Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149946.roa
File: AS149946.roa (raw, json)
Hash identifier: dES4LHjjWbMHYZ70QeIUlIqt55NXPXycDDpyywICmGY=
Subject key identifier: 3D:90:84:2E:0A:61:87:BB:AF:C2:0F:EC:EA:7E:A2:91:91:2C:CE:9D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1AFE503AE1BE7159D7C9FE6E1F28601F8C81BE4E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149946.roa
Signing time: Wed 19 Mar 2025 06:55:32 +0000
ROA not before: Wed 19 Mar 2025 06:50:32 +0000
ROA not after: Wed 18 Mar 2026 06:55:32 +0000
asID: 149946
IP address blocks: 117.102.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:fe:50:3a:e1:be:71:59:d7:c9:fe:6e:1f:28:60:1f:8c:81:be:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 19 06:50:32 2025 GMT
Not After : Mar 18 06:55:32 2026 GMT
Subject: CN=3D90842E0A6187BBAFC20FECEA7EA291912CCE9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:7e:4c:4a:a7:11:e3:7c:0d:19:8e:13:f0:
e3:ce:d3:a8:d5:c5:60:29:c4:32:fa:28:74:4c:14:
2e:99:4b:d2:f7:47:fd:d7:dc:40:2f:6c:bf:25:b3:
37:c9:0b:74:6d:2c:27:72:34:9c:b5:ae:28:24:51:
41:cf:c9:fd:0d:2e:ea:21:1d:52:a3:a9:bf:24:42:
15:6d:a9:37:5f:cd:f7:7c:8b:71:49:8a:e8:4e:88:
0b:46:56:30:88:ff:65:51:13:6e:21:8d:37:4f:20:
3b:49:b5:60:00:4c:89:ec:e3:81:fa:f7:05:f4:87:
38:92:11:49:3f:79:cc:71:fe:b2:d5:7d:28:f6:95:
90:17:eb:20:24:8d:88:d2:e9:75:35:27:ce:f8:3a:
78:08:2a:f2:42:b8:1f:39:71:0e:2e:d1:38:3d:67:
7a:a3:3b:f6:cd:20:d4:dc:fd:8f:17:91:b6:59:5a:
d1:d2:4f:57:6d:ef:52:f5:41:c2:cb:73:b9:1b:76:
24:73:74:be:b7:93:ae:36:43:0b:f7:70:53:91:dd:
71:d0:7e:3b:da:82:4b:58:91:fd:0f:48:fe:86:9d:
00:d0:b8:ed:b4:5e:04:11:95:4e:d8:b3:1e:e7:83:
e8:d2:eb:2a:7b:25:e3:83:33:40:89:c2:b1:e3:a0:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:90:84:2E:0A:61:87:BB:AF:C2:0F:EC:EA:7E:A2:91:91:2C:CE:9D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.102.160.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:84:b0:15:b1:15:82:89:5a:9d:d9:cb:c0:3d:1a:75:c1:7c:
21:34:78:e4:83:40:6b:a2:f4:d4:7a:cc:95:f4:d7:17:40:ed:
b5:f0:b2:66:24:ce:a8:1a:32:eb:3d:a6:f0:41:63:be:b2:ae:
b0:30:d6:3a:4c:10:1f:ee:d8:5e:fe:9a:5c:6b:eb:f3:e6:fe:
4e:50:0e:f9:e1:83:4d:f0:d9:bc:d7:48:34:50:e9:ca:ca:ba:
93:49:10:1b:23:c3:85:e6:22:94:04:dd:23:2d:10:39:45:03:
d9:3b:c1:fa:86:84:82:3b:2b:6e:eb:d4:24:98:7e:a8:5b:e9:
e3:01:9e:aa:49:29:af:a8:39:ce:7d:ac:04:59:ca:d5:36:a6:
2c:7e:d7:5d:c0:db:d5:ba:18:0e:d9:25:b4:7c:df:68:bf:bc:
46:cf:ac:c9:b5:c3:45:7b:77:d2:bd:96:87:93:d3:a2:b1:fe:
1e:47:52:af:90:b4:79:f9:96:38:e2:cc:2e:2e:29:ef:ca:05:
cf:4f:2f:30:7e:b3:4d:be:eb:4e:27:91:70:8e:17:d6:fa:08:
72:76:06:f7:f8:7c:12:90:c3:70:66:c0:38:5f:7c:7f:00:6f:
aa:78:e9:06:ac:d0:60:91:03:bb:d9:9e:18:91:10:f7:39:a9:
00:ac:4f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:59 2025 by rpki-client