Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa
File: AS133816.roa (raw, json)
Hash identifier: Ni/wdoJxYrCoyW4VZt025+cI9f3dIAaDT3CDUfeKttc=
Subject key identifier: 64:CC:8E:F3:A3:91:EC:68:27:48:68:8C:4A:33:89:24:7B:F1:11:EE
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 35D0F623A3A33B8FC931BC66D718A213310FD84F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa
Signing time: Tue 10 Dec 2024 05:00:07 +0000
ROA not before: Tue 10 Dec 2024 04:55:07 +0000
ROA not after: Tue 09 Dec 2025 05:00:07 +0000
asID: 133816
IP address blocks: 103.52.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d0:f6:23:a3:a3:3b:8f:c9:31:bc:66:d7:18:a2:13:31:0f:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:07 2024 GMT
Not After : Dec 9 05:00:07 2025 GMT
Subject: CN=64CC8EF3A391EC682748688C4A3389247BF111EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:72:ef:51:8f:86:08:c8:44:c9:f0:d8:85:
5b:ab:99:06:3b:7a:3b:be:47:34:30:6c:d7:96:95:
a3:58:dd:51:bd:77:05:99:16:f5:f4:b7:cd:4a:8b:
de:da:bb:80:6b:84:e7:91:98:bf:43:49:af:d7:f9:
fd:70:72:de:1a:3c:2c:86:e9:b6:48:f8:10:4d:04:
8a:c2:86:bb:00:e3:75:57:87:c3:26:07:42:20:ed:
cb:45:d2:27:35:e4:79:0e:01:39:37:f7:05:2a:53:
8f:49:3a:95:b3:ed:f5:1a:86:8a:23:2e:6e:11:23:
98:38:0e:4c:49:44:77:2f:a9:0d:07:b2:62:66:4c:
29:a6:63:a0:3d:04:35:5e:ac:b0:f4:17:26:a1:b4:
7c:6e:78:a2:23:ea:a1:77:15:42:bb:96:cb:3c:93:
36:0f:95:6f:83:b4:63:8b:94:bd:c0:6f:67:27:ea:
da:00:94:cb:7b:40:4f:69:2f:4a:d5:bd:08:f7:d1:
af:70:db:cb:f5:1a:2a:25:33:e5:1d:0a:95:8e:76:
b5:8a:db:60:e5:e2:62:27:de:09:38:eb:c5:03:f2:
da:cb:50:6e:c9:99:9f:ee:01:18:46:38:5b:67:93:
a3:29:1f:14:c1:e2:cb:86:90:6d:12:19:a9:e4:1c:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:8E:F3:A3:91:EC:68:27:48:68:8C:4A:33:89:24:7B:F1:11:EE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.213.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3b:ea:47:dd:72:ec:68:c1:8d:cd:2b:b6:af:56:4b:c1:37:
41:9a:a6:6e:a5:d6:bf:c3:fb:38:51:9c:9a:53:37:34:c7:1b:
14:97:11:ba:dd:93:b3:1b:30:5b:be:d2:56:27:45:c5:b6:d6:
34:d4:f5:be:b2:e5:29:5f:1d:0c:83:ea:e4:8e:95:1b:93:73:
52:27:b8:ae:c2:02:36:66:ea:4a:5c:9e:d1:ab:50:35:4d:44:
bc:84:70:dd:04:eb:22:b9:0d:59:4f:3f:b9:59:b1:94:4b:7b:
40:48:7c:1d:a9:f0:00:52:72:65:b6:6f:c8:82:0a:8d:8b:81:
11:de:f3:f1:c5:12:35:f6:1f:60:ac:6b:99:32:d6:be:f3:30:
84:bd:c2:9f:52:f2:fb:d1:53:5c:72:51:b8:7d:1e:7e:10:24:
5f:99:3a:af:b3:21:4d:ee:78:f7:22:fc:2b:c3:d5:09:78:93:
51:45:b1:c2:50:8d:8e:15:1f:e2:f2:7e:fb:4f:99:e2:e6:d9:
ca:85:1d:30:4a:2d:59:44:c0:08:aa:ae:b1:b5:a3:d9:8c:90:
c5:9c:ae:af:3f:50:d6:bc:8c:66:42:63:f0:c8:b9:92:37:26:
5a:c6:37:c3:37:a8:cd:5b:79:7a:c6:b0:4a:55:1f:41:53:d3:
94:c3:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:05 2025 by rpki-client