Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa
File: AS139938.roa (raw, json)
Hash identifier: JCktbHfT2kRXzUrGXkG8Vf2IA8wWqEgpdO6BylfYIJc=
Subject key identifier: 8D:24:A6:3F:77:1B:E5:D5:D7:1E:4D:DA:F1:56:D7:87:5D:31:23:22
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 022869852D02F0B1B06DB49921688D901A0297ED
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa
Signing time: Fri 27 Dec 2024 06:00:00 +0000
ROA not before: Fri 27 Dec 2024 05:55:00 +0000
ROA not after: Fri 26 Dec 2025 06:00:00 +0000
asID: 139938
IP address blocks: 103.145.220.0/23 maxlen: 24
2001:df2:2c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:28:69:85:2d:02:f0:b1:b0:6d:b4:99:21:68:8d:90:1a:02:97:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 27 05:55:00 2024 GMT
Not After : Dec 26 06:00:00 2025 GMT
Subject: CN=8D24A63F771BE5D5D71E4DDAF156D7875D312322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:f3:c8:8e:95:2a:25:5b:10:85:1f:88:e0:
06:7b:e1:6d:05:82:45:e6:57:d0:8f:51:1c:49:1b:
6b:14:b6:c2:77:de:6f:7a:51:c9:85:29:db:7f:a1:
21:7d:67:bc:52:47:f4:fe:2a:67:01:24:e9:bc:e1:
d1:c1:dc:44:84:9b:0f:55:fd:89:c1:08:d4:34:55:
19:97:e8:34:fd:51:92:ba:b6:86:43:51:2c:80:dc:
53:ea:18:41:72:17:0f:a6:32:62:c5:88:c8:0f:45:
35:5d:78:68:5b:01:76:70:90:11:ac:ee:ef:0c:5f:
8e:49:19:f4:06:e8:a9:d7:e1:a9:e9:5e:3e:ab:5e:
f0:d7:50:6e:61:80:73:a4:e5:9f:3c:92:e7:f1:af:
d9:1b:3b:d9:d7:fe:45:67:d8:0a:e7:a4:de:c3:55:
0d:55:48:84:1e:d7:75:4c:a6:8d:e2:13:23:d8:34:
a5:7c:de:a6:e7:36:c1:6a:6d:73:d7:0b:27:9a:da:
7c:7a:a1:df:4e:5b:5f:af:7d:ec:27:6f:b4:20:18:
2f:c1:c9:d9:d1:a3:b7:e5:02:77:92:dd:7e:6b:71:
08:f7:76:af:e2:66:22:67:57:07:31:e2:24:15:84:
dd:5e:8c:62:26:cd:e3:ca:84:f2:81:de:10:d8:7f:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:A6:3F:77:1B:E5:D5:D7:1E:4D:DA:F1:56:D7:87:5D:31:23:22
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.220.0/23
IPv6:
2001:df2:2c80::/48
Signature Algorithm: sha256WithRSAEncryption
88:e5:a7:8d:ed:9f:76:cf:d7:2e:eb:b1:8c:27:73:58:d7:58:
48:f6:12:d7:d9:a6:3d:41:a8:8f:77:72:43:29:da:7b:db:a4:
96:c9:27:92:7f:c4:68:c0:e3:9c:cc:9d:50:a0:3c:56:bc:73:
3c:53:8a:f1:28:91:13:04:f1:8d:21:59:4f:3c:50:d9:a3:e9:
5e:02:de:48:8e:a7:f6:25:67:99:ba:1c:cb:78:10:02:32:c4:
2b:5d:f2:1b:67:74:0b:bd:6d:b5:7c:c9:6f:60:ec:9f:05:ff:
e6:4f:dd:74:57:b8:0c:d7:93:ee:11:be:dc:a6:a1:b3:3a:53:
6b:d9:da:a5:b5:5f:fa:f9:d2:cc:0d:61:36:25:ec:35:51:4f:
5d:0a:84:d3:32:00:0d:3b:44:d7:ce:c7:dd:cc:87:a3:47:22:
c5:e7:b4:18:04:20:0a:60:9a:ea:88:0b:a7:39:6b:e1:78:56:
f0:58:4a:88:01:59:99:a8:69:cd:7e:04:45:50:bc:2f:ef:08:
79:36:ca:13:5b:6e:6e:43:54:a3:95:4f:bc:fe:81:fc:59:dc:
31:b9:ba:db:52:a4:ac:cf:9e:ff:73:67:cd:0d:58:12:47:9b:
71:da:15:41:9a:dd:ae:13:34:ff:dc:68:95:65:44:79:ed:31:
a3:56:3b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:09 2025 by rpki-client