Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa
File: AS141127.roa (raw, json)
Hash identifier: Qq76mw9PuUmbkOeE8b4smIC2Y7yn6IMQWJTHVyUY3e4=
Subject key identifier: 6E:A9:AE:FE:41:01:00:47:B0:9B:C9:D1:A5:B9:59:33:BB:B2:9F:64
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6A17E18081BA19974DFAB836AFDBF3F32C9791D1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa
Signing time: Tue 10 Dec 2024 05:00:18 +0000
ROA not before: Tue 10 Dec 2024 04:55:18 +0000
ROA not after: Tue 09 Dec 2025 05:00:18 +0000
asID: 141127
IP address blocks: 103.174.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:17:e1:80:81:ba:19:97:4d:fa:b8:36:af:db:f3:f3:2c:97:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:18 2024 GMT
Not After : Dec 9 05:00:18 2025 GMT
Subject: CN=6EA9AEFE41010047B09BC9D1A5B95933BBB29F64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:d3:ef:4d:6b:08:c7:68:fa:bf:a8:58:6a:
5a:ee:21:38:68:f9:44:53:b4:08:e9:be:5a:a9:91:
3b:46:88:e5:63:27:a1:30:f7:6c:5d:17:4e:42:ba:
84:aa:f4:8a:92:93:52:39:36:a3:ed:52:5d:bd:be:
9a:47:62:9a:ca:d4:b5:b9:c0:67:6a:bb:72:da:90:
8f:53:02:5d:18:75:e1:df:f3:e6:be:b8:b6:2a:36:
7b:54:01:ac:1c:be:8c:d5:fa:db:6b:65:55:b6:c9:
51:4e:cc:d9:7c:95:da:33:52:df:fe:b6:a1:55:81:
f3:0d:6f:77:2b:a0:f0:3a:7c:79:be:6d:52:6d:12:
5f:2b:a7:62:3a:ff:55:b9:09:81:a6:43:3c:dd:5b:
9e:da:8d:87:c3:cd:44:0d:6b:f9:ae:4b:a6:83:7e:
a5:c1:bf:45:b9:72:c7:f3:5b:bd:ba:8a:f0:1c:c6:
cd:e2:e5:df:bc:6f:f3:8b:9b:56:42:9a:e7:a7:fb:
fb:21:86:ab:30:c4:27:57:66:4f:15:f8:0e:1a:65:
35:f9:bf:39:d3:75:9d:c9:b9:91:6a:8a:c9:ca:59:
e0:00:f2:09:44:07:d3:0b:ce:05:89:79:20:22:47:
b9:fe:97:dc:32:b8:05:ba:65:19:8a:2c:1e:d5:79:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A9:AE:FE:41:01:00:47:B0:9B:C9:D1:A5:B9:59:33:BB:B2:9F:64
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141127.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.238.0/24
Signature Algorithm: sha256WithRSAEncryption
02:71:df:54:68:b7:40:b3:cc:67:08:5b:0f:2a:fc:47:8d:d1:
77:93:31:cb:de:f9:06:65:71:b9:c1:67:f4:7a:67:17:8c:68:
d5:17:c8:00:e5:6a:ec:0d:d6:7e:4b:c4:9f:2c:20:8a:fb:7b:
b8:96:76:4b:ca:1e:3f:9c:ab:68:0d:11:dd:01:5c:7f:66:06:
65:9e:62:9e:72:08:c8:49:86:0f:90:a2:d8:bc:f2:4f:73:6e:
10:db:54:83:88:28:84:2c:ee:78:a5:61:19:66:79:1e:cc:bc:
09:b5:eb:dc:1a:0a:05:98:d1:1f:57:26:c5:8f:41:c3:53:53:
57:d3:60:a6:1b:3a:7b:b3:f0:d2:4b:bc:1b:de:6c:11:be:93:
1f:24:8d:b1:74:cb:96:cb:e6:7b:fe:eb:32:81:09:40:fb:16:
39:74:30:46:e3:8b:e9:59:8d:33:e1:40:96:ad:8d:8f:30:fb:
89:9d:05:67:92:27:69:2e:99:3b:43:c9:da:fb:37:b9:2b:7f:
04:40:95:5e:67:7a:2e:1e:4a:3c:2b:83:3a:15:c5:11:5b:e4:
1a:6d:3d:c7:62:08:1c:51:25:56:12:e1:0b:ab:c9:59:5f:8a:
3e:54:34:36:04:31:8e:92:46:b9:69:93:e0:70:f9:52:6a:63:
96:e5:f0:ac
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUahfhgIG6GZdN+rg2r9vz8yyXkdEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxOFoX
DTI1MTIwOTA1MDAxOFowMzExMC8GA1UEAxMoNkVBOUFFRkU0MTAxMDA0N0IwOUJD
OUQxQTVCOTU5MzNCQkIyOUY2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9v0+9NawjHaPq/qFhqWu4hOGj5RFO0COm+WqmRO0aI5WMnoTD3bF0XTkK6
hKr0ipKTUjk2o+1SXb2+mkdimsrUtbnAZ2q7ctqQj1MCXRh14d/z5r64tio2e1QB
rBy+jNX622tlVbbJUU7M2XyV2jNS3/62oVWB8w1vdyug8Dp8eb5tUm0SXyunYjr/
VbkJgaZDPN1bntqNh8PNRA1r+a5LpoN+pcG/Rblyx/NbvbqK8BzGzeLl37xv84ub
VkKa56f7+yGGqzDEJ1dmTxX4DhplNfm/OdN1ncm5kWqKycpZ4ADyCUQH0wvOBYl5
ICJHuf6X3DK4BbplGYosHtV5NuUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRuqa7+
QQEAR7CbydGluVkzu7KfZDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEyNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeu7jANBgkqhkiG9w0BAQsFAAOCAQEAAnHfVGi3QLPMZwhbDyr8
R43Rd5Mxy975BmVxucFn9HpnF4xo1RfIAOVq7A3WfkvEnywgivt7uJZ2S8oeP5yr
aA0R3QFcf2YGZZ5innIIyEmGD5Ci2LzyT3NuENtUg4gohCzueKVhGWZ5Hsy8CbXr
3BoKBZjRH1cmxY9Bw1NTV9Ngphs6e7Pw0ku8G95sEb6THySNsXTLlsvme/7rMoEJ
QPsWOXQwRuOL6VmNM+FAlq2NjzD7iZ0FZ5InaS6ZO0PJ2vs3uSt/BECVXmd6Lh5K
PCuDOhXFEVvkGm09x2IIHFElVhLhC6vJWV+KPlQ0NgQxjpJGuWmT4HD5UmpjluXw
rA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:49 2025 by rpki-client