Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa
File: AS141350.roa (raw, json)
Hash identifier: TngoPNXrmmVpeCLXGYjYffj/xo30UMlgM5sC/G7N8XU=
Subject key identifier: 9D:66:C4:E5:06:5D:EC:43:79:25:3C:52:9C:12:4A:5B:15:0B:68:52
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 36C725A55DC1BC08D3A7B5604BAB1A81C0A76B81
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa
Signing time: Tue 04 Mar 2025 01:19:07 +0000
ROA not before: Tue 04 Mar 2025 01:14:07 +0000
ROA not after: Tue 03 Mar 2026 01:19:07 +0000
asID: 141350
IP address blocks: 2001:df4:f1c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c7:25:a5:5d:c1:bc:08:d3:a7:b5:60:4b:ab:1a:81:c0:a7:6b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 4 01:14:07 2025 GMT
Not After : Mar 3 01:19:07 2026 GMT
Subject: CN=9D66C4E5065DEC4379253C529C124A5B150B6852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:be:7f:d8:09:1e:de:74:ed:69:75:56:16:
d6:12:02:cf:10:c2:4d:74:1d:29:25:c1:35:82:bd:
ee:cc:d9:4b:7e:fd:06:d9:bb:9f:51:42:e4:ab:a5:
b0:80:28:01:82:1f:39:b5:e0:a9:43:6d:e6:3a:c2:
f9:ab:bb:42:1e:5a:e2:40:6b:54:71:7f:72:29:5e:
a0:c7:ac:b2:cb:08:4d:e3:43:a5:44:58:79:2b:25:
f2:a9:45:21:72:5f:65:4b:0d:36:2e:56:4f:b1:4b:
ad:68:0f:ba:05:01:fd:f8:fe:f1:e6:91:6d:bd:e5:
ed:f6:6b:c7:c9:2d:f3:2d:59:44:35:7f:7c:57:35:
07:0f:bb:3c:1e:10:24:c6:cd:78:6d:cc:53:45:90:
4b:c5:b7:3d:f1:30:cf:44:85:60:47:6a:51:21:3c:
8c:a9:32:8e:ff:0c:18:d1:00:cc:63:d9:82:50:4d:
ed:67:a1:39:87:79:0e:2b:d5:9a:16:5a:c5:52:cc:
db:5d:1e:99:8e:73:49:67:1e:32:50:0c:ee:ea:18:
a2:1e:4d:fd:c6:21:e3:d0:b8:68:b5:d5:ec:9a:d6:
1d:46:0f:35:4d:61:31:26:25:f5:f2:5f:75:8d:d6:
72:5a:b9:4e:6d:a1:57:57:c9:d2:23:24:62:3f:1f:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:C4:E5:06:5D:EC:43:79:25:3C:52:9C:12:4A:5B:15:0B:68:52
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:f1c0::/48
Signature Algorithm: sha256WithRSAEncryption
60:97:2b:98:a8:e1:6e:1d:5b:1e:a9:33:d8:c0:e2:6b:85:6e:
d8:36:da:91:8c:22:d8:3e:b9:0d:0b:0f:92:a7:dd:33:ea:74:
ed:b2:0f:64:d8:1a:fd:73:4e:ab:df:2b:3a:a6:77:dc:37:07:
4a:54:33:1a:c3:06:f3:70:0d:40:59:b2:0e:b2:29:3c:07:e6:
58:3a:b7:c1:77:0b:5f:0b:24:b2:a7:62:2e:a0:f2:b0:c2:ef:
d3:dc:0b:98:d3:61:b6:24:1d:3b:2d:73:41:1a:c0:04:f7:6f:
26:c6:21:fd:f9:0c:d3:1d:77:17:d5:bc:b8:80:93:42:e7:ee:
22:5f:aa:75:b8:29:09:05:50:5f:39:8f:03:ab:6e:ab:e0:57:
7d:fb:77:84:6b:16:19:62:2a:dc:1a:5e:4e:81:53:6a:97:48:
ed:1a:7c:c0:42:83:fc:1f:de:2a:5c:8b:ac:2e:c7:e3:2f:a1:
cb:dc:64:7f:5f:72:8e:27:bf:23:16:16:af:23:85:3c:2a:e1:
eb:5e:da:d2:f3:f4:83:68:27:b2:3f:60:b3:ef:16:5a:ee:74:
a2:08:3f:73:f5:df:b5:b1:01:49:24:fb:be:19:d5:d9:05:50:
98:c1:12:19:f6:96:2c:6d:df:59:28:ab:0e:21:01:bd:7d:39:
30:d9:8d:68
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUNsclpV3BvAjTp7VgS6sagcCna4EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNDAxMTQwN1oX
DTI2MDMwMzAxMTkwN1owMzExMC8GA1UEAxMoOUQ2NkM0RTUwNjVERUM0Mzc5MjUz
QzUyOUMxMjRBNUIxNTBCNjg1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANjQvn/YCR7edO1pdVYW1hICzxDCTXQdKSXBNYK97szZS379Btm7n1FC5Kul
sIAoAYIfObXgqUNt5jrC+au7Qh5a4kBrVHF/cileoMessssITeNDpURYeSsl8qlF
IXJfZUsNNi5WT7FLrWgPugUB/fj+8eaRbb3l7fZrx8kt8y1ZRDV/fFc1Bw+7PB4Q
JMbNeG3MU0WQS8W3PfEwz0SFYEdqUSE8jKkyjv8MGNEAzGPZglBN7WehOYd5DivV
mhZaxVLM210emY5zSWceMlAM7uoYoh5N/cYh49C4aLXV7JrWHUYPNU1hMSYl9fJf
dY3Wclq5Tm2hV1fJ0iMkYj8fmfcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSdZsTl
Bl3sQ3klPFKcEkpbFQtoUjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTM1MC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfTxwDANBgkqhkiG9w0BAQsFAAOCAQEAYJcrmKjhbh1bHqkz
2MDia4Vu2DbakYwi2D65DQsPkqfdM+p07bIPZNga/XNOq98rOqZ33DcHSlQzGsMG
83ANQFmyDrIpPAfmWDq3wXcLXwsksqdiLqDysMLv09wLmNNhtiQdOy1zQRrABPdv
JsYh/fkM0x13F9W8uICTQufuIl+qdbgpCQVQXzmPA6tuq+BXfft3hGsWGWIq3Bpe
ToFTapdI7Rp8wEKD/B/eKlyLrC7H4y+hy9xkf19yjie/IxYWryOFPCrh617a0vP0
g2gnsj9gs+8WWu50ogg/c/XftbEBSST7vhnV2QVQmMESGfaWLG3fWSirDiEBvX05
MNmNaA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:59 2025 by rpki-client