Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142331.roa
File:                     AS142331.roa (raw, json)
Hash identifier:          HcNGL/n/n91mulVwIXE5g88YkD2nVUi9LrcxDRPXksk=
Subject key identifier:   BA:67:BA:F3:55:51:BC:FB:64:1A:16:1B:F6:B6:39:68:EE:2E:06:7D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1D3B8BD4F0E758E8C29D3624FD6CF27DD6C0A713
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142331.roa
Signing time:             Thu 28 Nov 2024 05:00:00 +0000
ROA not before:           Thu 28 Nov 2024 04:55:00 +0000
ROA not after:            Thu 27 Nov 2025 05:00:00 +0000
asID:                     142331
IP address blocks:        113.192.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3b:8b:d4:f0:e7:58:e8:c2:9d:36:24:fd:6c:f2:7d:d6:c0:a7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Nov 28 04:55:00 2024 GMT
            Not After : Nov 27 05:00:00 2025 GMT
        Subject: CN=BA67BAF35551BCFB641A161BF6B63968EE2E067D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:d6:3d:5c:26:d5:28:63:cc:6e:f4:1e:ab:
                    0c:ba:4b:ca:ef:f8:ee:1f:ad:e9:53:40:cf:73:89:
                    4d:5e:fc:b4:c7:a8:4b:4e:d8:f9:2f:d9:24:02:f9:
                    30:cc:c3:53:a3:4f:7f:f4:04:e1:06:02:5c:ea:ff:
                    31:3a:9e:f3:84:6b:e8:33:b6:d1:bb:86:df:b4:1d:
                    1a:a3:3a:7d:91:8b:66:4e:3d:3e:79:ce:9f:1a:3d:
                    77:bd:57:f7:23:48:da:b7:f5:e3:f4:dc:5e:f4:5c:
                    30:ce:5f:5d:b0:4f:4a:63:13:4a:53:fd:3b:ae:ed:
                    72:90:aa:ba:18:39:80:6c:6a:6c:fd:18:62:45:2f:
                    3d:a3:96:5c:8a:01:6f:6e:a7:31:a1:17:91:9e:29:
                    6b:8a:9c:bd:ab:ff:fd:db:78:f7:35:6d:40:bf:65:
                    4f:f5:2b:06:30:ce:30:42:69:fa:d4:23:e0:91:0a:
                    ea:08:31:ae:6b:6c:dd:5d:95:32:ae:85:7a:5d:a6:
                    42:ec:04:c0:18:34:38:cd:c6:ff:90:e5:55:d0:74:
                    f8:8f:ac:af:ab:0e:eb:87:46:78:82:fc:1a:58:95:
                    74:d1:6d:09:37:83:42:8a:b3:90:c1:d5:bc:2c:dc:
                    1f:c5:2e:80:00:12:ab:e3:22:84:80:77:94:c9:ec:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:67:BA:F3:55:51:BC:FB:64:1A:16:1B:F6:B6:39:68:EE:2E:06:7D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:36:cc:c6:a5:2e:58:48:1b:af:76:1c:9b:7c:e0:c4:7c:e5:
         70:37:03:81:3d:16:34:c7:c4:88:d8:ad:19:80:e1:b2:f4:0a:
         dd:83:10:a8:42:cc:28:d7:af:47:b8:db:10:1d:bb:00:85:f8:
         89:6e:1f:41:8b:79:33:a1:4b:49:29:f0:f9:d7:56:db:46:15:
         4d:da:af:af:5f:16:6b:8c:1a:10:d9:71:de:d0:3f:1c:af:e6:
         a9:64:0d:90:44:00:0a:c1:17:dc:99:b3:a2:ba:28:b4:0b:b4:
         47:3f:6a:da:32:b4:0d:9f:e5:4f:da:74:89:90:51:9e:0f:41:
         87:43:90:14:da:78:fb:87:27:e8:c2:f2:c3:0b:cf:67:4c:da:
         c7:27:a3:67:47:3e:85:01:91:f8:54:80:48:2a:b6:0a:1c:07:
         a1:8b:4b:c3:5d:53:12:0b:e6:0d:50:4b:ed:40:2a:32:36:11:
         08:21:42:07:8c:20:97:90:b6:aa:5b:b9:65:c6:4e:13:bb:4f:
         c3:f9:2a:2f:50:a3:e4:3d:63:1a:a7:02:fd:56:de:26:b3:41:
         50:ed:85:a6:8a:79:2f:68:67:71:9a:c9:2b:18:99:26:a6:a9:
         fd:82:08:fb:c8:f1:67:67:22:b5:7a:1c:61:a9:6b:38:9f:1d:
         e6:6e:7e:d0
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUHTuL1PDnWOjCnTYk/WzyfdbApxMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyODA0NTUwMFoX
DTI1MTEyNzA1MDAwMFowMzExMC8GA1UEAxMoQkE2N0JBRjM1NTUxQkNGQjY0MUEx
NjFCRjZCNjM5NjhFRTJFMDY3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJRI1j1cJtUoY8xu9B6rDLpLyu/47h+t6VNAz3OJTV78tMeoS07Y+S/ZJAL5
MMzDU6NPf/QE4QYCXOr/MTqe84Rr6DO20buG37QdGqM6fZGLZk49PnnOnxo9d71X
9yNI2rf14/TcXvRcMM5fXbBPSmMTSlP9O67tcpCquhg5gGxqbP0YYkUvPaOWXIoB
b26nMaEXkZ4pa4qcvav//dt49zVtQL9lT/UrBjDOMEJp+tQj4JEK6ggxrmts3V2V
Mq6Fel2mQuwEwBg0OM3G/5DlVdB0+I+sr6sO64dGeIL8GliVdNFtCTeDQoqzkMHV
vCzcH8UugAASq+MihIB3lMnsofcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS6Z7rz
VVG8+2QaFhv2tjlo7i4GfTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHHAAzANBgkqhkiG9w0BAQsFAAOCAQEAGDbMxqUuWEgbr3Ycm3zg
xHzlcDcDgT0WNMfEiNitGYDhsvQK3YMQqELMKNevR7jbEB27AIX4iW4fQYt5M6FL
SSnw+ddW20YVTdqvr18Wa4waENlx3tA/HK/mqWQNkEQACsEX3JmzorootAu0Rz9q
2jK0DZ/lT9p0iZBRng9Bh0OQFNp4+4cn6MLywwvPZ0zaxyejZ0c+hQGR+FSASCq2
ChwHoYtLw11TEgvmDVBL7UAqMjYRCCFCB4wgl5C2qlu5ZcZOE7tPw/kqL1Cj5D1j
GqcC/VbeJrNBUO2Fpop5L2hncZrJKxiZJqap/YII+8jxZ2citXocYalrOJ8d5m5+
0A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:51 2025 by rpki-client