Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141101.roa
File: AS141101.roa (raw, json)
Hash identifier: I4bgA+DIfzLXwXfhQFMLXabaM1rdbukjn29mUuLfRVM=
Subject key identifier: 8F:82:76:D8:14:A0:42:EB:96:B9:58:90:89:1E:D5:77:CF:0E:D1:37
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 04979FD93FAE83FB137E45F93BD1A4DBE1468E01
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141101.roa
Signing time: Fri 28 Feb 2025 04:20:54 +0000
ROA not before: Fri 28 Feb 2025 04:15:54 +0000
ROA not after: Fri 27 Feb 2026 04:20:54 +0000
asID: 141101
IP address blocks: 103.156.235.0/24 maxlen: 24
2001:df5:380::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:97:9f:d9:3f:ae:83:fb:13:7e:45:f9:3b:d1:a4:db:e1:46:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 28 04:15:54 2025 GMT
Not After : Feb 27 04:20:54 2026 GMT
Subject: CN=8F8276D814A042EB96B95890891ED577CF0ED137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:59:7e:cd:81:8a:e7:64:dc:9a:ad:ca:01:
2d:4f:dc:bf:16:7c:e3:76:89:9e:f9:b3:6b:38:75:
cc:aa:07:21:86:3c:79:10:15:bc:ed:7e:74:9f:1e:
20:a2:a0:74:05:58:5f:62:40:63:af:ab:9b:53:b8:
d1:b3:73:76:a8:85:dc:a3:93:cd:4c:d4:3c:f9:2c:
83:e7:43:04:58:58:0e:f1:2c:8b:91:b3:81:e0:ac:
53:0f:f3:0a:b4:e9:25:2f:85:34:d9:3e:8b:a4:6c:
40:11:ca:d2:6f:f5:1a:0c:9d:a2:1b:4a:0c:5a:30:
f0:3e:c3:5f:66:39:d2:5b:02:dd:db:88:aa:4d:99:
88:b9:38:2d:ec:58:09:f7:0d:5d:5e:cc:36:5c:93:
b9:54:20:ab:e1:7a:7f:0f:49:da:85:c5:50:db:b0:
ab:4f:f5:4d:a0:0f:c9:12:a8:09:91:90:e9:2f:cc:
97:fa:60:57:c4:e5:70:e8:a6:1f:6f:ab:5a:4c:13:
1b:ba:65:4b:71:be:b5:67:d1:ee:79:aa:56:39:16:
c4:fc:54:05:84:93:cc:ff:bf:cd:15:92:b2:ff:20:
6c:dc:a7:2d:77:f5:4f:0e:4e:a7:85:f1:51:34:71:
5d:8d:3a:ce:60:ec:d3:17:d9:3e:7e:56:a5:07:4d:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:76:D8:14:A0:42:EB:96:B9:58:90:89:1E:D5:77:CF:0E:D1:37
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141101.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.235.0/24
IPv6:
2001:df5:380::/48
Signature Algorithm: sha256WithRSAEncryption
5b:7d:df:94:62:ca:ec:b4:d0:bf:7b:f5:6c:bd:b5:50:0b:66:
43:fb:b1:5f:ef:e1:d8:f2:c5:34:6e:44:c5:0a:85:d6:38:05:
fe:66:68:df:82:05:6b:0c:aa:37:dd:f9:aa:64:fe:30:d3:48:
02:24:fc:42:44:e0:6b:c0:6f:54:80:19:6f:3b:0d:77:67:48:
25:01:85:32:c8:34:4f:f3:c1:e4:7e:f0:17:19:76:54:c6:b6:
ad:69:22:57:22:62:3f:cb:3f:21:e7:40:06:e6:0f:9e:53:bc:
d0:42:62:0f:31:40:74:d0:37:c9:a2:07:f3:ae:89:6a:aa:a1:
e2:8e:97:b5:0d:69:2f:b5:ae:74:4d:0c:3c:87:8e:7c:87:85:
24:38:df:d2:3a:89:83:1c:d4:ff:36:4e:45:ac:6f:65:d5:aa:
61:ba:3d:59:12:c6:2d:85:5d:f3:06:42:9d:9b:11:1c:42:5e:
dc:32:f7:51:19:de:09:bb:e2:f4:97:eb:ed:16:04:7b:ec:7b:
36:4b:c7:3e:13:ed:f4:dc:58:75:d5:6e:a7:31:28:07:24:b3:
a7:9e:b3:97:fb:89:64:26:c0:77:89:24:c4:cc:ea:9b:e7:97:
28:6f:90:3e:b5:4d:2e:3d:25:a7:48:dc:6c:51:8d:7a:b0:f1:
b6:9f:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:15 2025 by rpki-client