Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141902.roa
File:                     AS141902.roa (raw, json)
Hash identifier:          fUMePxkmS6//KLvPgVIpIAvl8hZTD0Qk89z7vkWBIxI=
Subject key identifier:   1F:56:FB:7A:46:99:52:07:62:C0:62:33:15:CF:06:60:2C:F6:05:30
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       72F43F32A194850D1F464475C04038D0145C651A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141902.roa
Signing time:             Tue 10 Dec 2024 05:00:18 +0000
ROA not before:           Tue 10 Dec 2024 04:55:18 +0000
ROA not after:            Tue 09 Dec 2025 05:00:18 +0000
asID:                     141902
IP address blocks:        103.163.134.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f4:3f:32:a1:94:85:0d:1f:46:44:75:c0:40:38:d0:14:5c:65:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 04:55:18 2024 GMT
            Not After : Dec  9 05:00:18 2025 GMT
        Subject: CN=1F56FB7A4699520762C0623315CF06602CF60530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ed:56:3f:f0:96:d4:85:aa:41:53:21:d2:93:
                    13:41:49:74:48:53:1b:fa:76:ec:0a:04:81:80:9f:
                    05:7a:25:69:cd:75:27:c8:b5:58:ae:0d:32:84:80:
                    fc:b5:af:46:70:a0:91:5a:77:e4:c7:9e:e7:fc:02:
                    51:f3:fb:6d:ea:fb:43:b2:b7:d5:f7:1e:dc:c8:f6:
                    61:6f:c7:69:3b:62:56:a4:03:09:29:44:d7:4d:3f:
                    3f:f1:af:78:f0:4b:d9:cd:f1:78:ac:d3:21:cd:97:
                    b3:a2:67:b6:7a:06:95:c3:a2:9f:83:11:d2:b5:88:
                    76:46:18:eb:c6:c9:93:69:a2:02:a0:b5:70:3a:30:
                    c7:1c:19:49:bb:97:92:9b:dd:a9:f8:b7:99:f7:80:
                    67:41:cd:66:7d:7a:85:0a:43:77:f2:89:fb:c2:31:
                    ce:fb:69:db:b2:c6:1e:2f:97:2a:71:36:9f:bd:a0:
                    28:fa:f4:82:f8:6d:32:ae:3a:26:24:cc:b5:31:98:
                    c0:e6:50:44:61:8c:a6:3e:a9:7d:c7:27:48:a6:d4:
                    c9:6a:8e:92:3b:89:88:e0:b0:15:11:7c:02:e2:3b:
                    54:8f:dd:54:5b:5f:6a:d9:e9:7f:39:69:dc:44:e4:
                    3c:5e:ae:fb:07:95:93:77:e1:af:56:28:c9:fe:9b:
                    b8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:56:FB:7A:46:99:52:07:62:C0:62:33:15:CF:06:60:2C:F6:05:30
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141902.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:08:ea:92:41:a3:2f:38:ed:d4:95:14:f9:2c:c9:94:32:c2:
         ed:7a:f2:5e:be:d9:2f:70:ce:a1:39:30:aa:5c:46:5d:5f:99:
         a4:57:da:d1:e6:2a:7e:c3:49:9f:44:db:43:b9:22:31:8b:fe:
         b6:28:6c:fb:f8:bb:53:2f:db:35:d1:05:56:14:5d:32:48:51:
         7b:92:cd:5c:f2:29:32:7d:fd:4d:41:86:24:70:be:59:75:91:
         85:74:ce:ec:ec:01:8d:03:17:f8:5c:a2:56:ad:ab:3a:27:6a:
         5d:30:aa:62:1d:58:dd:fd:1e:20:8c:76:3d:4f:df:e4:33:4e:
         e4:0d:1b:a2:cd:4b:97:9a:ac:7a:a4:da:e6:cf:c3:a2:8f:11:
         38:16:9a:42:79:93:56:32:71:41:18:e5:97:ae:78:76:ea:a7:
         d3:9e:20:01:01:4f:e7:d9:56:0d:4a:ab:96:03:02:f4:a8:38:
         78:0d:e7:9a:c0:21:9a:5b:c8:a4:3a:3c:d9:cb:e1:4e:c7:f2:
         25:d9:20:76:86:b4:79:e1:83:dc:46:65:ab:a7:12:4a:48:5f:
         cc:d9:63:8d:90:f0:d4:20:ef:03:c1:46:71:74:a8:07:ed:7f:
         17:71:1b:19:40:84:4d:9f:47:5d:d0:66:00:f4:e9:66:39:47:
         99:f6:0c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:29 2025 by rpki-client