Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141960.roa
File: AS141960.roa (raw, json)
Hash identifier: ntJWH2jR6HI6LTt2SoUABYSGwGvY18hbjR7Fj4GKZ34=
Subject key identifier: 08:EF:DA:1D:76:BC:77:CF:46:AD:6F:2A:0B:E4:A5:29:B9:F3:52:8F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3469ABA306C9A4909B4A1B14822389266FD6F238
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141960.roa
Signing time: Tue 10 Dec 2024 05:00:09 +0000
ROA not before: Tue 10 Dec 2024 04:55:09 +0000
ROA not after: Tue 09 Dec 2025 05:00:09 +0000
asID: 141960
IP address blocks: 103.165.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:69:ab:a3:06:c9:a4:90:9b:4a:1b:14:82:23:89:26:6f:d6:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:09 2024 GMT
Not After : Dec 9 05:00:09 2025 GMT
Subject: CN=08EFDA1D76BC77CF46AD6F2A0BE4A529B9F3528F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c3:cb:5f:6b:b7:9c:ca:7d:a3:31:41:a5:f5:
f4:1c:b7:23:55:5f:dd:9c:39:ff:dd:bf:51:d0:e9:
f8:9f:af:2a:b3:7d:a8:a7:a9:6d:b4:8b:74:07:e2:
09:47:5d:3d:61:39:7b:e2:7e:63:b9:ca:49:95:28:
0d:c9:c1:74:43:bb:04:79:22:7b:64:cd:f7:3a:2a:
6e:6f:3f:0c:b2:d4:17:20:b3:94:f5:72:bf:4c:ca:
04:f5:ce:80:9f:88:b0:60:fc:44:32:ff:12:90:7e:
b9:68:5a:ac:53:21:ee:03:d9:66:a4:70:2b:37:73:
4d:76:01:38:04:be:d8:b0:7e:82:da:a5:e7:97:90:
dc:91:0e:7e:f1:99:2c:d8:5d:a9:f8:41:b2:56:8d:
8c:fa:60:5f:1b:3f:49:b6:d2:3d:df:1f:09:e5:88:
06:cd:0b:b8:ce:8c:c0:9f:10:6b:80:14:48:aa:28:
c7:b0:d8:47:39:2a:a2:05:f1:c4:e1:af:b1:e5:8e:
74:fa:56:bd:f5:89:b2:1f:e6:ca:de:a8:30:a4:ae:
23:58:66:77:10:05:85:21:91:5a:ca:14:5d:b5:1b:
67:7f:63:9d:8d:6a:3f:3a:7c:69:27:f8:7d:11:b3:
89:75:58:c9:ba:75:e5:8b:28:25:52:98:8b:36:ca:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:DA:1D:76:BC:77:CF:46:AD:6F:2A:0B:E4:A5:29:B9:F3:52:8F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.253.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c0:07:5e:92:9c:4a:c1:29:d3:ab:f4:e6:7b:7d:52:7f:5f:
1d:9b:b1:ce:f0:31:80:27:25:51:f6:62:8a:49:e4:67:09:55:
32:ba:62:8f:23:e4:0b:6f:c2:67:68:87:7c:c6:5e:6f:08:66:
47:f3:d4:97:07:08:42:51:61:fd:d4:60:49:be:e0:ac:c5:66:
ab:9f:aa:50:5b:5e:05:23:1a:d5:e2:9d:d5:47:49:ef:0a:55:
4a:09:d9:0e:74:f4:1a:59:37:0b:89:01:f3:9c:6b:2c:24:2f:
52:9c:70:c2:0c:61:43:fd:fb:fd:2a:83:a4:77:61:43:df:8d:
6f:45:a9:2a:c8:c6:37:bb:70:c2:53:78:10:7c:fc:59:4b:c1:
16:9d:93:27:e6:8c:46:83:c5:dd:6a:b4:10:54:e7:10:07:c4:
13:cc:28:0e:96:64:6d:e8:db:13:51:b2:87:c2:fa:bc:30:27:
b2:c4:03:e0:62:b8:5f:6d:03:a9:b2:d3:a2:f3:b3:b1:3b:74:
cc:ac:16:9a:73:74:ba:d2:48:d3:ad:56:38:ac:4c:6e:37:fa:
f8:00:8d:04:d9:61:30:29:d4:6d:88:b2:c8:fd:34:c8:76:fa:
f0:b0:3f:78:4e:24:b3:54:9a:1f:e6:d8:3d:7b:b2:3c:14:ca:
a8:bc:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:30 2025 by rpki-client