Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa
File: AS139423.roa (raw, json)
Hash identifier: tXYUGJLkL+hwIcj4+dOR+xbhMRhUBIzUZ2YcQmxKlp8=
Subject key identifier: B8:10:45:B8:C5:61:22:D9:25:1F:2C:FF:AA:7E:DC:8D:16:F1:A4:7C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 243120E8C843EDAC388C605FE55D800DB858412B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa
Signing time: Tue 10 Dec 2024 05:00:12 +0000
ROA not before: Tue 10 Dec 2024 04:55:12 +0000
ROA not after: Tue 09 Dec 2025 05:00:12 +0000
asID: 139423
IP address blocks: 103.144.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:31:20:e8:c8:43:ed:ac:38:8c:60:5f:e5:5d:80:0d:b8:58:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:12 2024 GMT
Not After : Dec 9 05:00:12 2025 GMT
Subject: CN=B81045B8C56122D9251F2CFFAA7EDC8D16F1A47C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:b6:fc:66:20:2d:9b:a6:fa:c3:02:b5:01:
dc:dd:d2:6c:02:79:73:92:9c:a5:e7:be:3e:5c:7c:
15:0f:c6:96:c9:26:c4:dc:e2:dc:9f:a4:96:fd:2e:
46:f8:e2:99:87:4c:f5:c5:fd:cb:06:7f:9e:23:6e:
3e:75:26:8f:2a:62:95:6d:88:eb:3f:3d:1e:3b:48:
65:75:77:a3:29:45:61:33:20:c1:ef:fc:24:57:3e:
2c:d9:5f:18:4e:ab:5e:23:87:33:f6:fa:c6:7d:ae:
f3:7a:94:11:7b:ef:4b:cf:3c:c4:22:99:af:69:14:
44:a8:4f:78:5e:b6:fd:d4:02:b8:6c:ae:91:6f:5d:
de:28:f7:10:d5:5e:86:cd:d6:7a:da:40:3e:6d:83:
56:80:81:77:9d:b0:b2:8b:d5:81:cc:a8:4b:ca:e1:
98:d0:1b:e3:46:9f:39:8f:b4:37:63:f3:8e:60:e5:
8d:58:26:07:c9:b6:dd:32:4f:8c:f5:4e:44:8d:cd:
10:b4:d9:53:21:c4:12:2c:ff:75:c4:f9:8f:1f:b4:
05:ea:87:13:97:1d:25:8f:df:c3:60:2a:03:13:d3:
ba:0e:3f:f9:12:6d:01:a2:82:02:a3:dd:7a:32:c9:
c9:18:07:82:c8:f8:bb:59:81:f4:46:f6:9c:6f:67:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:10:45:B8:C5:61:22:D9:25:1F:2C:FF:AA:7E:DC:8D:16:F1:A4:7C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.20.0/24
Signature Algorithm: sha256WithRSAEncryption
14:23:35:22:c1:d9:8d:19:1b:11:3c:39:d6:84:9b:71:94:07:
1c:06:89:b9:9c:a0:0b:bb:77:65:03:c7:71:03:a1:5c:37:0c:
a9:75:f2:d0:85:55:fe:a3:9e:f6:4d:ca:b5:3b:6a:eb:54:62:
a4:c9:8f:33:64:65:40:c4:a8:3a:31:b2:9f:2a:fe:bb:40:53:
76:fe:af:da:79:b1:97:ab:38:2b:bf:b1:fd:65:81:75:8a:55:
f8:aa:13:a0:0d:4b:5d:62:d3:cf:07:b4:6b:d3:07:88:a0:82:
0c:4c:15:f9:44:e8:ab:86:d0:c6:a6:c6:20:6a:22:a5:bd:0a:
06:8e:5f:e7:9d:02:d1:ca:b5:4d:da:1a:51:0c:06:76:78:fc:
5b:f9:17:52:5d:2c:f0:82:ed:80:21:9c:33:97:f2:57:e5:96:
4f:11:30:11:63:ba:f3:b7:8f:d3:53:54:0f:25:a4:c2:0a:1d:
39:e6:5f:4f:a9:66:ad:9b:e3:c3:ed:89:3e:14:0d:df:6f:d6:
90:44:0b:36:a7:35:9a:b2:15:8e:48:ab:00:da:6e:ce:38:bc:
db:64:28:db:49:9e:d0:60:75:d9:32:ee:52:28:22:52:b2:5e:
b5:fb:40:fe:84:08:a8:41:11:32:c4:37:96:d2:37:3e:e8:bc:
0d:fc:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:14 2025 by rpki-client