Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142316.roa
File: AS142316.roa (raw, json)
Hash identifier: eFRq3HOkuakrisr/1Eq03aWMfxCQZ/ywS5T/RGLmCsQ=
Subject key identifier: 66:B3:E9:D4:0B:3C:A5:42:B5:10:F0:19:ED:C3:7D:75:8D:7C:60:86
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 42AE01678BE253C3F5378B765C9DD98503D26490
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142316.roa
Signing time: Mon 03 Mar 2025 04:58:27 +0000
ROA not before: Mon 03 Mar 2025 04:53:27 +0000
ROA not after: Mon 02 Mar 2026 04:58:27 +0000
asID: 142316
IP address blocks: 103.168.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ae:01:67:8b:e2:53:c3:f5:37:8b:76:5c:9d:d9:85:03:d2:64:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 3 04:53:27 2025 GMT
Not After : Mar 2 04:58:27 2026 GMT
Subject: CN=66B3E9D40B3CA542B510F019EDC37D758D7C6086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:57:75:5e:e3:b8:b8:68:1b:0f:88:df:cf:
39:42:41:06:71:60:c4:63:09:75:0d:da:62:46:9c:
6c:5e:60:9e:92:99:fb:40:93:d1:e4:14:f4:29:b0:
b3:29:49:dd:5b:c4:6e:d5:a5:e2:de:db:aa:66:7c:
ab:e6:bf:c8:75:db:7f:91:fc:14:83:d5:48:97:49:
6c:a1:22:5d:6a:e3:a9:c0:a0:a4:82:36:0c:59:2b:
05:10:2a:75:7b:26:5a:83:8b:67:b0:af:b0:43:89:
a0:5a:9c:83:16:76:3f:4c:1f:42:44:8a:dd:11:ca:
b7:8a:f3:3d:0d:3d:75:82:9d:90:5e:b6:ad:8d:cd:
c6:1b:8e:33:53:80:6a:20:cc:02:df:05:b5:b1:02:
cb:bb:77:13:ed:13:39:62:18:63:3f:4f:05:7e:17:
4f:9b:45:20:2f:4d:a5:f6:cb:7b:0e:87:63:14:98:
2f:63:af:b1:f0:e0:15:6e:a0:ca:7f:92:9b:9c:69:
cf:c0:e7:43:ab:fe:57:5b:2f:70:1b:4b:cd:ab:85:
8c:8c:17:f0:20:16:dd:3f:01:ea:ae:53:19:a4:9f:
31:a7:46:2f:74:52:96:b5:0c:db:1d:93:13:cd:dc:
e4:c4:0a:91:43:43:86:bb:54:fe:43:b9:83:6d:e9:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B3:E9:D4:0B:3C:A5:42:B5:10:F0:19:ED:C3:7D:75:8D:7C:60:86
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142316.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.163.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2a:1b:72:78:67:1b:e0:4b:cc:46:0c:05:90:99:5b:41:d3:
59:08:5a:2b:dd:2d:2a:f2:c7:f8:6d:e7:8c:a3:9c:82:16:8a:
4f:52:1f:11:53:4d:bf:90:1f:4c:7c:cb:08:f0:0b:e8:6a:6d:
a4:38:ed:e0:ad:74:0d:16:fd:14:c7:f5:36:5d:bc:c2:b8:fd:
1c:58:8d:16:43:20:cd:0b:07:06:18:25:43:e0:2e:4a:eb:2f:
c5:c3:b6:8e:d7:f6:25:f3:be:fc:83:45:8a:a3:5b:0a:a3:68:
7c:5f:f7:ea:8a:21:4d:47:69:c3:43:67:ab:da:fc:dc:29:07:
0e:34:3c:c5:0b:47:f8:e2:59:54:15:e7:56:df:a8:a3:76:c4:
c5:c3:f6:0a:1f:aa:1e:18:55:e6:99:c9:ba:06:7c:d6:80:49:
96:76:47:17:bb:d8:6b:2e:95:fc:d0:b8:fb:f1:9d:89:2b:3a:
41:44:2e:ae:f9:95:e7:d3:69:bc:2c:83:7d:80:34:66:96:ef:
d1:76:35:5b:ee:8f:70:fd:d8:d2:3d:bd:d3:73:55:6b:c4:27:
86:e0:52:d0:61:bb:55:74:2a:da:bf:d7:8d:f6:04:e4:fd:c1:
d1:6a:44:6c:ec:a8:b8:fe:73:b1:ec:07:56:85:72:23:97:f8:
f8:6a:90:50
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUQq4BZ4viU8P1N4t2XJ3ZhQPSZJAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwMzA0NTMyN1oX
DTI2MDMwMjA0NTgyN1owMzExMC8GA1UEAxMoNjZCM0U5RDQwQjNDQTU0MkI1MTBG
MDE5RURDMzdENzU4RDdDNjA4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK53V3Ve47i4aBsPiN/POUJBBnFgxGMJdQ3aYkacbF5gnpKZ+0CT0eQU9Cmw
sylJ3VvEbtWl4t7bqmZ8q+a/yHXbf5H8FIPVSJdJbKEiXWrjqcCgpII2DFkrBRAq
dXsmWoOLZ7CvsEOJoFqcgxZ2P0wfQkSK3RHKt4rzPQ09dYKdkF62rY3NxhuOM1OA
aiDMAt8FtbECy7t3E+0TOWIYYz9PBX4XT5tFIC9NpfbLew6HYxSYL2OvsfDgFW6g
yn+Sm5xpz8DnQ6v+V1svcBtLzauFjIwX8CAW3T8B6q5TGaSfMadGL3RSlrUM2x2T
E83c5MQKkUNDhrtU/kO5g23pfUMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRms+nU
CzylQrUQ8Bntw311jXxghjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMxNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeoozANBgkqhkiG9w0BAQsFAAOCAQEAdyobcnhnG+BLzEYMBZCZ
W0HTWQhaK90tKvLH+G3njKOcghaKT1IfEVNNv5AfTHzLCPAL6GptpDjt4K10DRb9
FMf1Nl28wrj9HFiNFkMgzQsHBhglQ+AuSusvxcO2jtf2JfO+/INFiqNbCqNofF/3
6oohTUdpw0Nnq9r83CkHDjQ8xQtH+OJZVBXnVt+oo3bExcP2Ch+qHhhV5pnJugZ8
1oBJlnZHF7vYay6V/NC4+/GdiSs6QUQurvmV59NpvCyDfYA0Zpbv0XY1W+6PcP3Y
0j2903NVa8QnhuBS0GG7VXQq2r/XjfYE5P3B0WpEbOyouP5zsewHVoVyI5f4+GqQ
UA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:59 2025 by rpki-client