Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153565.roa
File: AS153565.roa (raw, json)
Hash identifier: TD30GkN9Nbszq2Aq4LzQaBo5Cj0o7JXWkTcxO4gl6Vo=
Subject key identifier: E8:B7:A3:0B:A8:C4:EC:8B:49:28:F7:C5:50:BE:40:B6:69:6E:5F:ED
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 7F481B931CD9D51683E259FDE4820075D9279800
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153565.roa
Signing time: Fri 14 Mar 2025 05:46:39 +0000
ROA not before: Fri 14 Mar 2025 05:41:39 +0000
ROA not after: Fri 13 Mar 2026 05:46:39 +0000
asID: 153565
IP address blocks: 161.248.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:48:1b:93:1c:d9:d5:16:83:e2:59:fd:e4:82:00:75:d9:27:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 14 05:41:39 2025 GMT
Not After : Mar 13 05:46:39 2026 GMT
Subject: CN=E8B7A30BA8C4EC8B4928F7C550BE40B6696E5FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:ad:be:41:d3:0b:0d:0e:8c:aa:7c:25:ca:
96:cc:f0:d6:52:45:ab:b9:0d:d6:cc:b6:0c:7e:37:
62:51:ba:c6:74:f6:e1:21:85:23:96:98:d9:06:3b:
c8:df:98:06:27:b2:08:0d:cb:b5:5f:38:cc:76:bd:
98:92:b2:76:4b:50:64:80:94:f0:8b:a6:10:8e:f4:
89:6c:84:0a:9f:4f:53:fb:b4:f7:f7:b9:a1:73:81:
70:d5:a1:df:16:48:8a:91:b3:19:ca:19:e8:ac:a2:
1e:6a:89:83:a5:fd:75:f6:64:e8:6f:ed:e3:14:ff:
20:5a:1f:ff:f8:85:a4:a9:d2:59:cb:53:60:bd:f8:
70:77:32:01:5e:6b:3a:a5:b0:ec:92:eb:92:6d:24:
35:93:4a:19:51:10:45:4c:97:ad:38:ca:21:90:4a:
38:94:1e:d9:0e:06:f1:c5:73:8b:aa:75:e0:61:c3:
dd:4d:2e:51:58:d6:df:3f:53:25:e9:cc:99:9a:0c:
27:7c:85:24:7e:16:e0:c1:09:66:10:60:97:81:e8:
a5:2c:53:9b:7e:b3:f8:16:05:06:e8:40:76:02:92:
34:19:f9:02:9b:b6:9d:f8:39:15:d3:06:b2:fa:16:
73:18:2f:54:1b:d3:4d:ec:45:29:f0:04:aa:60:f5:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B7:A3:0B:A8:C4:EC:8B:49:28:F7:C5:50:BE:40:B6:69:6E:5F:ED
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153565.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.248.226.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:1e:24:5f:1b:8c:9a:69:fa:5c:97:63:38:92:23:d0:38:80:
f9:bd:1b:20:ad:8f:bf:1b:fb:92:1e:cb:bc:5b:b7:44:c6:ed:
f6:d7:bf:8e:c2:8f:c5:8b:44:d4:8a:f1:cc:11:bc:b8:be:a0:
ca:ca:d2:d9:80:bc:dc:7a:3e:a0:05:3a:e8:c9:4d:38:c6:d9:
fb:c8:9a:22:7a:5a:d3:b7:50:98:04:0d:b0:80:7b:ea:23:4d:
32:3d:ca:ff:d8:3f:36:36:2a:f1:e8:fc:2c:10:3c:64:12:42:
3a:f9:d1:90:db:cc:17:b8:22:1f:03:33:df:51:cc:c6:d5:5e:
37:c3:de:ca:17:dd:54:36:7e:d1:9e:3e:89:b6:ee:65:02:44:
bc:e1:19:3c:61:4c:1c:be:ab:57:7f:c4:6e:2c:d7:df:0d:46:
5f:02:b6:54:ed:f5:e7:8f:62:d4:d3:93:e2:02:a8:f2:f1:79:
27:0e:8f:85:5b:b8:eb:b9:c8:f1:23:53:1c:59:70:31:a1:51:
18:c7:49:86:9b:ab:84:70:68:fd:60:e2:89:75:87:24:ec:d0:
74:1f:e9:3b:7d:61:04:a4:13:fa:a6:a9:21:ef:7f:8e:55:68:
cc:8a:74:46:f6:b6:cb:2e:95:51:8e:da:54:21:53:a6:46:ab:
e5:dd:70:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:02:57 2025 by rpki-client