Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa
File: AS140480.roa (raw, json)
Hash identifier: NvDbmx+xS7NQLjA+zlpdpBHqTEnxzNueZTXAsD+uL/w=
Subject key identifier: D3:2D:DB:A3:E7:71:90:E3:27:2E:5D:58:A7:DC:68:24:18:2B:52:74
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 443CE8379F54C6B1AA6E8F69ECCE4A86666EFF2B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa
Signing time: Wed 05 Feb 2025 07:00:00 +0000
ROA not before: Wed 05 Feb 2025 06:55:00 +0000
ROA not after: Wed 04 Feb 2026 07:00:00 +0000
asID: 140480
IP address blocks: 103.198.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3c:e8:37:9f:54:c6:b1:aa:6e:8f:69:ec:ce:4a:86:66:6e:ff:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 5 06:55:00 2025 GMT
Not After : Feb 4 07:00:00 2026 GMT
Subject: CN=D32DDBA3E77190E3272E5D58A7DC6824182B5274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:e8:8f:9a:f2:da:e3:4c:02:1b:93:82:53:
df:7f:af:4b:f3:cf:65:cc:1c:fc:cd:f8:38:e1:8b:
5f:57:c7:4f:e9:da:46:d3:a6:cb:96:bb:f8:c9:66:
63:29:bd:28:bb:78:b3:ff:60:eb:a3:36:3c:1f:20:
42:01:88:3e:68:16:12:3c:67:e6:10:84:a3:f7:b8:
58:6e:ba:cb:a6:fa:be:48:d0:16:f3:b3:50:9a:75:
4f:f3:0c:b5:b0:2f:4a:fb:15:cc:1f:84:8b:84:0c:
97:86:68:a5:bf:53:11:c4:9c:f9:87:d1:6a:a6:fb:
50:58:5d:85:14:29:9e:b0:1b:d6:af:c8:68:1d:33:
71:b4:87:de:15:b0:b5:5f:4b:09:f9:a4:62:fc:40:
b3:70:aa:98:9b:16:1b:00:a6:29:a0:f5:04:f7:9a:
2b:19:43:64:9b:2a:a4:11:9d:89:cb:77:4c:0e:dc:
2d:da:15:37:84:ca:8a:82:70:e8:e2:06:f4:db:90:
e1:81:74:17:1b:87:86:91:f2:8b:9d:91:0e:7f:cc:
04:d3:f1:82:e0:ab:5b:74:f3:55:8d:de:56:aa:2b:
b9:7b:42:f2:8a:e5:b9:71:05:34:e5:4c:8e:3f:66:
71:df:8d:e2:54:20:8d:a1:0f:ff:36:ae:d1:0d:25:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:DB:A3:E7:71:90:E3:27:2E:5D:58:A7:DC:68:24:18:2B:52:74
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.129.0/24
Signature Algorithm: sha256WithRSAEncryption
20:19:37:0e:60:b7:c1:9e:45:d5:1e:17:02:c6:24:55:98:d4:
8c:1d:76:93:fa:8c:73:53:44:93:14:1e:c4:61:81:97:04:fe:
08:5e:4a:e8:f5:f4:df:3a:07:03:2d:3a:b0:bc:75:80:fc:20:
03:7e:1b:69:78:a2:32:9e:87:d6:9b:6d:0c:1b:16:86:a9:ca:
e3:c5:51:81:9c:a0:d9:c9:7e:f6:21:01:d3:2e:49:09:a9:76:
21:a0:36:7e:a8:a8:cc:ee:2d:97:b3:80:55:71:99:1e:6c:53:
8b:c2:00:51:c9:63:ca:be:a4:c9:26:1c:d6:4e:c9:33:f2:93:
a6:63:4c:41:3a:43:a3:1f:6a:a2:8c:a8:d1:c7:ba:e7:56:77:
71:cf:e9:ad:ad:4c:27:cf:7b:8d:bd:c6:f7:06:8e:a3:f9:0f:
57:4e:28:57:79:b1:f3:cf:90:6c:8c:a4:73:0d:e1:d7:6f:da:
0b:35:01:56:b5:24:36:1f:7b:b3:31:4c:5f:b9:f1:43:7e:a6:
1f:1e:a2:73:03:3b:45:dc:2d:a7:5c:3d:ad:71:d0:88:7c:eb:
15:54:64:87:c5:92:c7:53:08:f6:81:4b:d2:23:da:3d:29:13:
a0:ae:38:e7:40:d2:e7:9a:55:d0:7b:96:dc:80:bb:29:8b:9a:
a4:21:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:37 2025 by rpki-client