Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa
File:                     AS147135.roa (raw, json)
Hash identifier:          8/w/s/XbIhte8ni6VY56ZXHFOQh59UEUqsQWbTotPj0=
Subject key identifier:   E5:91:9A:B0:3C:A6:17:60:4B:11:1F:13:71:E9:A1:E9:B5:BC:0D:A0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3364912B17568D64662ADC11DA476A72374FD0F5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa
Signing time:             Tue 10 Dec 2024 05:00:23 +0000
ROA not before:           Tue 10 Dec 2024 04:55:23 +0000
ROA not after:            Tue 09 Dec 2025 05:00:23 +0000
asID:                     147135
IP address blocks:        103.176.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:64:91:2b:17:56:8d:64:66:2a:dc:11:da:47:6a:72:37:4f:d0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 04:55:23 2024 GMT
            Not After : Dec  9 05:00:23 2025 GMT
        Subject: CN=E5919AB03CA617604B111F1371E9A1E9B5BC0DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:ab:c7:96:66:45:1d:0b:00:c3:71:80:16:
                    3c:83:77:b7:6d:3c:1a:02:b2:5b:cd:05:59:be:09:
                    a6:3e:89:c4:02:79:c1:f1:29:d4:96:8d:50:40:bf:
                    7b:dd:d0:de:af:67:94:ab:a3:85:01:4b:ed:36:cc:
                    c8:95:4b:fd:10:39:3a:dd:a8:06:7b:d8:0c:cf:d1:
                    eb:62:d6:4b:c8:3a:af:b2:d3:b7:2b:b2:39:70:27:
                    ac:e7:7f:3d:f3:16:56:b2:3b:03:2c:9a:9a:e9:3e:
                    6d:67:d7:6d:19:a7:f9:3e:78:37:4e:2b:48:c5:b1:
                    ce:fc:9d:d9:e8:7b:4d:21:33:52:78:b3:03:f5:da:
                    ec:6b:ed:b2:08:fb:be:7c:56:74:71:14:97:6d:3e:
                    92:18:42:ec:a7:27:07:7b:a9:4e:d9:68:fc:12:1a:
                    1f:ba:eb:6c:9d:ad:5a:fc:a1:cc:3e:70:fe:75:35:
                    48:82:bc:58:00:80:c5:c1:45:9e:6a:cb:98:63:00:
                    20:ce:ec:68:66:a9:a0:a1:25:4e:e4:33:84:6c:47:
                    d0:de:5c:05:11:7c:67:fc:9d:1e:9c:52:f5:69:66:
                    e9:8f:7b:ef:5c:61:96:5b:09:13:ae:bf:f8:9c:b0:
                    0a:c1:4d:79:12:67:cd:e9:97:2f:ef:3e:c0:5d:aa:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:91:9A:B0:3C:A6:17:60:4B:11:1F:13:71:E9:A1:E9:B5:BC:0D:A0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:03:cc:c9:e5:71:c7:74:7d:93:84:29:94:ba:fc:b0:7e:3c:
         f5:b7:ee:d5:15:f4:99:b9:74:d9:11:8e:ac:5b:24:f8:39:a0:
         44:62:10:5c:c7:ac:0c:0b:27:48:c7:8e:a2:51:ff:33:e9:6b:
         64:93:3c:68:1f:4e:3c:b2:c1:6c:04:d4:9e:44:58:f3:ed:c9:
         50:a9:e2:07:c9:37:80:6f:40:5e:28:54:d9:ba:eb:50:fa:fe:
         27:09:df:87:a8:15:b2:b0:e4:89:d4:a2:ad:4a:5c:17:aa:c5:
         a2:cf:f4:92:9d:2f:4f:f6:d7:96:36:f9:7d:5a:de:0a:6a:87:
         b8:12:6a:70:cc:c4:71:63:73:d2:7a:db:05:d1:97:f3:c9:03:
         12:b3:6a:8c:d3:79:d7:d4:75:c5:d5:4a:1d:00:c8:f6:ee:aa:
         5b:28:08:d9:1e:9f:33:5e:e4:95:b1:31:ff:bf:62:12:57:b5:
         e4:b9:3b:4d:9d:43:74:52:c0:e7:97:4a:ef:75:cd:7c:b9:ab:
         7a:2c:b8:a9:21:df:aa:ed:6f:ee:07:fa:a2:a7:89:a7:35:f7:
         76:81:fe:67:85:6b:2d:b7:46:94:4b:ae:c5:a7:13:4e:27:94:
         b9:54:07:08:ae:d6:6b:9b:c0:88:d3:00:56:c9:7d:b2:89:5b:
         51:d2:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:59 2025 by rpki-client