Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149935.roa
File: AS149935.roa (raw, json)
Hash identifier: BK4TNnjdXPKXBXScX9TtTuK9WtdJX8xAI0I/jED7nEc=
Subject key identifier: 87:5F:F4:43:F4:A4:26:AB:24:A7:A8:DD:B6:DE:CF:AF:F1:2A:39:86
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 65E36E8C85FB7E88829789F88DDD139F8F087818
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149935.roa
Signing time: Fri 14 Feb 2025 08:00:00 +0000
ROA not before: Fri 14 Feb 2025 07:55:00 +0000
ROA not after: Fri 13 Feb 2026 08:00:00 +0000
asID: 149935
IP address blocks: 103.6.166.0/24 maxlen: 24
103.146.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e3:6e:8c:85:fb:7e:88:82:97:89:f8:8d:dd:13:9f:8f:08:78:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 14 07:55:00 2025 GMT
Not After : Feb 13 08:00:00 2026 GMT
Subject: CN=875FF443F4A426AB24A7A8DDB6DECFAFF12A3986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:9e:b8:5e:b5:aa:7e:50:28:ee:7b:e8:43:
e9:a8:5f:d2:88:17:73:72:67:7f:a5:89:1e:b9:13:
0d:42:bc:47:d0:6f:56:0d:27:a5:b5:fe:c4:e4:dd:
af:e6:f9:d6:76:cb:d1:f6:2f:c9:48:7f:ff:19:2f:
fb:1c:20:b7:fb:e3:06:c8:aa:1b:c9:4b:e7:90:3d:
a2:f7:6b:40:3c:e1:24:86:5c:47:a0:54:00:3a:41:
ab:68:45:ca:54:80:14:ca:d1:02:29:be:bb:14:99:
ea:f0:77:14:87:34:e2:2f:79:91:10:2c:cd:60:bc:
3f:c8:6b:92:db:c8:99:58:3c:54:48:79:f0:d3:3e:
4c:01:bd:53:8f:7e:bd:eb:70:cc:a8:ab:a7:a3:a9:
2f:b7:5e:e3:4d:3c:72:30:7b:23:85:ab:c8:6b:73:
b0:3f:63:4d:9e:c6:2f:60:ae:f3:35:54:dc:8b:99:
27:17:2d:f0:6a:88:03:c8:35:4d:41:db:7f:1a:f5:
e6:f8:8a:85:17:84:89:48:f1:04:d2:d4:ce:a5:27:
95:0c:82:ed:0c:d2:3a:d1:4d:5b:0d:1b:1d:d8:f3:
1f:a9:84:f5:0a:d0:ba:1b:1e:6f:75:c6:c8:50:db:
b3:4c:26:f9:ce:50:80:e6:8a:3f:ae:8e:1c:4e:ad:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5F:F4:43:F4:A4:26:AB:24:A7:A8:DD:B6:DE:CF:AF:F1:2A:39:86
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.6.166.0/24
103.146.147.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ee:ac:87:9f:5d:b0:9a:a6:c8:03:62:42:25:3d:50:4c:86:
db:73:33:6a:72:47:18:ab:21:44:4d:c2:4a:30:58:25:8a:12:
a8:5e:0c:f5:cd:d5:29:8d:5b:35:58:c3:91:9f:6a:4c:0f:87:
33:50:dc:9e:77:ad:75:5a:60:15:8f:81:e3:b9:e1:cc:cb:79:
8d:65:d7:68:f1:a7:2e:e1:9e:6e:0d:e6:9d:f9:86:6b:65:a6:
f4:e8:6b:5c:5f:88:42:5f:97:9f:c0:2b:aa:16:4e:50:54:2c:
d7:1a:fb:b2:5a:32:f0:3e:e4:16:5f:3e:0f:62:75:39:57:ca:
f7:26:37:e8:ab:05:8d:bb:4e:16:32:24:19:5b:17:54:6e:05:
7c:aa:fb:67:6b:c1:4e:15:88:6b:bd:45:12:37:36:43:10:60:
7b:27:c9:d2:ca:a7:1d:af:6a:7f:21:e2:8a:94:ea:19:fd:bc:
ce:79:4b:54:2e:ff:b2:5a:c3:0c:31:28:4c:6d:9e:8f:65:96:
2c:d0:b4:27:48:6a:3f:81:96:46:45:66:50:8b:e6:1b:ca:9a:
e9:53:e9:11:0b:9d:16:d1:d3:1d:33:03:0b:d6:10:1f:ab:0a:
6a:a8:d2:96:3e:3c:90:63:68:dc:8e:9a:36:8d:55:36:c7:20:
b1:36:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:51 2025 by rpki-client