Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135462.roa
File: AS135462.roa (raw, json)
Hash identifier: Y6N9eEUkNQlw+RqxfLAyhlpvTArswCbxOaGJ94l819Q=
Subject key identifier: CC:40:C7:CC:64:E5:5D:E9:10:AF:1E:E3:8D:E5:E2:66:1B:BA:29:6F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 565D5174E5D812DB4CC3AF10B4CA11821B787263
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135462.roa
Signing time: Fri 28 Mar 2025 04:00:00 +0000
ROA not before: Fri 28 Mar 2025 03:55:00 +0000
ROA not after: Fri 27 Mar 2026 04:00:00 +0000
asID: 135462
IP address blocks: 124.158.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5d:51:74:e5:d8:12:db:4c:c3:af:10:b4:ca:11:82:1b:78:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 28 03:55:00 2025 GMT
Not After : Mar 27 04:00:00 2026 GMT
Subject: CN=CC40C7CC64E55DE910AF1EE38DE5E2661BBA296F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:22:9b:3f:38:e3:ca:9a:c3:d2:53:b8:ef:32:
91:74:12:59:24:a6:4d:18:f3:25:0c:44:51:77:ac:
07:3b:8c:a7:a8:7a:42:28:84:50:55:4e:31:b9:c1:
81:7c:4c:84:1a:1f:12:87:f2:72:c4:84:27:dc:47:
a7:5b:b1:48:ab:15:65:6c:a8:39:99:50:40:0b:64:
23:27:7c:0c:de:a6:e9:e9:be:27:54:85:ed:bf:53:
49:f6:a1:ac:61:09:cd:c2:ce:22:d4:83:70:a5:55:
7f:88:94:0c:0c:33:3b:ed:09:4a:d9:22:76:93:f5:
04:dd:d0:7b:c5:f0:00:ba:6e:25:eb:67:3d:c5:b6:
27:f3:a0:68:f4:81:d1:03:de:ae:7d:31:4f:02:d6:
37:35:10:25:ff:55:42:21:b4:98:1f:d3:78:02:11:
8b:29:65:ff:d0:17:86:9a:ca:51:29:98:f5:7d:38:
a9:2f:8e:9e:ac:41:21:2b:ed:10:bf:a4:5a:be:43:
63:c2:cb:d5:a3:f4:06:05:52:ec:65:fd:c3:3d:e2:
1c:b4:d6:f6:eb:83:1b:f2:0d:86:69:1d:d1:ff:2e:
9a:46:14:29:6b:c8:e3:9d:c0:9e:ad:14:d2:5f:b7:
65:ed:5a:40:c6:3e:d6:64:c6:fc:3a:4e:45:d7:9d:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:C7:CC:64:E5:5D:E9:10:AF:1E:E3:8D:E5:E2:66:1B:BA:29:6F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135462.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.136.0/22
Signature Algorithm: sha256WithRSAEncryption
01:72:73:60:9e:7e:40:fe:6d:fc:2c:b8:24:a1:6a:dc:d1:bd:
3e:ad:98:31:e1:b7:93:3b:7c:05:b7:a3:7c:ce:a3:34:a2:fd:
e5:08:59:f3:f7:39:1c:33:69:8d:e5:9b:99:9b:46:50:04:76:
3f:5a:c0:ca:0f:9e:d2:0e:be:f4:36:02:40:ab:b9:23:52:08:
92:4c:db:d1:3f:20:b7:09:cd:4d:b2:e0:d6:66:8f:39:87:fe:
70:41:43:0d:17:30:8d:74:fa:3f:50:75:7f:9a:ba:0d:bd:80:
e5:4b:6d:46:09:ce:5c:b8:bb:b5:02:a7:ad:ae:f1:a4:6c:63:
65:fa:4c:9e:71:b5:f7:21:3e:aa:0a:48:e0:1e:75:c2:ed:76:
97:b4:87:ee:01:d3:b6:e2:25:03:64:a9:f8:90:71:b5:5b:5e:
77:c0:6c:d3:31:41:ad:54:74:1a:34:94:4e:40:e4:fd:7e:fd:
1e:08:38:a4:38:dc:e3:cd:ff:0a:18:ea:79:61:84:2a:d5:0b:
02:b3:e2:08:e1:97:34:05:4f:53:af:b7:15:35:4e:e3:1b:5c:
04:38:14:2a:34:1d:3d:c2:ad:07:b9:49:81:9d:14:0b:f0:26:
c3:10:ff:4a:56:9c:bd:43:5e:7c:29:1a:ab:a9:de:c0:8b:9c:
85:91:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:33 2025 by rpki-client