Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa
File: AS141082.roa (raw, json)
Hash identifier: Ue7VMS9XkmARXetOewQGw8J1z84T0YJVt/DOwj05ifA=
Subject key identifier: 3B:D4:1B:83:DC:E2:57:AA:DD:90:77:6C:D3:2C:9E:21:0E:52:CD:27
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7F618F31139CFE59C45E212FFECEC0BC4A7F6EE9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa
Signing time: Tue 03 Sep 2024 07:00:00 +0000
ROA not before: Tue 03 Sep 2024 06:55:00 +0000
ROA not after: Tue 02 Sep 2025 07:00:00 +0000
asID: 141082
IP address blocks: 103.251.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:61:8f:31:13:9c:fe:59:c4:5e:21:2f:fe:ce:c0:bc:4a:7f:6e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Sep 3 06:55:00 2024 GMT
Not After : Sep 2 07:00:00 2025 GMT
Subject: CN=3BD41B83DCE257AADD90776CD32C9E210E52CD27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:5d:6d:c7:dd:73:75:33:62:39:16:4e:6a:
0d:4e:f8:87:ca:40:06:dc:f4:84:9e:3f:35:29:be:
22:5d:df:51:cf:3e:45:d7:b3:5b:15:00:0d:c5:ec:
34:3f:5c:17:ea:f2:4a:bd:9a:fb:c3:5a:32:ad:11:
c2:b9:ec:0b:3f:ba:39:3f:1a:10:f1:24:c1:d4:22:
8a:cd:94:0c:eb:5c:78:89:de:4b:da:48:2b:81:4f:
81:9f:86:4c:b3:67:0f:8b:d5:84:1e:cf:66:a3:bd:
9f:a5:e2:7d:42:23:45:1a:40:fe:0d:3a:cb:d5:35:
2c:65:76:f5:0b:d5:d6:e4:da:8a:54:32:69:3c:dc:
38:81:6e:89:74:6d:ef:17:1b:f1:a3:bf:61:5d:f8:
a5:10:7d:58:3e:e4:b9:60:8c:8d:c1:d1:61:00:8c:
03:6d:e3:b5:39:d9:2c:60:7a:62:a6:fc:1c:11:5f:
d0:33:84:49:0b:5a:e9:74:bb:63:7b:e4:ba:a2:56:
12:b7:43:65:e8:ee:e8:dc:72:2a:ff:da:42:00:ec:
a6:ad:66:76:e1:6c:fa:9f:10:e9:3c:2f:07:8b:f9:
31:07:63:ba:18:bf:41:cc:64:0e:54:52:78:2a:4c:
bf:57:84:36:cc:4a:76:28:8f:f7:a2:c6:69:09:06:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:1B:83:DC:E2:57:AA:DD:90:77:6C:D3:2C:9E:21:0E:52:CD:27
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.8.0/23
Signature Algorithm: sha256WithRSAEncryption
40:f5:2c:de:82:54:2f:67:76:44:ff:12:7e:11:21:9c:22:5a:
1d:59:d3:a9:47:34:55:12:85:4b:5a:a1:ad:57:cb:65:32:e8:
67:15:30:c6:82:53:60:39:a4:03:6e:37:72:37:34:7a:a8:30:
12:0a:1d:d6:80:e2:36:d8:25:4b:f7:15:43:95:c4:5b:c8:a3:
7c:6c:32:dc:aa:48:83:f7:9a:4d:af:f5:62:ca:29:5f:05:ba:
37:31:fe:d2:48:73:09:09:ae:d3:92:7e:b6:2c:d4:05:c1:b1:
d1:dd:7f:e2:94:de:c2:b9:c6:c5:86:01:a5:a3:0f:14:74:bb:
5e:9e:e5:e1:da:e5:f2:b2:53:90:8f:c8:03:9e:de:a5:57:16:
75:68:4a:29:04:9e:e9:48:31:c0:18:22:af:d1:fa:27:c3:58:
3c:6a:62:ce:24:2b:b8:db:09:41:1c:0f:9a:13:95:bf:91:65:
6e:50:e9:7e:59:22:c9:91:29:8b:c8:c3:78:cf:83:37:af:0d:
77:a0:c8:0e:00:98:2c:f1:83:e1:76:4e:ef:49:a7:f7:c9:24:
62:c3:ea:05:3b:bb:ad:2c:47:09:ee:ee:df:db:d4:c9:a9:38:
e1:29:ef:83:f9:7f:a6:8b:cc:46:59:1c:fb:f5:57:16:f8:be:
82:95:e1:08
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUf2GPMROc/lnEXiEv/s7AvEp/bukwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwMzA2NTUwMFoX
DTI1MDkwMjA3MDAwMFowMzExMC8GA1UEAxMoM0JENDFCODNEQ0UyNTdBQUREOTA3
NzZDRDMyQzlFMjEwRTUyQ0QyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOYbXW3H3XN1M2I5Fk5qDU74h8pABtz0hJ4/NSm+Il3fUc8+RdezWxUADcXs
ND9cF+rySr2a+8NaMq0RwrnsCz+6OT8aEPEkwdQiis2UDOtceIneS9pIK4FPgZ+G
TLNnD4vVhB7PZqO9n6XifUIjRRpA/g06y9U1LGV29QvV1uTailQyaTzcOIFuiXRt
7xcb8aO/YV34pRB9WD7kuWCMjcHRYQCMA23jtTnZLGB6Yqb8HBFf0DOESQta6XS7
Y3vkuqJWErdDZeju6NxyKv/aQgDspq1mduFs+p8Q6TwvB4v5MQdjuhi/QcxkDlRS
eCpMv1eENsxKdiiP96LGaQkG2cECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ71BuD
3OJXqt2Qd2zTLJ4hDlLNJzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA4Mi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWf7CDANBgkqhkiG9w0BAQsFAAOCAQEAQPUs3oJUL2d2RP8SfhEh
nCJaHVnTqUc0VRKFS1qhrVfLZTLoZxUwxoJTYDmkA243cjc0eqgwEgod1oDiNtgl
S/cVQ5XEW8ijfGwy3KpIg/eaTa/1YsopXwW6NzH+0khzCQmu05J+tizUBcGx0d1/
4pTewrnGxYYBpaMPFHS7Xp7l4drl8rJTkI/IA57epVcWdWhKKQSe6UgxwBgir9H6
J8NYPGpiziQruNsJQRwPmhOVv5FlblDpflkiyZEpi8jDeM+DN68Nd6DIDgCYLPGD
4XZO70mn98kkYsPqBTu7rSxHCe7u39vUyak44Snvg/l/povMRlkc+/VXFvi+gpXh
CA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:11 2025 by rpki-client