Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa
File: AS149723.roa (raw, json)
Hash identifier: oOhWkBscEcN36vIOLGuED/RBOKxz0AFVdkFcYWujAjA=
Subject key identifier: A9:2F:B6:05:4E:AE:47:04:85:DD:A4:27:34:82:24:B0:A4:33:0A:A3
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5ADF007FB013BEE9FA1D36A71424EB5F798BD183
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa
Signing time: Mon 09 Dec 2024 08:00:00 +0000
ROA not before: Mon 09 Dec 2024 07:55:00 +0000
ROA not after: Mon 08 Dec 2025 08:00:00 +0000
asID: 149723
IP address blocks: 103.138.53.0/24 maxlen: 24
2001:df2:79c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:df:00:7f:b0:13:be:e9:fa:1d:36:a7:14:24:eb:5f:79:8b:d1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 9 07:55:00 2024 GMT
Not After : Dec 8 08:00:00 2025 GMT
Subject: CN=A92FB6054EAE470485DDA427348224B0A4330AA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:2a:63:b9:b5:ac:7d:db:ec:bb:1d:ad:6e:
23:f4:82:a9:ca:d0:0b:f6:0f:5a:c9:00:e8:96:c3:
1a:68:d4:58:1b:aa:7b:cc:59:8f:3d:51:4e:67:dd:
64:19:b3:82:cf:03:39:21:e0:4f:0e:38:12:0a:63:
be:b7:c3:83:42:b7:e9:a1:d7:cf:79:30:c8:4a:16:
df:40:53:36:25:00:67:d4:eb:ec:f8:66:e6:25:67:
60:9d:84:c8:90:37:e7:5b:99:89:21:53:3b:c9:50:
45:26:f3:f4:48:3d:ca:e4:dd:5b:c2:1f:50:f4:29:
c7:6a:24:9e:18:f2:e8:0f:64:7e:df:2a:b4:a2:3b:
3d:23:30:4b:eb:95:12:75:48:62:2d:29:cd:3c:93:
e2:27:72:00:ff:64:48:15:b9:5c:09:e1:b7:14:3c:
23:74:dd:3e:1d:98:00:cf:31:f4:e3:e4:6f:bf:6d:
b8:f7:65:36:29:8d:e9:c3:ad:be:36:d8:b1:8a:36:
40:9a:31:a5:5c:3d:41:5a:55:5c:79:a9:2d:5f:2d:
cf:94:aa:10:37:77:48:61:ed:80:f1:f1:14:67:c9:
c8:93:70:08:65:10:a5:11:0c:a1:db:07:7f:3a:05:
2a:ab:41:e5:c9:5e:be:f6:7f:04:4c:0a:6e:bd:55:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2F:B6:05:4E:AE:47:04:85:DD:A4:27:34:82:24:B0:A4:33:0A:A3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.53.0/24
IPv6:
2001:df2:79c0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:94:84:24:03:8a:4a:f7:27:17:04:1b:df:34:5e:79:7a:5f:
bb:16:b7:4c:8a:cc:dc:48:07:ad:25:d4:32:2a:15:c2:ac:7d:
08:5d:17:2e:5e:9b:be:7e:61:cd:7c:e9:76:7a:1b:99:2d:5c:
e9:38:f2:ae:3b:9d:42:95:ee:63:9b:77:0d:fb:fc:ac:c4:fa:
83:94:6f:f0:2a:4e:fd:d9:7a:39:d8:3c:75:df:63:eb:b4:34:
6e:2a:c8:07:0f:b5:ed:49:f0:5d:05:c2:6b:18:8d:67:fd:bb:
34:c4:2b:c7:27:d1:9d:ac:84:55:b2:70:49:df:40:e0:bb:13:
c0:8f:49:e3:9a:14:22:43:15:60:ea:1f:e6:6b:b9:0c:03:64:
0d:70:33:15:9f:a2:1c:6e:69:5b:0f:3e:52:f2:79:70:47:38:
e4:f3:41:e7:f3:4a:9c:e5:43:d8:87:f2:e5:b4:83:c3:ca:f7:
20:be:4a:48:49:ec:f1:4b:73:1e:4d:bf:5c:04:89:7d:fc:7b:
22:f9:1c:fc:eb:ec:73:c3:cf:2d:cc:ec:cf:6c:ab:3c:97:a4:
be:6b:97:db:5f:c8:f7:74:7c:92:45:fc:1a:05:eb:3a:b6:d1:
90:32:72:bf:6e:7b:db:93:3e:5c:f7:cd:df:b3:42:c7:e8:e1:
55:5d:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:24 2025 by rpki-client