Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa
File: AS150226.roa (raw, json)
Hash identifier: FdNiGtAv2K2NdL83rWKgD8UOlAS/Ek83rDV6JvpC28Y=
Subject key identifier: 9E:F1:DD:E7:01:B0:2F:2B:79:CD:A5:FD:B6:7C:82:58:85:63:49:C7
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5306C4D00AC6F801F8D2F6AAB62907A494207584
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa
Signing time: Fri 14 Feb 2025 04:00:00 +0000
ROA not before: Fri 14 Feb 2025 03:55:00 +0000
ROA not after: Fri 13 Feb 2026 04:00:00 +0000
asID: 150226
IP address blocks: 103.17.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:06:c4:d0:0a:c6:f8:01:f8:d2:f6:aa:b6:29:07:a4:94:20:75:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 14 03:55:00 2025 GMT
Not After : Feb 13 04:00:00 2026 GMT
Subject: CN=9EF1DDE701B02F2B79CDA5FDB67C8258856349C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:91:ce:d8:de:0a:77:36:99:97:6c:66:36:
66:08:1c:02:21:ff:a9:6c:25:33:b6:f6:53:fd:c3:
3a:24:f5:d6:2b:c0:1e:cc:c2:9e:20:2a:ee:2e:d5:
b1:cf:7f:74:f0:1e:47:d0:29:54:8c:a2:8f:a5:2c:
a4:d7:11:e1:79:6a:08:0e:6d:8c:1e:7a:88:f7:c0:
b6:6c:16:bc:77:49:5c:a3:ee:31:76:bb:a6:c4:6a:
36:d9:c2:ed:98:a7:84:cb:8d:e6:ef:ee:7d:f4:d8:
bc:69:89:65:1a:cc:fe:22:20:a5:14:d3:f5:88:c3:
d9:4e:b7:6d:20:f6:2a:e5:67:49:eb:eb:63:30:74:
0a:f2:a7:9c:08:98:b8:8b:0f:65:f0:db:e7:0b:4f:
09:92:df:3a:3d:aa:01:f3:16:22:6a:e5:bf:5c:77:
07:0e:05:ae:55:81:9d:09:4c:f3:55:fb:d0:05:35:
56:e8:ea:ce:b4:b7:cb:4a:81:cd:f6:cb:8d:28:24:
00:9d:d3:c4:94:48:29:27:64:51:95:32:16:50:f9:
ed:65:aa:0d:0a:e3:62:6a:6e:3e:b8:bb:30:33:5a:
4a:24:bd:86:d6:dc:98:91:61:7d:bf:c2:4d:60:c2:
38:18:d1:77:62:58:2a:bd:28:54:d9:9c:f4:ca:50:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:DD:E7:01:B0:2F:2B:79:CD:A5:FD:B6:7C:82:58:85:63:49:C7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.178.0/23
Signature Algorithm: sha256WithRSAEncryption
46:18:1d:63:cb:e5:ef:67:04:a5:c0:39:4e:ee:59:1b:1b:49:
da:53:3a:45:79:0a:15:92:40:16:d9:26:66:65:38:9b:89:08:
08:b8:a2:38:94:1b:b1:c8:61:db:02:bc:23:f7:23:dd:04:26:
af:e4:78:28:29:68:dd:ff:24:7e:c1:b9:1e:d5:cd:04:75:4d:
d3:c1:e6:75:72:8f:fe:b7:f7:20:4a:36:da:6d:1a:ed:82:35:
d1:2b:a9:8d:98:5f:68:b2:41:ed:2d:9c:92:98:00:20:1f:76:
d1:05:39:da:63:ef:2b:87:b8:16:aa:1c:c2:8d:c1:6b:dc:4d:
bf:82:0e:d0:ab:32:24:95:30:15:0a:3f:79:29:5e:a2:e7:8f:
15:06:07:e9:4d:bc:3c:56:83:2e:3f:37:0e:21:50:b4:d1:31:
0e:2c:75:33:74:e0:15:7c:36:07:a2:36:b0:7d:b5:ab:08:53:
8e:b3:53:0e:09:2a:e7:53:cf:d4:a1:c9:fc:52:7e:6f:c3:69:
07:4f:1a:7a:b4:79:96:11:53:e3:83:49:7c:c6:19:93:7b:5a:
b5:db:44:10:2f:9e:e8:02:f3:2d:c0:9f:8c:42:04:f8:ad:69:
ee:1d:e7:5b:72:f7:ac:1c:41:2c:c3:17:b2:b4:1a:17:90:b1:
b5:f9:a9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:55 2025 by rpki-client