Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa
File: AS138838.roa (raw, json)
Hash identifier: hc2qsh+Gqf8iuCzVgy4PzeHbILaP6HS7qLy8ItC/BtI=
Subject key identifier: 53:D6:DF:32:EC:82:6D:D2:11:6A:4D:BB:EC:20:63:FB:49:F7:65:1A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 65AB6A4361CB0119A0674006E9FE412099C040FD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa
Signing time: Tue 10 Dec 2024 05:00:13 +0000
ROA not before: Tue 10 Dec 2024 04:55:13 +0000
ROA not after: Tue 09 Dec 2025 05:00:13 +0000
asID: 138838
IP address blocks: 103.138.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ab:6a:43:61:cb:01:19:a0:67:40:06:e9:fe:41:20:99:c0:40:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:13 2024 GMT
Not After : Dec 9 05:00:13 2025 GMT
Subject: CN=53D6DF32EC826DD2116A4DBBEC2063FB49F7651A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4b:b3:72:e4:04:fd:6c:8c:e0:2e:ff:68:ab:
d8:6a:34:ab:8d:b6:35:f6:3b:ee:36:aa:dc:78:10:
fb:c2:05:4f:84:c1:14:66:95:79:29:bc:9a:8b:9d:
16:48:73:53:e6:1d:99:cc:da:9e:46:99:98:29:c1:
f1:71:fa:49:7a:f5:60:da:ae:e9:85:d7:08:11:97:
28:73:f0:a2:4a:7d:d6:41:4d:8f:4e:81:d1:4d:8c:
9a:89:f1:77:86:ce:63:9b:9a:21:43:87:17:90:50:
8d:4d:4b:91:73:cb:bb:c8:57:28:ce:f2:2b:b0:bb:
35:84:51:27:37:a6:d1:a4:d1:55:3c:60:88:04:36:
9b:0c:9c:b8:e7:2e:9e:ae:65:67:4a:39:17:23:cb:
51:f3:c9:1f:a5:1a:f0:ca:40:17:d8:0f:44:ad:38:
37:42:da:e4:7c:e9:4a:8d:21:20:e9:2d:fe:25:79:
a9:15:08:5e:88:dd:15:14:42:29:64:b0:6a:fa:07:
42:55:35:44:e1:95:9e:69:9e:2a:ff:50:6f:4d:05:
be:16:91:28:6a:ba:6e:7d:32:90:4a:c3:54:20:25:
b2:64:2e:40:76:d6:cd:8e:30:93:a0:59:39:a1:72:
26:28:40:27:16:fb:fb:65:ea:3b:e0:54:03:e8:4d:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D6:DF:32:EC:82:6D:D2:11:6A:4D:BB:EC:20:63:FB:49:F7:65:1A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.204.0/23
Signature Algorithm: sha256WithRSAEncryption
76:00:ae:37:27:ee:4a:5c:b1:11:14:2d:d2:98:fc:aa:2b:fa:
a2:41:28:6b:b6:c6:2d:2b:ac:ab:a3:8c:50:4c:b7:9b:3d:68:
4e:e3:87:67:7b:f5:f4:2e:ae:d3:68:02:d6:24:32:55:bb:38:
7e:d9:c9:a7:03:10:28:38:e2:60:4f:27:b2:5d:38:0f:72:3f:
f6:11:b3:b5:3d:8f:11:85:fa:36:ff:54:89:d8:68:f0:f4:98:
c1:a0:09:0f:55:2d:4f:7c:04:c8:f3:5e:2c:ed:39:45:89:3a:
92:b0:ea:6a:de:4a:42:97:1d:8c:37:15:51:9e:5d:40:ad:0c:
0a:3f:af:3c:17:0b:02:0f:dc:63:4a:23:f4:64:23:8a:c7:37:
11:d2:d7:ad:9b:18:3f:74:a5:64:79:1f:99:85:50:c8:fc:50:
a8:95:f6:17:7d:ee:1c:68:e9:1e:8b:e1:50:04:23:8c:29:04:
59:29:25:96:d3:16:6f:6d:dc:00:e5:93:34:3d:dd:9b:5f:2d:
7e:18:3a:57:49:4a:ca:6d:44:d3:63:5c:2f:03:83:8a:a4:c8:
b5:07:41:f2:d1:20:70:1e:24:03:b7:d2:67:db:55:f9:19:16:
89:b2:d6:27:b8:aa:d0:af:6b:72:bd:63:9b:51:51:01:c6:2c:
b4:e1:b8:39
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUZatqQ2HLARmgZ0AG6f5BIJnAQP0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxM1oX
DTI1MTIwOTA1MDAxM1owMzExMC8GA1UEAxMoNTNENkRGMzJFQzgyNkREMjExNkE0
REJCRUMyMDYzRkI0OUY3NjUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOpLs3LkBP1sjOAu/2ir2Go0q422NfY77jaq3HgQ+8IFT4TBFGaVeSm8moud
FkhzU+YdmczankaZmCnB8XH6SXr1YNqu6YXXCBGXKHPwokp91kFNj06B0U2Mmonx
d4bOY5uaIUOHF5BQjU1LkXPLu8hXKM7yK7C7NYRRJzem0aTRVTxgiAQ2mwycuOcu
nq5lZ0o5FyPLUfPJH6Ua8MpAF9gPRK04N0La5HzpSo0hIOkt/iV5qRUIXojdFRRC
KWSwavoHQlU1ROGVnmmeKv9Qb00FvhaRKGq6bn0ykErDVCAlsmQuQHbWzY4wk6BZ
OaFyJihAJxb7+2XqO+BUA+hN4b8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRT1t8y
7IJt0hFqTbvsIGP7SfdlGjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODgzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeKzDANBgkqhkiG9w0BAQsFAAOCAQEAdgCuNyfuSlyxERQt0pj8
qiv6okEoa7bGLSusq6OMUEy3mz1oTuOHZ3v19C6u02gC1iQyVbs4ftnJpwMQKDji
YE8nsl04D3I/9hGztT2PEYX6Nv9Uidho8PSYwaAJD1UtT3wEyPNeLO05RYk6krDq
at5KQpcdjDcVUZ5dQK0MCj+vPBcLAg/cY0oj9GQjisc3EdLXrZsYP3SlZHkfmYVQ
yPxQqJX2F33uHGjpHovhUAQjjCkEWSklltMWb23cAOWTND3dm18tfhg6V0lKym1E
02NcLwODiqTItQdB8tEgcB4kA7fSZ9tV+RkWibLWJ7iq0K9rcr1jm1FRAcYstOG4
OQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:14 2025 by rpki-client