Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141939.roa
File: AS141939.roa (raw, json)
Hash identifier: Zacbnnp8v5jXWtMI7mqEt20XKUYyIkfCk+gnB2qNLrU=
Subject key identifier: 83:5D:1E:30:BF:06:B2:FE:94:3A:70:E7:53:35:C5:F6:95:C0:01:06
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 54B3070AF103A3ED95F17E221AC416B16AEAAEAD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141939.roa
Signing time: Tue 10 Dec 2024 05:00:15 +0000
ROA not before: Tue 10 Dec 2024 04:55:15 +0000
ROA not after: Tue 09 Dec 2025 05:00:15 +0000
asID: 141939
IP address blocks: 103.164.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b3:07:0a:f1:03:a3:ed:95:f1:7e:22:1a:c4:16:b1:6a:ea:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:15 2024 GMT
Not After : Dec 9 05:00:15 2025 GMT
Subject: CN=835D1E30BF06B2FE943A70E75335C5F695C00106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:23:2c:df:dc:91:30:56:03:93:ed:59:a9:
b6:fe:39:a2:3a:05:06:6b:9c:6d:e9:23:56:e1:00:
6c:f5:b5:b6:9f:35:67:8a:1a:01:9e:d0:65:18:da:
b9:54:08:de:d6:7f:68:65:8e:90:52:67:1a:90:91:
76:4d:29:ec:0b:c5:57:19:43:0c:86:2a:c8:46:f2:
f2:15:a5:40:3e:8f:e5:c3:d9:13:de:23:47:48:ba:
2e:39:77:ea:74:2f:83:41:56:7f:df:cc:48:9e:b2:
99:13:5c:de:9a:a2:58:48:a2:e8:d7:3a:3a:76:28:
b4:d7:f2:a2:a1:a5:d0:c5:d2:39:1a:03:18:d4:21:
f2:13:57:d8:93:96:b7:d9:cc:9a:11:19:f4:61:2e:
bc:46:12:ce:44:9b:bb:7b:2d:3e:29:86:f8:38:bd:
3f:d6:3a:9d:5b:04:7b:24:1a:65:89:c7:8e:f8:5c:
16:fa:a9:1d:06:8a:fb:fc:72:ca:eb:bd:81:67:36:
16:40:a1:24:26:bb:bf:ca:68:b3:58:1f:86:01:13:
9e:d8:fc:80:34:3a:0f:fa:a1:61:fb:41:fc:5a:6f:
02:da:49:6a:e1:15:19:56:8a:b3:61:dc:36:61:aa:
91:d2:f5:5e:f8:43:ca:fb:a9:9f:16:ec:5c:2d:23:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:1E:30:BF:06:B2:FE:94:3A:70:E7:53:35:C5:F6:95:C0:01:06
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.192.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:7f:2f:94:72:1b:bf:bb:de:ba:43:b9:c4:6f:99:ed:9a:6c:
c8:f3:85:af:f8:5a:86:e1:66:5f:dc:86:88:65:3d:7c:a7:f1:
2f:e4:57:dd:27:65:12:db:9d:3a:37:2a:26:48:10:4d:32:dd:
e6:c9:e4:fd:6d:48:77:3e:bc:f6:5a:e0:4c:96:69:0f:8b:f7:
e4:27:b1:70:af:94:dd:f1:14:cd:ec:bc:6f:4e:ac:7c:95:19:
a7:a3:df:d1:15:2b:61:ee:a2:c9:dd:a7:55:b0:a8:cf:55:0f:
11:31:7e:c0:4b:c6:1c:45:8e:01:33:72:1d:1b:36:cc:cc:bd:
7a:2c:71:85:58:06:e7:71:17:17:cb:cf:5c:bc:3e:cc:59:9f:
4b:4f:7a:b5:b4:14:dc:ab:33:6b:6e:cc:e6:95:91:6a:a5:68:
d1:1d:58:53:1e:79:fd:f4:bc:b2:0f:d2:78:45:2d:cc:fe:a9:
2a:81:d9:27:3d:81:5c:9b:15:9f:cf:bf:7d:5f:e2:29:7f:3a:
87:37:4c:e9:36:e7:d9:66:23:96:fd:32:84:2e:d4:1b:ea:a4:
2c:79:3d:15:18:be:5d:33:a5:04:f1:4d:67:0d:2c:2a:a1:7a:
d0:48:22:e3:e1:08:aa:05:87:89:1e:d4:77:9d:08:91:76:ac:
44:a8:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:45 2025 by rpki-client