Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141123.roa
File: AS141123.roa (raw, json)
Hash identifier: clK0mlryzSuO2vG+5tiQ7e6AMGe8GCUvbV76LsAoRK0=
Subject key identifier: 43:49:6F:45:7C:CB:4E:63:CC:E7:48:C1:A8:7E:47:85:FF:95:15:50
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 01C35EAE0CB9DBA7CFCD54A9C078F0956EE38184
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141123.roa
Signing time: Tue 10 Dec 2024 05:00:03 +0000
ROA not before: Tue 10 Dec 2024 04:55:03 +0000
ROA not after: Tue 09 Dec 2025 05:00:03 +0000
asID: 141123
IP address blocks: 103.158.28.0/24 maxlen: 24
103.170.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c3:5e:ae:0c:b9:db:a7:cf:cd:54:a9:c0:78:f0:95:6e:e3:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:03 2024 GMT
Not After : Dec 9 05:00:03 2025 GMT
Subject: CN=43496F457CCB4E63CCE748C1A87E4785FF951550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:79:81:33:58:6a:fe:37:fc:d3:64:2f:5d:
fd:5c:82:a8:07:70:97:8a:57:51:d9:54:2c:f3:cf:
2d:67:ec:5f:b1:0c:ff:1c:3a:8d:dd:de:a0:1f:e0:
4f:a6:21:58:1d:e1:92:1b:12:cc:8b:0a:aa:47:42:
73:d8:6e:0d:f2:da:9b:13:77:fb:63:71:38:ba:1c:
33:3d:7b:08:5d:a0:5f:4d:d5:eb:91:74:4c:0e:e4:
a0:a4:71:a2:7c:fb:e9:4c:5c:21:b2:bc:07:05:45:
86:cb:24:3b:bf:04:2d:e3:2e:27:2d:fb:51:65:cb:
8d:67:8b:57:40:26:e8:39:3c:7b:50:c3:ba:a9:67:
74:67:83:80:29:27:3e:2b:ae:7d:cb:66:1a:a1:fa:
36:d7:0b:ec:3d:54:09:ba:2a:3a:64:2f:40:9a:d8:
27:13:fb:76:d4:76:a4:91:eb:d4:5a:37:aa:1c:cc:
49:db:37:28:8e:0c:4a:97:c5:04:7a:37:a7:2d:3b:
11:f4:69:3e:3e:8d:8c:e0:9a:1f:0f:92:b1:c8:ae:
8c:bd:04:74:cd:72:01:96:d2:ff:81:04:98:56:c0:
f3:7a:08:56:68:ed:cc:45:dd:1a:42:a1:be:6c:8c:
c8:95:25:15:59:6c:b4:78:4d:be:76:cd:5e:28:71:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:6F:45:7C:CB:4E:63:CC:E7:48:C1:A8:7E:47:85:FF:95:15:50
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141123.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.28.0/24
103.170.22.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c2:50:2c:14:fa:b2:49:0f:47:2e:7b:98:fe:48:48:38:7c:
5d:78:77:a9:b5:49:37:fc:5c:41:bb:e9:df:b0:56:7b:ae:51:
31:e4:17:83:61:90:8b:7e:62:70:c8:b3:c6:cd:cb:28:9d:96:
62:2a:46:d6:f5:4f:68:18:be:e1:9f:5a:33:31:0d:d5:8d:50:
dd:8c:05:d2:ba:16:13:d0:3d:6a:98:79:8d:ec:6f:77:a2:92:
04:4a:2b:9d:f9:3b:92:34:93:ff:60:2c:2f:67:71:a2:37:65:
ae:c4:ff:6d:74:92:cd:b9:1a:e7:01:a5:2b:c3:75:3e:c5:d4:
86:13:df:b2:71:70:be:1b:79:f4:8b:c0:13:39:44:b7:a2:b1:
a0:ce:c3:b1:56:61:ec:2d:bd:32:99:57:ba:74:fe:7d:86:5e:
ee:2d:04:1d:82:72:0c:45:39:b8:b0:18:25:c1:38:05:ac:80:
fe:8b:a2:06:23:5a:33:b3:83:0e:9f:f0:57:ec:22:d6:73:da:
d8:80:ef:c3:77:ef:ce:88:ca:d2:57:25:6e:0a:0e:8d:91:81:
e7:18:4c:e2:fb:12:a5:db:c5:85:04:0b:34:bd:bb:2b:ce:38:
3a:0c:e3:7f:16:3c:92:f1:9b:9f:f2:9f:a1:68:98:9e:cf:3b:
59:e1:0d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:09 2025 by rpki-client