Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa
File: AS138897.roa (raw, json)
Hash identifier: e/dFvuHlPuPDEH+XrNO17sVyjvNb11WXOee2k4WyR6o=
Subject key identifier: AE:F2:28:9D:07:BF:90:68:FF:FD:CA:9B:CE:1B:C7:FC:CF:45:8F:94
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0BCB4953D54E514FB4DD44E4BF2E5BE2E810D14E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa
Signing time: Tue 17 Dec 2024 09:00:00 +0000
ROA not before: Tue 17 Dec 2024 08:55:00 +0000
ROA not after: Tue 16 Dec 2025 09:00:00 +0000
asID: 138897
IP address blocks: 103.140.22.0/24 maxlen: 24
2001:df0:a380::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cb:49:53:d5:4e:51:4f:b4:dd:44:e4:bf:2e:5b:e2:e8:10:d1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 17 08:55:00 2024 GMT
Not After : Dec 16 09:00:00 2025 GMT
Subject: CN=AEF2289D07BF9068FFFDCA9BCE1BC7FCCF458F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:53:6c:e1:08:12:17:46:f9:98:68:5f:ec:
44:29:b8:e0:0e:01:8d:dd:2e:6e:1d:8b:af:6b:60:
42:09:c9:eb:f3:b6:55:41:a0:df:fc:ff:8e:b6:09:
5f:18:c0:98:b7:bf:d2:d9:a7:62:e8:be:1c:3b:c0:
8b:1c:f9:0c:a6:0d:ca:c3:ac:04:fe:39:3e:cc:4d:
ae:cc:7c:cb:38:0e:09:e8:31:82:c2:a1:0e:33:31:
34:99:d1:21:82:e4:ae:e1:98:9d:8b:96:7f:da:75:
54:8c:ee:9d:dd:3e:14:4d:2d:fd:a2:91:9e:39:63:
b3:08:f3:ee:36:e6:20:3b:95:85:0e:81:53:53:af:
f1:82:b9:81:13:17:aa:01:f7:6f:e2:06:7a:cf:2a:
39:f7:6c:4f:10:9b:2b:38:1f:16:16:80:6c:92:21:
08:2f:dc:e7:70:13:ca:36:bf:e3:a3:71:74:d6:b9:
c6:2c:82:51:11:c2:4e:69:bc:f8:42:ff:1d:e5:98:
82:dd:a4:92:ec:5a:1b:03:d3:31:f8:3f:69:a5:66:
06:03:e9:95:da:b0:8a:ba:d9:33:31:0b:1e:e1:a6:
75:f3:31:0a:c8:de:9c:7e:a7:f1:98:f4:51:b6:7c:
27:ed:ca:78:f4:c4:d0:be:88:0d:0b:3d:e0:6f:c4:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F2:28:9D:07:BF:90:68:FF:FD:CA:9B:CE:1B:C7:FC:CF:45:8F:94
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.22.0/24
IPv6:
2001:df0:a380::/48
Signature Algorithm: sha256WithRSAEncryption
49:67:30:9f:f5:d4:23:8c:0f:75:41:ae:46:fb:6c:1a:a7:2e:
ac:0a:b9:f1:19:be:35:87:b0:e9:13:34:82:ae:55:0b:c0:3d:
dd:31:39:32:89:8a:52:4a:47:70:e9:e5:f3:2e:53:02:d6:0f:
b4:44:f0:bf:31:93:3b:6a:74:9b:0a:cc:68:76:62:9b:ea:5e:
5c:29:87:86:c4:6d:95:e2:5f:20:46:f9:7a:ca:d2:24:d0:00:
6c:dc:53:41:01:a5:e6:8c:23:da:6d:ad:56:d8:98:7d:3c:6a:
21:29:41:82:c0:df:4d:cf:b3:1a:93:c9:70:07:7a:e0:cb:94:
67:f6:5b:5a:aa:e6:90:62:56:a8:2a:b8:e9:db:7e:38:26:44:
4f:e5:bf:b7:b0:c0:14:6e:30:d7:1c:64:e5:8b:3c:1e:1e:ba:
67:34:c8:19:99:50:c3:37:0c:e0:e6:6e:7d:4a:31:bd:8b:91:
bb:ee:6e:b7:f7:41:b7:14:fd:a7:61:8b:81:6f:71:60:f0:c7:
66:44:33:a9:28:b8:c5:5e:e8:fc:da:b1:e1:68:31:65:df:f6:
f9:93:27:f2:4e:bc:d3:ca:bc:ae:ab:2b:0a:ce:67:da:39:b6:
a7:97:bd:9e:d9:06:77:80:77:f1:ac:eb:71:89:21:14:83:27:
4d:64:12:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:37 2025 by rpki-client