Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa
File: AS134621.roa (raw, json)
Hash identifier: xEziNpg7/HOFLh6Yd2pdfwe+55mxnHDOa3yamS8c0uE=
Subject key identifier: B6:BC:52:ED:CE:25:A0:F3:5A:18:92:7C:F5:E2:6C:04:C4:21:11:A3
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 76FF1E49EB019EDCDA8CC86C10C1BB6F14A414AF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa
Signing time: Tue 10 Dec 2024 05:00:04 +0000
ROA not before: Tue 10 Dec 2024 04:55:04 +0000
ROA not after: Tue 09 Dec 2025 05:00:04 +0000
asID: 134621
IP address blocks: 103.197.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ff:1e:49:eb:01:9e:dc:da:8c:c8:6c:10:c1:bb:6f:14:a4:14:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:04 2024 GMT
Not After : Dec 9 05:00:04 2025 GMT
Subject: CN=B6BC52EDCE25A0F35A18927CF5E26C04C42111A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:8f:05:94:5c:30:24:f7:69:a4:85:ae:ef:
19:79:c8:74:42:ec:47:f7:49:44:b3:cf:f3:c9:d1:
ad:1c:6d:51:a6:1e:1d:13:a3:09:1f:b3:53:13:df:
47:00:74:f8:a2:96:b7:c1:ad:ea:22:2d:4c:80:d8:
10:67:d0:ea:da:c8:65:79:46:73:fe:3c:58:68:bc:
e0:cf:50:06:d3:25:b9:29:7b:22:b7:cf:a9:31:1d:
d7:f2:87:9e:96:66:c6:36:02:df:e2:b6:fd:57:0e:
e9:e0:14:72:26:39:30:a9:de:f6:09:9a:aa:5d:d4:
7d:7b:06:df:fc:24:5d:04:1a:03:8c:0b:a6:7d:35:
80:1d:fe:01:37:46:8c:bd:b9:b3:36:ee:cc:cb:09:
f9:60:1a:d7:99:0a:97:a3:80:96:44:2c:24:f9:61:
e5:02:1e:56:5e:00:10:1e:4d:57:d4:32:32:29:c7:
e7:47:a1:ad:5a:a1:93:61:a8:6b:fa:f2:1b:83:84:
33:b4:b9:62:1c:60:a2:7c:98:d0:09:e5:e8:3b:20:
cc:d3:67:a8:24:40:d1:7a:b5:12:44:e7:ce:a3:5b:
5c:2c:e5:00:cb:48:1d:bd:da:98:ac:03:bc:28:6e:
8f:93:fb:42:fb:4a:c8:1b:6e:2b:61:bd:a2:4b:31:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:52:ED:CE:25:A0:F3:5A:18:92:7C:F5:E2:6C:04:C4:21:11:A3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS134621.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.89.0/24
Signature Algorithm: sha256WithRSAEncryption
12:44:c2:e5:39:6a:b4:46:f6:e5:5e:56:4d:8f:ad:85:39:e9:
64:20:60:49:df:b7:4d:d8:9a:7e:43:5b:08:0c:06:08:20:70:
2c:57:f7:03:2b:a4:b9:07:05:30:c8:45:ac:d1:18:d1:c6:f3:
bb:46:b9:6d:d5:1b:b9:08:5f:4b:04:11:d9:1f:ce:ac:e9:0b:
02:de:f2:46:53:e7:51:36:2c:d6:75:8f:c3:1e:4b:e2:5d:b0:
9b:4a:62:e8:4d:3d:f0:6e:a1:75:53:69:4c:37:73:4e:18:37:
70:b6:f3:d4:c2:7f:09:45:83:5f:b5:f3:2b:d1:0d:ad:e0:fd:
b3:95:1d:b4:83:54:c5:f7:34:3f:a4:c9:2a:47:22:f5:c0:c5:
1a:7f:86:c0:de:a4:39:6d:a5:2b:50:22:aa:25:bd:26:1f:20:
da:4a:ad:84:21:6d:24:e4:55:ac:1a:99:96:c8:8f:82:6f:85:
25:28:6a:4c:c5:8a:f3:8f:48:87:48:7a:c8:e4:6e:fc:d1:e7:
00:02:a5:d0:1a:fe:2a:e8:1f:83:8f:bc:cb:73:85:a7:bb:92:
44:3b:bd:6c:0a:1c:91:c1:4d:a3:84:da:90:e2:ad:26:48:0e:
ea:ed:b7:32:9c:e8:80:1c:8a:41:8a:3e:99:f6:8d:db:a5:9e:
4c:d5:54:47
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUdv8eSesBntzajMhsEMG7bxSkFK8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNFoX
DTI1MTIwOTA1MDAwNFowMzExMC8GA1UEAxMoQjZCQzUyRURDRTI1QTBGMzVBMTg5
MjdDRjVFMjZDMDRDNDIxMTFBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMyujwWUXDAk92mkha7vGXnIdELsR/dJRLPP88nRrRxtUaYeHROjCR+zUxPf
RwB0+KKWt8Gt6iItTIDYEGfQ6trIZXlGc/48WGi84M9QBtMluSl7IrfPqTEd1/KH
npZmxjYC3+K2/VcO6eAUciY5MKne9gmaql3UfXsG3/wkXQQaA4wLpn01gB3+ATdG
jL25szbuzMsJ+WAa15kKl6OAlkQsJPlh5QIeVl4AEB5NV9QyMinH50ehrVqhk2Go
a/ryG4OEM7S5YhxgonyY0Anl6DsgzNNnqCRA0Xq1EkTnzqNbXCzlAMtIHb3amKwD
vChuj5P7QvtKyBtuK2G9oksxe98CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS2vFLt
ziWg81oYknz14mwExCERozAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNDYyMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfFWTANBgkqhkiG9w0BAQsFAAOCAQEAEkTC5TlqtEb25V5WTY+t
hTnpZCBgSd+3TdiafkNbCAwGCCBwLFf3AyukuQcFMMhFrNEY0cbzu0a5bdUbuQhf
SwQR2R/OrOkLAt7yRlPnUTYs1nWPwx5L4l2wm0pi6E098G6hdVNpTDdzThg3cLbz
1MJ/CUWDX7XzK9ENreD9s5UdtINUxfc0P6TJKkci9cDFGn+GwN6kOW2lK1AiqiW9
Jh8g2kqthCFtJORVrBqZlsiPgm+FJShqTMWK849Ih0h6yORu/NHnAAKl0Br+Kugf
g4+8y3OFp7uSRDu9bAockcFNo4TakOKtJkgO6u23MpzogByKQYo+mfaN26WeTNVU
Rw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:26 2025 by rpki-client