Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa
File: AS139932.roa (raw, json)
Hash identifier: UwX0hVBPXqj3JnzwBGfjHqgr9KuvKTCjanDWb1ymjaU=
Subject key identifier: 94:5B:8A:63:4C:18:88:88:8A:74:AC:35:B5:04:63:32:B6:BA:04:63
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 13B11F45A802BBF9378A3D27C2C7DC59DF1C0BE7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa
Signing time: Fri 25 Oct 2024 04:00:00 +0000
ROA not before: Fri 25 Oct 2024 03:55:00 +0000
ROA not after: Fri 24 Oct 2025 04:00:00 +0000
asID: 139932
IP address blocks: 103.146.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b1:1f:45:a8:02:bb:f9:37:8a:3d:27:c2:c7:dc:59:df:1c:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Oct 25 03:55:00 2024 GMT
Not After : Oct 24 04:00:00 2025 GMT
Subject: CN=945B8A634C1888888A74AC35B5046332B6BA0463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:c3:24:86:68:06:15:d4:65:0e:4a:0d:26:
e7:f7:2e:34:75:70:3e:43:9f:3a:80:8d:81:44:f9:
9a:7c:3e:7b:e1:2d:07:0c:de:93:19:14:62:cc:51:
56:93:5e:24:37:29:d9:49:c5:ac:f3:cd:8b:d5:55:
8e:a4:f4:0a:c8:bb:15:aa:49:e7:cf:c9:7a:ee:fc:
a8:e0:c5:aa:a1:64:55:fb:53:4a:37:8e:c8:64:5b:
9d:6e:5d:75:1b:86:57:4e:94:f3:9a:90:a2:d9:4c:
84:47:25:87:4c:bf:b0:1c:9f:83:72:50:fd:b4:6e:
64:4c:15:5d:45:b9:4e:86:6e:8d:c7:2a:3e:a9:bb:
59:53:1d:4f:90:00:ce:d3:26:12:61:76:fe:f4:28:
75:03:db:00:9a:6f:58:b7:33:03:3c:8f:6f:ae:9b:
6d:b3:77:0b:e1:64:4b:36:30:b0:27:ae:87:c3:7b:
bc:12:f2:c8:8f:46:a5:ab:c2:b3:93:1e:a1:62:c1:
69:2e:64:93:6f:5a:b7:63:5a:a8:cb:a5:41:98:3f:
58:00:c0:f0:fc:e3:c3:8e:f1:4e:4c:dd:e9:c8:41:
75:19:b9:57:70:c3:03:84:f3:50:26:49:79:de:ee:
60:ed:cb:bf:b1:00:75:95:4b:cf:30:9a:45:2d:ed:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:8A:63:4C:18:88:88:8A:74:AC:35:B5:04:63:32:B6:BA:04:63
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.74.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ce:fd:f6:d4:35:9a:90:ef:61:d2:09:63:23:95:14:5c:19:
b4:f4:8f:f7:84:18:a3:1d:d7:77:72:13:b2:78:e0:36:11:cd:
ce:7a:e7:d8:aa:cc:53:a0:8f:66:45:fe:1b:d2:57:5a:03:84:
3c:25:dc:2b:e0:62:3a:66:db:6c:32:27:34:ea:5a:7c:49:79:
1a:a8:44:ba:85:83:0d:0a:13:cc:e7:b4:17:28:b2:7d:de:c7:
1a:ca:9a:1f:c2:8a:f6:f4:aa:f7:b5:61:d9:83:5e:46:29:ac:
f2:4d:08:f2:5e:1e:93:ec:99:db:2a:eb:d5:ef:6d:fd:e5:44:
b0:08:6e:28:42:6b:7c:81:0f:42:e3:a1:a3:eb:3c:7f:a0:56:
73:e0:ca:73:41:29:67:62:99:40:17:61:59:cb:1e:e7:79:b1:
90:e2:4d:a5:a5:05:69:ba:0a:dd:88:7b:bc:68:0f:ec:40:ad:
eb:36:bb:5e:b1:5e:3a:7f:f7:7c:c2:6c:00:a6:55:43:1e:9a:
fe:8d:4b:99:65:e3:b2:a7:19:0a:2b:73:d6:69:38:dc:ec:cc:
88:3a:65:5d:4e:6f:27:4d:26:e6:77:f0:d7:6c:e3:d9:83:b6:
f3:7a:fe:31:a8:d4:b1:ef:4f:a7:1a:89:1c:4b:a0:13:38:bb:
52:23:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:12 2025 by rpki-client