Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa
File: AS137301.roa (raw, json)
Hash identifier: FNtGekzwdVfl5qeBPAHgaHW2d+Gt+EGCb+rmFyWw46g=
Subject key identifier: C9:13:DD:C3:30:29:3D:BE:06:36:27:C0:4D:10:D5:8C:BB:83:33:D8
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4EAA90F04EC8BE065FCFDF01D47CD4CD27012FC7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa
Signing time: Tue 10 Dec 2024 05:00:11 +0000
ROA not before: Tue 10 Dec 2024 04:55:11 +0000
ROA not after: Tue 09 Dec 2025 05:00:11 +0000
asID: 137301
IP address blocks: 103.108.87.0/24 maxlen: 24
2001:df5:7b00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:aa:90:f0:4e:c8:be:06:5f:cf:df:01:d4:7c:d4:cd:27:01:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:11 2024 GMT
Not After : Dec 9 05:00:11 2025 GMT
Subject: CN=C913DDC330293DBE063627C04D10D58CBB8333D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:ab:f9:68:8c:20:76:10:f0:95:ab:de:3e:
46:8e:0d:8b:46:7e:0b:1d:d3:77:d7:93:33:dc:7b:
de:b2:83:e0:f5:da:f5:b7:81:3a:ac:82:fd:39:1d:
29:a1:56:5d:77:ce:ea:47:b4:a7:92:31:61:4d:4f:
4e:bd:3f:ef:e6:fd:89:57:05:3d:e0:fe:35:48:e0:
be:0d:f6:f9:2b:7d:75:84:71:d6:7f:6d:0b:7c:ca:
12:ff:25:b4:f2:85:9d:a3:6e:9e:8b:01:e4:1c:88:
d0:44:2f:dc:be:35:35:f2:0e:9a:49:8d:46:44:16:
8f:2d:44:f2:d9:fc:da:69:82:e3:2b:72:d9:36:98:
13:62:c8:77:2e:04:32:c4:fd:10:c6:3b:8d:05:41:
05:77:24:b8:36:30:32:2e:13:5c:b1:d2:6a:88:b9:
ea:65:d9:86:7d:14:50:be:ea:bf:df:89:b8:1e:f1:
12:5c:b3:17:cf:46:fa:c4:a5:9b:74:56:c8:c8:bc:
57:2b:f2:79:e8:3e:f5:a1:a2:87:1f:83:36:30:08:
5a:9b:38:fa:77:cc:e9:82:9a:a9:fc:37:91:22:b5:
e4:b9:f4:72:95:71:25:d7:0b:46:81:83:bd:83:c7:
22:4a:be:2d:d7:83:a5:d5:58:a0:3a:af:c2:46:a3:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:DD:C3:30:29:3D:BE:06:36:27:C0:4D:10:D5:8C:BB:83:33:D8
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.87.0/24
IPv6:
2001:df5:7b00::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ee:9a:ad:d9:54:6e:a5:f2:63:9b:32:e5:4a:a6:d7:2e:b3:
e4:b1:5d:05:d4:ad:50:c3:a5:74:6d:ef:54:3f:d4:d7:dc:7d:
54:1c:8d:af:fe:f3:ba:71:7b:77:de:34:e9:7e:d4:e3:5e:d2:
53:51:35:3c:21:79:32:38:85:d4:6b:e0:f8:0e:da:6b:82:80:
b7:0f:5f:6f:1e:ee:e4:7a:21:3e:ce:29:6a:a0:10:31:c2:9f:
f1:40:00:d2:bf:f9:b7:33:de:50:e7:77:d1:f5:aa:18:23:e6:
cf:31:51:bf:9c:4c:8c:fe:d3:bf:f4:68:ce:43:43:9a:ee:6d:
c7:44:63:07:23:11:1f:72:d6:36:6b:1d:91:1f:ac:c2:97:4f:
87:15:ca:5f:ca:45:6a:e3:2e:08:a3:22:73:ba:11:7d:90:42:
ed:11:46:4c:a3:21:b3:31:d1:31:a5:6b:dd:fd:f6:54:a8:af:
19:0e:98:1b:92:7a:dc:b8:9b:f6:f3:c1:b0:2f:7b:24:a6:24:
2c:45:95:35:61:60:4d:91:15:6a:78:02:01:7a:2d:03:fa:0e:
aa:42:30:18:b1:fa:23:e5:b5:ea:8f:99:7e:82:07:e1:54:14:
74:53:5d:a5:5f:3e:e8:46:3e:b2:12:6c:d9:06:dd:02:7c:d6:
a9:af:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:37 2025 by rpki-client