Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa
File: AS147161.roa (raw, json)
Hash identifier: uO4/MSOTradlDSaBOmHlsV1y2EQy+A9uM4wHxphpXxI=
Subject key identifier: 8F:42:60:B5:47:2D:8C:11:3F:C4:83:75:A6:82:2C:0D:F5:6D:41:88
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1C77CC4FA7A1AF09DB60DEFB368BFE3494519630
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa
Signing time: Thu 09 Jan 2025 04:00:00 +0000
ROA not before: Thu 09 Jan 2025 03:55:00 +0000
ROA not after: Thu 08 Jan 2026 04:00:00 +0000
asID: 147161
IP address blocks: 103.177.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:77:cc:4f:a7:a1:af:09:db:60:de:fb:36:8b:fe:34:94:51:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 9 03:55:00 2025 GMT
Not After : Jan 8 04:00:00 2026 GMT
Subject: CN=8F4260B5472D8C113FC48375A6822C0DF56D4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ff:e2:69:85:85:8e:91:6f:29:10:3d:b8:9f:
b8:f3:95:47:4b:42:ec:3b:71:44:08:9b:1f:49:b3:
3f:0e:f6:80:3b:00:b5:81:3f:ca:f5:d3:63:3f:ad:
34:b5:fb:d9:31:82:71:29:54:31:b3:d7:30:ad:92:
57:d1:d2:5d:77:1d:0b:74:e5:2f:ba:6b:12:1a:2f:
ce:29:f0:93:c2:3b:5e:58:6b:9e:3d:c0:96:d1:98:
12:21:f0:00:0a:80:03:20:ab:ba:19:b1:48:15:47:
ed:04:c3:81:ff:c4:fc:dc:a9:d3:28:74:03:a4:b6:
41:2d:04:fe:05:03:87:f0:8f:fb:8b:2a:11:af:13:
a6:ca:d6:bc:d9:8b:68:aa:c2:02:c3:17:a3:c3:d4:
30:5e:17:5a:e4:21:9b:a0:a2:e5:5f:ea:1e:dc:7c:
52:78:dd:0e:06:a5:8c:f1:3b:60:17:4e:d2:50:64:
fd:55:e4:00:1e:86:24:d4:99:26:b8:6e:9d:94:8c:
63:87:34:22:3a:b0:28:95:c7:5e:ce:24:35:0b:bb:
68:d6:38:58:d4:4d:5b:77:75:8c:5e:54:70:34:c7:
a8:32:a7:ce:a6:f0:c7:36:63:44:a9:70:1d:17:9e:
e6:e1:ef:66:cb:bf:8e:b6:96:11:ff:0b:8b:c3:4a:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:60:B5:47:2D:8C:11:3F:C4:83:75:A6:82:2C:0D:F5:6D:41:88
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.212.0/24
Signature Algorithm: sha256WithRSAEncryption
24:11:cb:a1:5d:24:ff:89:92:5b:93:6f:62:e0:1c:1a:24:d4:
9f:3e:ca:38:82:42:92:38:8f:83:4a:b0:a5:e5:e5:7c:25:9f:
e6:25:22:23:0d:49:6d:2f:eb:e7:e5:5f:27:90:d8:8b:0d:68:
64:e1:c7:bd:91:35:e3:81:ca:a1:b0:15:b4:9a:c3:1e:44:dd:
26:52:7e:75:3e:6a:47:6b:06:a0:77:62:97:c0:47:24:ba:97:
c1:98:57:e9:1c:41:a1:62:9f:ad:f4:a0:ce:16:5e:c6:08:d6:
01:36:d7:3b:5a:cb:7d:d1:ff:6a:f5:13:70:83:e0:08:ee:d3:
57:eb:8f:14:92:e3:43:5d:9f:49:ac:4a:3d:d9:e7:b3:48:6b:
69:f2:9a:7f:81:bb:b0:49:12:a1:2f:cb:f8:ff:ca:79:3a:9d:
dc:3a:04:56:c7:30:54:48:ea:25:58:27:08:dc:f0:42:02:5f:
65:e1:08:69:28:2f:a2:02:c1:0a:7b:56:96:e9:4e:8a:35:30:
b7:a8:a0:d0:10:3a:a3:3d:23:3c:a9:47:cf:58:aa:36:d0:4f:
b2:c1:e7:40:91:4e:1d:e5:6a:0e:25:7d:56:84:02:6f:ae:5b:
e3:a5:e0:cc:ba:88:05:f6:b8:13:75:f4:95:e8:81:ef:26:65:
f6:fe:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:47 2025 by rpki-client