:9a:d9:a2:34:e7:74:
98:cf:c3:fd:f3:c8:ea:d7:50:03:c5:b4:40:c8:fe:
b5:ca:20:60:aa:ca:a9:c3:ee:2b:03:76:15:50:f3:
c7:02:ea:d9:35:a3:bd:93:d8:3e:06:05:57:f7:73:
26:18:3d:1d:17:e9:10:04:76:44:0f:7e:fc:b4:d2:
34:8d:18:8c:32:a4:05:d4:53:99:8e:07:1a:de:11:
d5:15:72:af:b9:dc:58:5c:ce:9a:a7:4a:9e:6c:f9:
59:f7:cc:56:a8:02:33:7d:86:e5:64:30:78:d9:75:
f3:41:37:0f:61:69:7e:6d:12:2d:e8:e9:54:19:ab:
99:24:79:9c:4d:ff:fa:f2:3f:68:34:21:e1:f4:c2:
b1:92:7e:e2:c4:85:ec:52:a8:61:03:b9:d8:21:ef:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:8A:B2:27:2B:30:66:05:6E:EA:B0:71:6D:38:15:86:C3:AD:20
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.160.0/23
157.20.96.0/23
157.20.154.0/23
160.19.186.0/23
Signature Algorithm: sha256WithRSAEncryption
89:50:34:5c:7b:15:b1:59:6e:5a:b4:60:fd:8e:7e:ed:80:0b:
c3:9e:59:54:de:93:d5:c9:1a:d3:f7:a5:28:32:8a:5b:6f:4c:
ae:68:7f:28:14:4e:89:2a:0e:d6:be:e1:ca:14:25:37:c5:17:
6f:ce:a9:0b:8f:98:c1:67:c2:b3:48:12:69:0c:90:5a:53:15:
4a:9a:9f:8a:a5:ba:b8:bc:a7:f8:77:3e:ae:13:61:33:7b:ca:
26:57:f5:c5:88:e5:52:ae:33:16:ca:e9:2a:d8:1f:d5:b4:a6:
bf:bf:e2:f3:3b:2e:d8:27:bf:9b:e9:77:23:dd:34:96:1d:0e:
a3:6c:ce:64:e9:10:c5:a3:bf:38:26:1a:c6:90:2b:cc:4e:73:
c9:30:ca:ac:5a:de:fc:d7:b7:de:7f:f5:f6:d3:fc:91:39:e5:
6c:d2:66:e0:0c:f4:8c:2e:a0:08:ab:a4:9d:a2:84:a3:43:05:
a1:dc:05:dc:52:ce:bb:c4:e4:f3:7a:76:fb:e5:f3:1a:62:f2:
8c:4b:60:73:41:88:d9:c4:24:21:58:53:c1:9c:a0:4b:8c:3e:
f6:80:5d:de:a4:94:9e:a1:87:71:4d:cc:20:9f:d8:cf:c8:fc:
36:bd:bc:77:7e:8c:9c:80:16:46:41:ba:f0:74:b1:a3:b2:44:
a6:2d:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:07:10 2025 by rpki-client