Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa
File: AS141137.roa (raw, json)
Hash identifier: YrIyueyqDpFdN9AQvGLve0zHh+ZrI+ZOpKdWchi/pU4=
Subject key identifier: FC:81:D3:A1:FD:8D:70:69:C6:B6:FD:8F:A0:48:A5:4E:7B:A6:C1:C9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0C5512C92E208A45B1E42BFC2DFEC5C7A5C70AFF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa
Signing time: Thu 20 Mar 2025 05:08:13 +0000
ROA not before: Thu 20 Mar 2025 05:03:13 +0000
ROA not after: Thu 19 Mar 2026 05:08:13 +0000
asID: 141137
IP address blocks: 103.167.11.0/24 maxlen: 24
117.102.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:55:12:c9:2e:20:8a:45:b1:e4:2b:fc:2d:fe:c5:c7:a5:c7:0a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 20 05:03:13 2025 GMT
Not After : Mar 19 05:08:13 2026 GMT
Subject: CN=FC81D3A1FD8D7069C6B6FD8FA048A54E7BA6C1C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:2f:2a:8b:1e:06:35:a9:e1:61:ae:80:2a:
89:6a:6d:f5:1c:32:d8:57:8a:2c:2f:15:07:ea:31:
e6:47:b6:97:4d:1a:db:46:97:47:f9:c3:3a:ea:16:
9e:7a:4a:9c:db:5e:4b:aa:1b:69:ab:f9:fb:1a:57:
c2:d4:28:7a:d8:00:ba:a2:60:3f:44:38:5d:d8:9a:
96:44:8d:7f:ed:a6:e8:d2:8f:4b:45:34:bd:4e:22:
9e:08:d1:a0:43:c4:fb:86:f2:9a:a4:81:4d:82:96:
90:a5:08:90:97:5e:05:10:02:de:d9:ea:15:5e:d6:
92:f3:5b:ab:78:c5:ed:90:28:16:e6:8f:48:7e:22:
ca:df:84:db:13:c6:c1:ef:70:c0:f0:cd:63:0e:61:
25:2f:08:41:81:07:2e:8a:8b:ad:d1:4a:44:8f:78:
4e:fc:5a:fd:81:1e:4f:5b:cf:bd:27:65:eb:c1:20:
bc:8f:22:7b:7e:17:5c:9f:64:5a:2c:34:6f:69:fd:
18:a4:3f:8f:3f:80:d4:15:79:f9:63:ac:1d:4e:dd:
6a:0c:7e:c3:05:f9:4a:ae:07:0a:b3:9a:6e:9c:8e:
2a:5b:76:ca:e3:aa:62:b8:a7:0c:cd:36:31:da:e9:
09:ed:95:9d:48:f0:59:c0:83:cd:d1:38:ab:77:04:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:81:D3:A1:FD:8D:70:69:C6:B6:FD:8F:A0:48:A5:4E:7B:A6:C1:C9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.11.0/24
117.102.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:55:b6:8a:d2:aa:19:77:29:c4:9a:ea:03:3c:e5:8c:a0:60:
93:02:db:d1:38:68:ed:0f:3d:c2:47:91:80:e0:a0:ef:c6:32:
6c:85:10:b6:4a:fc:c1:5a:a1:41:6c:21:df:be:6e:af:47:72:
3d:de:0d:52:bc:5b:de:37:d8:5d:38:dd:58:12:a3:f1:e3:c2:
ba:a3:40:c1:51:7b:a8:e4:8c:25:91:d5:5c:4c:26:cc:31:7d:
d0:ef:c4:2e:2e:28:33:46:c4:90:d9:40:ac:51:b2:d7:14:39:
fd:15:a2:a6:9b:6e:1a:21:7e:c3:bb:cd:62:d8:58:ff:36:65:
1f:ab:3f:42:68:6b:f6:96:55:ad:fa:d6:87:63:4a:f2:9e:2b:
75:32:ba:90:e2:ed:b3:19:0b:90:b0:b2:1d:da:26:8c:fe:1b:
e3:9e:6f:d7:d5:a6:fa:33:0f:51:63:c9:5d:c1:a3:47:90:50:
77:ed:03:7f:f3:ff:a3:3d:d9:a1:f7:37:fe:47:f2:64:14:48:
bf:83:e4:ea:b3:ff:f7:da:0f:43:aa:b6:62:42:9d:a7:d7:77:
ed:0a:d0:17:f1:98:12:52:c8:f2:d6:a0:71:8a:65:e2:7c:c9:
6e:bd:16:e8:76:62:1f:bf:b0:0a:93:6d:58:43:74:2e:42:7a:
b5:e4:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:39 2025 by rpki-client