Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138123.roa
File: AS138123.roa (raw, json)
Hash identifier: jx+ORTgzxggQiEYURWHHH+KfZEN57E3tDwxUANv8rAw=
Subject key identifier: 7C:6C:E3:59:99:58:B2:9A:D9:AA:6B:F7:59:BD:4D:CC:34:74:6D:D7
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 49A4258A87425D28A2FE554B20C96919F236FF08
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138123.roa
Signing time: Tue 10 Dec 2024 05:00:23 +0000
ROA not before: Tue 10 Dec 2024 04:55:23 +0000
ROA not after: Tue 09 Dec 2025 05:00:23 +0000
asID: 138123
IP address blocks: 103.132.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a4:25:8a:87:42:5d:28:a2:fe:55:4b:20:c9:69:19:f2:36:ff:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:23 2024 GMT
Not After : Dec 9 05:00:23 2025 GMT
Subject: CN=7C6CE3599958B29AD9AA6BF759BD4DCC34746DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:1f:cd:b3:75:2b:e9:b6:30:ed:89:c0:c5:
70:1f:43:dc:f2:06:02:79:6f:ec:4c:7c:a7:38:bc:
96:5c:85:72:42:cf:6c:32:b5:08:ad:18:ef:c5:b4:
db:16:04:d3:5b:02:3f:63:d6:1a:19:e1:89:f6:b4:
75:14:8c:a5:68:e7:a6:75:74:30:50:19:0a:0b:61:
90:08:5c:06:8f:61:8a:25:4c:ab:a1:91:b2:e3:65:
26:db:fb:3c:37:35:36:21:8a:f0:59:75:45:4e:bf:
67:1b:8c:ab:4a:67:cb:d1:bb:f4:da:55:0d:cc:e2:
55:d9:0b:d7:98:92:bf:bc:88:63:85:b6:53:d4:e8:
b5:15:6e:6f:60:fa:61:48:b8:ad:a4:98:bf:3d:95:
02:c0:4e:69:63:5c:48:8d:7e:9f:92:5f:90:c8:aa:
bf:af:8a:1b:38:a6:7d:aa:22:32:bb:e1:0c:88:fe:
71:43:8a:6d:04:9f:8b:fc:3f:8c:81:1f:5a:a9:88:
68:9f:60:60:1b:24:16:52:67:1f:44:31:e9:d3:32:
2b:f8:fc:bc:64:84:b8:c0:61:44:85:44:16:44:ae:
39:7b:91:65:13:b0:83:cc:74:f1:27:c4:e2:94:a4:
f8:28:d8:a4:d7:51:79:3f:e6:8a:c9:26:92:2a:13:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:E3:59:99:58:B2:9A:D9:AA:6B:F7:59:BD:4D:CC:34:74:6D:D7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138123.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b2:fb:2f:9b:95:9d:db:7c:be:57:fb:d7:e6:d8:a1:5d:24:
8c:5b:9f:fc:c3:d7:3c:b2:c7:a2:7c:03:4c:cf:d2:8a:74:0f:
e4:49:b9:96:b3:5a:01:07:f0:ef:02:15:ee:d8:52:4d:6f:7a:
04:65:5a:d3:d8:01:1e:7c:64:80:ab:49:43:c1:a0:fc:49:de:
6e:7f:53:b5:e7:b5:a1:00:60:ff:7c:aa:20:e0:82:1f:a3:f7:
1b:21:c6:93:e7:0d:a2:c9:da:bf:9a:0a:39:77:2e:c0:d3:f8:
6c:66:cb:65:cc:ed:32:1c:30:13:ad:94:50:fd:9e:ac:33:ea:
48:9f:cc:cc:b9:5d:f1:73:63:4c:a9:09:12:53:cd:6f:ac:a4:
f9:f6:29:df:51:9d:97:46:9c:63:60:13:b7:20:de:6e:49:67:
dd:77:08:78:61:a7:c5:f0:ca:09:99:c9:99:92:82:83:02:57:
a6:b8:12:11:a0:06:77:ff:c0:f6:51:56:6e:8e:51:2d:df:fd:
03:18:1b:2b:13:3c:82:c4:6a:85:3c:5e:5a:66:67:8d:ac:11:
6d:cb:02:7d:cc:4e:9b:3a:db:b8:90:34:c2:17:e5:92:00:21:
aa:66:79:56:37:40:a3:5f:e2:47:24:70:cb:68:38:ec:55:9f:
b1:bc:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:59 2025 by rpki-client