Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa
File: AS136841.roa (raw, json)
Hash identifier: q8gpN4QFbJ6YIa4ZEoIYR8L9XPTQEd7IBryW7sXG1Kc=
Subject key identifier: 09:BB:36:A1:18:CF:8F:98:1B:F6:2B:6A:8A:AA:D1:DF:C3:71:2C:7B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2FCAC73C06D24D0001FBD36E097F73809B6C9807
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa
Signing time: Mon 20 Jan 2025 04:01:32 +0000
ROA not before: Mon 20 Jan 2025 03:56:32 +0000
ROA not after: Mon 19 Jan 2026 04:01:32 +0000
asID: 136841
IP address blocks: 103.151.36.0/24 maxlen: 24
103.151.37.0/24 maxlen: 24
103.175.212.0/23 maxlen: 24
103.175.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ca:c7:3c:06:d2:4d:00:01:fb:d3:6e:09:7f:73:80:9b:6c:98:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 20 03:56:32 2025 GMT
Not After : Jan 19 04:01:32 2026 GMT
Subject: CN=09BB36A118CF8F981BF62B6A8AAAD1DFC3712C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:9e:05:dd:a6:9b:e1:18:be:2f:c5:82:7b:
d4:49:3c:9e:ad:5a:15:5d:86:d1:14:92:f0:34:1e:
37:d5:80:9a:47:8b:f2:33:12:56:0f:47:6c:66:ce:
3c:fb:53:a7:de:ce:47:04:04:96:8a:f6:ca:82:b4:
3b:8d:9e:9a:f9:ec:34:84:27:3b:a9:64:e5:d8:5c:
cb:d6:cc:74:e1:a6:b3:8f:63:c9:65:62:0d:a9:7c:
ca:88:53:6b:11:13:e6:df:61:f7:fb:64:d1:2e:dc:
4f:3d:52:2f:ba:9f:3a:8c:ad:77:2c:42:5a:2b:87:
fd:78:d7:dd:f5:5f:b8:b9:22:ce:38:94:49:0f:f7:
44:99:06:ce:cf:6c:1c:26:8d:3a:fe:67:24:ec:fe:
e5:96:0e:bd:0d:d5:5c:44:36:74:6f:39:fe:e6:a1:
7b:9e:fa:63:39:60:55:f4:d8:6c:0c:05:3e:3c:5f:
5f:74:a5:2a:9a:0e:54:88:3c:71:e4:a5:2a:5e:b8:
61:12:7b:65:de:79:77:36:72:86:0c:b5:f5:60:07:
11:ab:78:12:00:85:e3:a5:82:0d:c6:ca:1b:8f:c5:
28:7b:9d:12:4c:59:86:88:f8:08:95:3b:31:b9:07:
0e:34:1d:2f:39:2d:32:4d:ce:f3:6c:99:14:7f:25:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BB:36:A1:18:CF:8F:98:1B:F6:2B:6A:8A:AA:D1:DF:C3:71:2C:7B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.36.0/23
103.175.212.0/22
Signature Algorithm: sha256WithRSAEncryption
00:ae:d8:cf:b5:0a:04:87:e6:35:cc:54:03:77:36:65:e3:8f:
65:3e:28:32:1a:e0:df:46:bb:bd:18:e8:cd:f4:80:33:6d:fb:
c2:e6:c9:3d:c5:30:68:aa:fd:aa:4e:4f:44:7b:f8:a1:b8:8d:
db:bc:c9:93:68:ee:2c:80:7c:a0:d2:c6:98:c7:2f:9c:e9:91:
b4:a5:02:fd:45:91:dc:55:66:17:00:73:21:a1:63:65:0c:12:
01:d7:56:53:5c:45:89:78:c4:fc:f4:5d:be:29:20:33:1a:4b:
1f:4f:c4:50:30:1a:92:03:12:f0:9f:8e:76:8e:82:76:ce:2f:
bf:fd:e3:56:4d:0d:64:6c:54:5e:83:92:9b:5f:4d:df:de:ba:
cf:32:f1:a5:fe:9b:91:b7:05:e8:9b:57:cf:0a:a7:1a:d3:12:
5e:13:0d:25:18:e4:c1:2e:32:d0:5f:00:58:3f:63:88:44:af:
a5:08:5d:4d:38:0b:b0:b2:cf:bc:52:23:b1:28:ae:29:49:95:
71:2f:01:4f:03:e0:41:ff:c1:9c:7f:e0:f2:8e:81:dc:34:f3:
46:72:a8:66:14:0e:3e:b4:c5:33:c6:ee:d6:2c:3a:c6:b4:14:
89:d7:1e:5a:1f:a4:85:f7:d2:a4:50:26:d5:70:28:34:d4:41:
3a:1b:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:22 2025 by rpki-client