Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa
File: AS139428.roa (raw, json)
Hash identifier: /v+mAq7foOgZSrwx/a1AXx9LHvV3ekQwwgZNWbO/b0c=
Subject key identifier: 3E:A6:E6:6B:74:81:4B:81:19:B3:42:5D:1E:D6:32:F6:D5:86:AA:7C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0E410D7F51EF3F0BC3703D41974E9B8767FA9FFD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa
Signing time: Wed 18 Dec 2024 10:00:00 +0000
ROA not before: Wed 18 Dec 2024 09:55:00 +0000
ROA not after: Wed 17 Dec 2025 10:00:00 +0000
asID: 139428
IP address blocks: 103.144.146.0/23 maxlen: 24
103.183.98.0/23 maxlen: 24
2001:df1:c680::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:41:0d:7f:51:ef:3f:0b:c3:70:3d:41:97:4e:9b:87:67:fa:9f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 18 09:55:00 2024 GMT
Not After : Dec 17 10:00:00 2025 GMT
Subject: CN=3EA6E66B74814B8119B3425D1ED632F6D586AA7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:85:0c:eb:af:dc:94:20:4d:56:ec:fc:72:
4e:06:08:98:ef:58:30:5d:8e:78:db:38:5f:41:06:
60:be:9b:23:42:91:fb:ef:d2:c9:b2:50:13:3b:da:
76:74:84:28:f5:cb:21:35:b2:a3:b0:48:4e:1f:3a:
e0:66:7d:8c:3d:64:33:3e:6f:66:73:50:37:7b:f9:
47:b7:97:ad:2c:c9:bb:60:8c:62:a8:00:da:f0:ff:
c1:80:d0:b3:61:04:25:4f:a5:01:c0:39:98:42:93:
51:33:80:39:db:9e:98:44:31:94:22:cb:e9:38:60:
d4:57:23:88:94:31:28:ed:fb:1a:f0:c6:ea:a4:4f:
56:ec:d0:ec:a4:e3:78:3b:e1:50:22:71:26:66:56:
9e:19:c7:ee:29:22:3f:fb:f5:74:09:bd:10:05:c1:
41:d1:2a:5d:d6:fe:00:97:ed:f7:04:e2:ff:a2:04:
b5:52:e9:97:be:88:53:c4:6f:6a:f9:f9:62:a6:17:
ab:3b:89:2d:68:98:d2:5b:fc:30:7c:51:69:c6:9f:
1c:2d:62:26:b0:36:9d:8b:1e:16:dc:d2:18:51:e9:
03:14:12:1d:6b:c1:31:5f:93:0c:ac:9b:11:5a:77:
d8:e8:f2:d8:65:51:45:7f:03:83:12:0e:cc:06:d0:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A6:E6:6B:74:81:4B:81:19:B3:42:5D:1E:D6:32:F6:D5:86:AA:7C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.146.0/23
103.183.98.0/23
IPv6:
2001:df1:c680::/48
Signature Algorithm: sha256WithRSAEncryption
25:4e:a9:02:23:4a:c4:a9:9f:e5:33:34:1c:1c:28:27:1a:09:
da:aa:a9:88:71:8a:a0:74:5f:fd:aa:e3:b2:f7:d7:a5:15:e9:
fb:06:f8:e2:81:cc:67:8a:be:25:d7:86:48:d6:3f:99:00:d9:
51:02:10:ef:11:aa:ba:a1:fc:67:35:19:9b:13:e5:60:17:17:
e1:13:f2:95:06:b6:e6:5a:6b:0c:21:36:90:fd:d9:09:81:43:
77:2d:76:cd:17:2b:dd:4c:41:eb:41:47:21:7c:2c:08:92:a5:
25:4a:de:4f:d5:85:d9:39:b8:00:7a:a6:f7:c3:d3:ba:f7:4a:
fd:5b:de:6b:53:8d:fe:cc:08:a3:5b:7e:b6:7f:9f:84:b5:cc:
45:cf:5e:a3:29:8f:3c:f2:e0:89:d4:1b:1b:00:16:9c:07:e0:
84:c1:1a:c4:6d:6a:eb:e9:b6:cc:05:72:d7:85:ae:0e:db:7c:
66:e0:6b:3d:fb:26:61:86:fb:3c:08:f4:40:54:c4:06:33:9b:
2b:22:d6:68:f8:ca:d0:b3:ac:30:ab:cb:99:a0:ff:00:6d:1f:
b5:bb:90:9c:89:74:31:d9:97:6b:f9:5c:7a:0a:8e:0d:65:d1:
60:54:66:8c:81:3a:7c:84:a7:b5:e2:d1:e5:fc:6b:f1:25:69:
2f:1a:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:45 2025 by rpki-client