Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa
File: AS132641.roa (raw, json)
Hash identifier: R19ODK2AyIBMGFZTk8S8Hil5JCBnu8QlVnF7uT72/kI=
Subject key identifier: 09:88:9A:AD:3E:65:32:8E:E3:7D:DA:33:24:30:0A:10:0C:D3:FF:87
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 08B3F5B6EC90CA4F4351C0620CE99A3DA017F1DB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa
Signing time: Tue 04 Feb 2025 06:32:04 +0000
ROA not before: Tue 04 Feb 2025 06:27:04 +0000
ROA not after: Tue 03 Feb 2026 06:32:04 +0000
asID: 132641
IP address blocks: 43.251.96.0/22 maxlen: 24
103.19.108.0/22 maxlen: 24
103.132.140.0/22 maxlen: 24
103.145.218.0/23 maxlen: 24
103.145.224.0/23 maxlen: 24
103.145.240.0/23 maxlen: 24
103.145.244.0/23 maxlen: 24
2406:a500:c3e7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b3:f5:b6:ec:90:ca:4f:43:51:c0:62:0c:e9:9a:3d:a0:17:f1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 4 06:27:04 2025 GMT
Not After : Feb 3 06:32:04 2026 GMT
Subject: CN=09889AAD3E65328EE37DDA3324300A100CD3FF87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:72:fa:a8:cc:d5:20:77:16:3f:88:6d:7f:
a7:75:0e:46:aa:ba:33:60:e6:dc:28:5e:50:3e:39:
4f:a3:e1:3d:e2:07:27:7c:d3:5c:e2:ff:0a:76:a8:
c3:5e:d5:e3:b6:51:91:a4:82:7d:9a:f8:89:5c:06:
de:fd:d1:bd:da:20:c8:2f:2c:ae:7f:eb:13:14:9e:
c9:b4:10:52:7f:1e:2b:70:fc:f3:a9:23:41:91:47:
7c:d1:15:5c:86:44:96:f0:b7:24:1e:9d:d3:09:df:
ee:a1:f9:fb:50:dc:37:82:82:a8:58:3f:b0:68:ee:
a4:51:59:19:03:da:64:42:8a:7b:a4:d4:81:ff:cb:
9f:43:47:95:e3:69:70:bb:92:5e:16:3d:47:3a:3b:
07:d9:a1:d9:b1:34:39:66:d5:cb:79:ed:34:60:67:
b9:1c:c9:5d:87:af:d9:ea:05:f5:1b:d0:c2:d8:71:
b6:3d:ab:ea:9b:c2:55:ce:c3:83:8b:e0:0c:fb:89:
44:65:bf:71:37:38:e7:d7:d9:42:df:b8:e9:01:38:
10:4e:1e:b8:86:39:d8:62:46:0b:9c:2a:16:64:cd:
dc:c1:28:a7:e6:37:81:1f:c6:59:23:b1:9d:42:d7:
8c:d9:38:6c:d2:2e:e7:fd:e3:00:d1:46:4b:42:57:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:9A:AD:3E:65:32:8E:E3:7D:DA:33:24:30:0A:10:0C:D3:FF:87
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS132641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.251.96.0/22
103.19.108.0/22
103.132.140.0/22
103.145.218.0/23
103.145.224.0/23
103.145.240.0/23
103.145.244.0/23
IPv6:
2406:a500:c3e7::/48
Signature Algorithm: sha256WithRSAEncryption
10:70:97:3f:31:31:8f:91:42:1a:48:7e:b2:c1:f6:18:33:a3:
b2:99:7e:fc:fb:f2:4a:f7:46:06:89:9e:62:78:cd:50:64:63:
c2:38:6d:9e:01:16:2a:39:55:b1:be:5c:e5:88:8b:c9:89:3f:
d0:2a:67:dc:3e:da:7b:25:a0:be:74:1a:93:a2:15:55:3c:3a:
7c:9c:4b:db:8e:35:8b:58:26:3f:6c:db:c4:da:d4:6f:2f:33:
b0:15:10:b3:c1:a3:e4:8d:94:ed:65:e4:b0:b4:22:1c:13:db:
76:77:e1:5a:68:b5:1d:68:5f:49:b1:7d:3c:74:9a:2e:cc:c9:
83:89:b5:3e:6d:ae:8e:c3:df:4a:1e:be:ab:4e:1f:7b:07:69:
ac:04:a2:d4:10:a9:70:13:74:bb:55:05:a2:7a:c6:30:19:58:
70:85:a8:32:a8:4e:b5:23:61:ab:93:89:26:4e:32:f7:70:de:
ff:ff:59:1b:dd:89:e3:69:13:59:d1:50:40:f7:1c:dd:f1:59:
3d:5b:fd:b6:c7:65:80:50:9a:b8:9d:ae:b5:16:69:ba:36:b4:
70:a7:60:18:37:e0:09:b9:55:f4:93:84:ad:2f:d7:dd:1c:c0:
d2:d7:f4:92:3c:d2:12:69:9c:d0:1c:15:a0:d4:c3:cb:84:05:
72:c9:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:14 2025 by rpki-client