Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150468.roa
File: AS150468.roa (raw, json)
Hash identifier: PcDREEnJAYJxBcfoXKitGm/0N+DsIZ5oPYwcbunbXD8=
Subject key identifier: 31:F4:9C:BC:8E:FB:17:B5:5A:B3:79:A3:9E:19:54:B6:BC:32:FF:81
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0FD560E8681D34ACA05FA3879F8EFE2229B3162A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150468.roa
Signing time: Mon 10 Feb 2025 04:00:00 +0000
ROA not before: Mon 10 Feb 2025 03:55:00 +0000
ROA not after: Mon 09 Feb 2026 04:00:00 +0000
asID: 150468
IP address blocks: 2001:df2:1240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d5:60:e8:68:1d:34:ac:a0:5f:a3:87:9f:8e:fe:22:29:b3:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 10 03:55:00 2025 GMT
Not After : Feb 9 04:00:00 2026 GMT
Subject: CN=31F49CBC8EFB17B55AB379A39E1954B6BC32FF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:01:31:37:f7:cd:6c:81:6d:f0:2c:72:d9:
63:9a:ff:02:bf:77:26:34:7c:3a:17:25:05:f5:40:
87:9a:35:a5:15:31:29:01:a8:b7:73:4d:93:47:aa:
fb:83:c1:c7:c9:94:44:ac:6e:f1:72:09:07:2d:67:
46:ce:31:fe:62:85:bd:db:5c:8a:d6:c7:05:54:d8:
74:6e:1d:88:d9:e3:3c:66:b5:e6:a8:22:6e:29:c7:
f4:f3:8e:3e:f4:8c:80:84:03:e1:d2:1e:6f:63:96:
02:6d:b5:b6:3f:b3:48:5d:24:c4:d3:17:9b:41:c5:
4a:b3:97:9a:48:45:bc:6a:1e:9c:d6:63:0f:9d:3b:
76:6e:e6:dc:dc:e3:45:25:2c:b5:86:b9:15:ff:0a:
94:1c:cd:6a:cd:2e:d1:1f:04:5a:9c:ae:46:91:e1:
4b:8d:cf:0e:c6:b2:68:1e:14:fa:ba:37:aa:93:ae:
2a:ee:27:d2:df:84:b3:a1:9a:c2:b1:48:e5:23:ae:
02:04:48:0d:61:b8:02:8e:d8:b4:7b:71:7a:88:f3:
ed:ab:77:0a:b1:b4:fb:86:03:b1:44:55:cc:9c:94:
51:5e:c9:89:42:d2:aa:8f:63:f3:b0:aa:7b:45:2f:
c7:df:90:03:66:b9:36:c5:de:fc:10:17:53:d9:08:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:9C:BC:8E:FB:17:B5:5A:B3:79:A3:9E:19:54:B6:BC:32:FF:81
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:1240::/48
Signature Algorithm: sha256WithRSAEncryption
53:ab:bb:21:97:f8:79:58:80:a9:50:4c:5c:da:32:dd:70:9c:
7c:70:da:33:76:87:ae:02:cd:9d:cd:5c:da:87:23:eb:7b:89:
43:f0:d4:9a:8e:a1:4c:87:7b:95:17:09:20:73:2f:c5:4c:47:
d5:79:63:7b:53:57:4b:24:b3:04:9d:84:8c:d5:0d:95:f9:c2:
bc:fc:46:f2:4e:19:3b:15:eb:26:23:3b:62:06:a1:39:e7:a0:
91:1d:08:d5:a2:4d:c0:1f:c4:30:0b:8f:0f:82:28:b2:eb:93:
37:80:74:b1:3c:24:c3:08:3f:e4:e0:17:6b:22:67:20:f7:e4:
63:0e:10:2f:f1:e4:66:13:6f:ef:d3:7b:c2:1f:3d:c0:f1:ee:
52:6b:24:98:88:25:b3:74:53:c6:cb:f5:94:76:b3:98:c4:fd:
73:53:ec:5b:96:30:75:c7:e6:11:a4:30:e2:f1:55:45:8d:24:
df:e1:a9:58:e2:f6:33:14:17:83:64:6a:da:3e:af:c8:ba:7e:
08:70:a4:9c:d7:6a:7d:3d:16:47:51:03:73:4e:22:f3:16:ef:
16:db:89:07:98:d4:7f:83:5f:9a:4e:35:59:6f:a5:4e:ec:19:
90:06:5f:9c:84:bf:f4:9b:3e:5b:86:d8:3b:53:c6:b0:9c:73:
be:a6:28:42
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUD9Vg6GgdNKygX6OHn47+IimzFiowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMDAzNTUwMFoX
DTI2MDIwOTA0MDAwMFowMzExMC8GA1UEAxMoMzFGNDlDQkM4RUZCMTdCNTVBQjM3
OUEzOUUxOTU0QjZCQzMyRkY4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2HATE3981sgW3wLHLZY5r/Ar93JjR8OhclBfVAh5o1pRUxKQGot3NNk0eq
+4PBx8mURKxu8XIJBy1nRs4x/mKFvdtcitbHBVTYdG4diNnjPGa15qgibinH9POO
PvSMgIQD4dIeb2OWAm21tj+zSF0kxNMXm0HFSrOXmkhFvGoenNZjD507dm7m3Nzj
RSUstYa5Ff8KlBzNas0u0R8EWpyuRpHhS43PDsayaB4U+ro3qpOuKu4n0t+Es6Ga
wrFI5SOuAgRIDWG4Ao7YtHtxeojz7at3CrG0+4YDsURVzJyUUV7JiULSqo9j87Cq
e0Uvx9+QA2a5NsXe/BAXU9kIe0MCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQx9Jy8
jvsXtVqzeaOeGVS2vDL/gTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ2OC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfISQDANBgkqhkiG9w0BAQsFAAOCAQEAU6u7IZf4eViAqVBM
XNoy3XCcfHDaM3aHrgLNnc1c2ocj63uJQ/DUmo6hTId7lRcJIHMvxUxH1Xlje1NX
SySzBJ2EjNUNlfnCvPxG8k4ZOxXrJiM7YgahOeegkR0I1aJNwB/EMAuPD4IosuuT
N4B0sTwkwwg/5OAXayJnIPfkYw4QL/HkZhNv79N7wh89wPHuUmskmIgls3RTxsv1
lHazmMT9c1PsW5YwdcfmEaQw4vFVRY0k3+GpWOL2MxQXg2Rq2j6vyLp+CHCknNdq
fT0WR1EDc04i8xbvFtuJB5jUf4Nfmk41WW+lTuwZkAZfnIS/9Js+W4bYO1PGsJxz
vqYoQg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:42 2025 by rpki-client