Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142315.roa
File: AS142315.roa (raw, json)
Hash identifier: qfQB5oESlVwxqs2VoMaoXT/aVpCdK8zxX1ZHYSXmaPk=
Subject key identifier: 88:6D:96:7C:3E:B4:EB:8F:3B:F3:1A:29:7D:2B:34:92:0D:BB:EF:78
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 203BA81073AA9BA810E587AE96018AF9400BA77E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142315.roa
Signing time: Mon 17 Mar 2025 04:00:00 +0000
ROA not before: Mon 17 Mar 2025 03:55:00 +0000
ROA not after: Mon 16 Mar 2026 04:00:00 +0000
asID: 142315
IP address blocks: 103.225.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3b:a8:10:73:aa:9b:a8:10:e5:87:ae:96:01:8a:f9:40:0b:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 17 03:55:00 2025 GMT
Not After : Mar 16 04:00:00 2026 GMT
Subject: CN=886D967C3EB4EB8F3BF31A297D2B34920DBBEF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:2e:47:28:8b:8c:2a:39:1d:64:75:9c:1b:a5:
80:b4:b0:67:9c:2a:85:9a:86:76:8c:82:56:da:73:
6f:01:9f:46:35:57:82:6b:e2:32:29:96:28:56:6a:
7a:82:88:ff:f8:91:80:43:ca:b3:26:f1:3f:25:a5:
bb:08:b4:6a:17:38:3a:c0:13:7c:d1:10:27:ec:b9:
37:80:3d:ed:73:fc:cf:c6:47:8d:f0:a4:41:d2:23:
46:f5:26:9c:ab:5f:43:ba:83:d6:a7:03:28:9e:f6:
97:eb:f9:98:88:c1:a3:1f:e0:e0:79:e1:a8:04:a0:
cf:36:93:bb:f8:8a:8c:50:40:e4:ee:5b:56:c2:e4:
a4:df:ac:b1:c4:7e:40:8c:e8:5e:fe:47:d3:8d:67:
9c:4b:81:58:17:c3:14:9a:bb:0a:90:6e:fd:00:61:
04:1a:a6:05:27:47:6b:8a:21:e9:73:3b:30:93:e8:
c0:4e:bf:13:44:9a:40:31:26:07:8c:f7:e2:df:0e:
b7:20:86:4d:68:dc:b9:eb:d1:bc:06:4e:9e:23:31:
72:8b:54:4b:1f:5a:9d:48:e3:b7:0b:bc:af:8d:33:
d0:10:d1:a3:b4:83:15:b7:66:db:42:5c:56:4a:6b:
2e:36:78:e1:a5:c5:f8:bc:51:de:a7:a6:54:1d:e4:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:96:7C:3E:B4:EB:8F:3B:F3:1A:29:7D:2B:34:92:0D:BB:EF:78
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.225.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:81:c2:03:49:ef:e8:1d:b4:ed:b2:6e:46:3a:01:44:d9:94:
04:52:61:69:3d:4f:3d:62:66:f2:a9:90:32:63:63:67:e3:8b:
72:4e:07:61:f9:a3:32:1e:10:cc:8e:69:4c:8d:58:3f:7f:c1:
ac:03:b2:35:2c:6f:5f:c0:fe:81:2f:03:e1:58:06:8a:d7:ff:
8b:3d:13:b6:25:67:cb:dc:1a:6c:09:54:76:87:18:8a:69:76:
cc:d7:db:8b:12:63:9c:bf:1e:9b:db:93:d8:57:e6:83:51:ad:
08:76:96:d5:27:79:3f:e2:b5:26:dc:32:4f:b9:5f:cd:64:f0:
55:83:5d:ea:a6:2a:f2:39:25:03:a7:3f:5d:1c:c4:91:96:96:
73:ac:3c:3d:b0:3a:62:07:7f:f9:e5:a6:71:02:2f:01:11:c9:
27:07:cd:af:da:98:a3:d0:cc:d5:ba:d0:c4:f8:09:85:5a:a1:
97:0d:b3:fc:93:d1:10:fb:60:5f:c1:87:2a:fb:51:ab:9b:18:
71:b7:e7:0b:c0:0e:62:23:12:3d:d2:c1:b4:39:18:09:06:4c:
cf:29:90:45:21:23:ca:a3:ef:3c:13:bf:db:5b:13:a9:94:5a:
10:b3:64:39:74:14:55:30:d5:75:01:e3:d6:2d:30:0a:74:33:
8b:15:66:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:57:20 2025 by rpki-client