Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa
File: AS141103.roa (raw, json)
Hash identifier: FxMX+CiPlvNz/ZZLyJOC2VMY5ycFN0u+kNA3r942qC8=
Subject key identifier: 0D:99:D3:F5:BC:C3:A1:72:68:F0:37:93:0C:3A:4F:8C:3D:A0:E2:4D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 538AFB751FF4E15DF82A9A50234255B596435AAE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa
Signing time: Tue 10 Dec 2024 05:00:04 +0000
ROA not before: Tue 10 Dec 2024 04:55:04 +0000
ROA not after: Tue 09 Dec 2025 05:00:04 +0000
asID: 141103
IP address blocks: 103.156.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8a:fb:75:1f:f4:e1:5d:f8:2a:9a:50:23:42:55:b5:96:43:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:04 2024 GMT
Not After : Dec 9 05:00:04 2025 GMT
Subject: CN=0D99D3F5BCC3A17268F037930C3A4F8C3DA0E24D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:c4:45:e5:2f:e5:e3:93:47:ba:3a:cf:b4:
f4:2f:08:a6:2a:93:fa:00:b4:e7:d6:3a:09:11:25:
e3:b4:4a:db:5c:d6:7f:5f:e1:2f:c0:93:f2:35:ed:
a4:58:fd:59:f7:4e:62:bd:61:5f:97:05:4a:c0:c4:
e5:fb:e8:b4:e3:9a:59:05:52:72:14:64:92:8b:4a:
3b:bd:1e:7c:e6:71:4c:6a:3b:44:27:2e:51:f3:2d:
18:78:6d:87:05:37:e0:5e:eb:45:de:38:21:fe:4f:
71:52:15:ab:9e:dc:c2:39:66:fc:f2:ad:5c:5d:19:
a7:46:63:b8:25:c4:0f:3c:21:7f:6d:78:ed:0a:72:
b1:f9:95:7a:fa:d4:cd:32:e9:f3:8f:82:bb:ac:ac:
25:0e:91:76:9e:eb:f6:db:f1:b5:8a:7a:16:86:1d:
81:b4:4d:d0:cf:68:5c:5b:05:61:75:24:cd:78:19:
b1:92:68:4f:81:25:1e:63:71:1e:34:89:85:43:64:
58:c3:83:1b:32:06:cc:b2:b3:aa:2e:7c:ab:85:34:
9a:ba:02:f6:6d:55:19:7c:b8:9b:5a:6b:9c:d5:7c:
28:d2:63:ed:8f:65:a5:e0:92:1e:d9:05:1a:40:51:
9d:eb:3c:93:22:2b:0e:f3:56:89:fe:6b:31:50:42:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:D3:F5:BC:C3:A1:72:68:F0:37:93:0C:3A:4F:8C:3D:A0:E2:4D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.252.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:10:fd:ac:06:ac:95:1f:89:87:9f:b9:66:fc:52:d6:fc:b2:
64:39:8b:4f:75:f7:6c:f9:9e:bf:3d:4d:f3:46:05:d7:53:97:
98:78:32:69:40:4d:5d:9b:3c:79:c4:51:c2:49:74:0d:50:c2:
bf:64:05:51:27:ec:f1:5b:31:b8:19:90:b1:c5:5b:b2:76:e7:
9a:19:81:45:63:ba:46:4b:9c:6e:b2:3c:38:e1:98:ab:70:ef:
6a:2f:00:f3:fb:33:b5:d0:d7:13:07:66:6f:06:3e:56:8e:52:
4c:a8:04:fb:f6:33:c6:5d:9d:c2:18:62:33:a2:b0:1e:c0:81:
05:6f:c5:f8:fa:b3:5b:d0:6a:09:a6:9c:1f:1a:81:cc:e3:6b:
7b:af:56:36:e7:98:d7:2b:91:fb:23:8e:54:25:51:ea:8c:b6:
32:4e:cc:af:a3:fd:b6:56:59:05:e2:4e:c9:7e:9b:bf:0e:48:
a1:98:58:a7:a1:17:33:18:20:2b:af:d5:b5:fd:9e:55:29:57:
b2:5f:6a:2a:1e:de:60:a8:59:4a:35:5d:ba:3a:40:e1:2e:54:
dc:bc:2e:a0:0f:7a:11:96:cb:30:de:d9:46:68:4b:6b:4a:5d:
db:8d:a7:43:98:28:a1:43:e1:4c:e1:f7:38:9c:45:5f:be:a3:
07:d8:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:47 2025 by rpki-client