Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa
File: AS141646.roa (raw, json)
Hash identifier: rRmdYBHUwrvCwF4tTJe0eg4UqAgoJp8YuzKW/2wL2OM=
Subject key identifier: F7:BC:34:88:A0:F2:45:2D:9F:77:3C:E0:A9:D3:B4:8D:04:52:B4:E4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 44F2679216FCBF391A835A7F024E0682DEB4E1E2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa
Signing time: Mon 06 Jan 2025 08:47:05 +0000
ROA not before: Mon 06 Jan 2025 08:42:05 +0000
ROA not after: Mon 05 Jan 2026 08:47:05 +0000
asID: 141646
IP address blocks: 103.162.72.0/24 maxlen: 24
103.234.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f2:67:92:16:fc:bf:39:1a:83:5a:7f:02:4e:06:82:de:b4:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 6 08:42:05 2025 GMT
Not After : Jan 5 08:47:05 2026 GMT
Subject: CN=F7BC3488A0F2452D9F773CE0A9D3B48D0452B4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:13:a2:85:94:09:42:0e:8e:42:f4:93:2b:
bc:e4:22:16:83:ab:b5:27:82:3d:8b:18:ff:17:7c:
54:00:67:6d:b9:c3:ea:bd:df:f3:30:ed:75:ca:a6:
d8:6f:59:17:6d:c9:d2:16:61:22:9d:3a:3f:f6:7f:
1d:fa:2b:e2:60:0c:59:0f:b9:6a:91:8e:1e:ae:e9:
e7:c9:b7:90:fa:ea:97:99:6d:e9:66:7b:cc:f5:62:
c4:76:0c:46:38:d8:cf:00:08:3d:4c:eb:2c:29:5e:
d6:88:f9:be:9e:75:c4:33:54:59:cd:94:82:cb:72:
7e:d4:22:14:ea:11:c3:6c:8d:07:45:56:27:3e:a1:
9c:4f:d3:6e:ed:f5:97:1f:16:c3:ef:3d:35:cc:cb:
7c:44:39:52:af:69:e2:39:53:ba:17:a2:c9:e1:59:
21:47:e9:63:71:bb:85:7a:db:a5:44:59:92:c5:51:
93:05:73:06:2b:e4:e4:ff:97:3a:91:cd:b9:27:42:
bc:3a:84:a6:cd:6d:db:38:2c:a9:34:64:66:3e:c8:
cd:55:75:cf:2d:8e:1d:c3:17:9f:fc:28:1c:f8:17:
31:4f:ef:65:35:c8:14:9f:57:43:22:d0:e1:75:1f:
a4:ca:8d:a8:fe:26:e3:96:d6:50:25:57:e6:1f:8e:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BC:34:88:A0:F2:45:2D:9F:77:3C:E0:A9:D3:B4:8D:04:52:B4:E4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.72.0/24
103.234.95.0/24
Signature Algorithm: sha256WithRSAEncryption
56:57:ad:2d:95:cd:e7:4d:1c:4c:51:7f:72:fe:35:83:91:8f:
2f:37:ea:52:e3:94:d9:84:50:0e:c8:c6:7e:52:0c:78:99:c8:
de:1a:4d:53:8f:ef:6d:9d:6f:d3:a2:91:6b:5e:14:8a:29:d0:
9f:fb:33:f9:a2:cf:00:f5:22:cf:e1:a0:cf:5b:e9:a5:d0:b1:
51:c8:0a:49:fb:fd:92:66:03:05:ea:1c:9b:04:18:f3:fa:71:
7c:b5:bd:b5:a0:99:b4:34:cd:29:c4:7e:aa:7d:cd:a1:3f:9d:
f5:54:7a:dc:e0:c5:b1:80:14:1b:66:19:56:bb:e7:c7:41:16:
77:7e:21:48:ef:2b:1c:ef:19:0c:6e:ee:9e:94:13:6c:c0:12:
8a:38:93:23:4c:fc:fa:7a:98:88:4f:19:fb:5d:23:6e:38:05:
6b:1f:5e:c7:23:9c:e9:85:1a:5f:de:65:45:49:8d:62:63:32:
25:24:e5:fb:a7:af:ee:2b:51:51:01:f3:80:6f:f2:88:19:ae:
f3:0f:b3:dd:88:9b:c9:37:5e:8c:16:81:a3:57:48:73:88:53:
91:fa:ad:e3:70:71:98:9a:fb:f1:bf:0c:ed:ac:fa:75:72:f9:
8b:33:09:2f:12:c9:d4:8b:68:12:0e:39:5f:29:37:61:b1:f1:
bb:90:cc:d2
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIURPJnkhb8vzkag1p/Ak4Ggt604eIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwNjA4NDIwNVoX
DTI2MDEwNTA4NDcwNVowMzExMC8GA1UEAxMoRjdCQzM0ODhBMEYyNDUyRDlGNzcz
Q0UwQTlEM0I0OEQwNDUyQjRFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM66E6KFlAlCDo5C9JMrvOQiFoOrtSeCPYsY/xd8VABnbbnD6r3f8zDtdcqm
2G9ZF23J0hZhIp06P/Z/Hfor4mAMWQ+5apGOHq7p58m3kPrql5lt6WZ7zPVixHYM
RjjYzwAIPUzrLCle1oj5vp51xDNUWc2UgstyftQiFOoRw2yNB0VWJz6hnE/Tbu31
lx8Ww+89NczLfEQ5Uq9p4jlTuheiyeFZIUfpY3G7hXrbpURZksVRkwVzBivk5P+X
OpHNuSdCvDqEps1t2zgsqTRkZj7IzVV1zy2OHcMXn/woHPgXMU/vZTXIFJ9XQyLQ
4XUfpMqNqP4m45bWUCVX5h+O4mMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBT3vDSI
oPJFLZ93POCp07SNBFK05DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY0Ni5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGeiSAMEAGfqXzANBgkqhkiG9w0BAQsFAAOCAQEAVletLZXN500c
TFF/cv41g5GPLzfqUuOU2YRQDsjGflIMeJnI3hpNU4/vbZ1v06KRa14UiinQn/sz
+aLPAPUiz+Ggz1vppdCxUcgKSfv9kmYDBeocmwQY8/pxfLW9taCZtDTNKcR+qn3N
oT+d9VR63ODFsYAUG2YZVrvnx0EWd34hSO8rHO8ZDG7unpQTbMASijiTI0z8+nqY
iE8Z+10jbjgFax9exyOc6YUaX95lRUmNYmMyJSTl+6ev7itRUQHzgG/yiBmu8w+z
3YibyTdejBaBo1dIc4hTkfqt43BxmJr78b8M7az6dXL5izMJLxLJ1ItoEg45Xyk3
YbHxu5DM0g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:23 2025 by rpki-client