Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa
File: AS150515.roa (raw, json)
Hash identifier: 9RIeQxxJHs65eT2wyC6R2Hu6fyZMPZyV2fN09kDo13k=
Subject key identifier: 68:79:56:6F:B8:89:30:4D:E2:D6:2A:40:3E:10:29:96:D0:48:9B:CC
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 03E9248118A4B5A6D1475E030192A438DF35AA35
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa
Signing time: Tue 31 Dec 2024 03:00:00 +0000
ROA not before: Tue 31 Dec 2024 02:55:00 +0000
ROA not after: Tue 30 Dec 2025 03:00:00 +0000
asID: 150515
IP address blocks: 103.61.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e9:24:81:18:a4:b5:a6:d1:47:5e:03:01:92:a4:38:df:35:aa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 31 02:55:00 2024 GMT
Not After : Dec 30 03:00:00 2025 GMT
Subject: CN=6879566FB889304DE2D62A403E102996D0489BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:56:cf:c5:d3:c0:cb:24:7c:20:0b:bb:54:
86:a0:d8:f9:81:46:eb:79:ef:2f:17:92:14:b0:4c:
a1:cc:16:9b:19:0b:19:d9:ff:5f:c8:b2:31:7d:03:
5c:b2:2b:96:38:d8:70:f4:78:70:7b:95:bb:6f:a9:
ee:a4:69:7a:80:90:47:a0:fd:b2:8c:26:43:4b:64:
04:28:25:e8:7b:1e:8f:6a:70:0d:fa:9c:62:eb:9b:
74:c2:6a:f3:62:7c:ac:dd:ef:05:08:db:5c:5f:44:
5a:87:5f:cb:f8:71:7c:51:17:6c:e9:6a:e2:4a:a9:
6b:da:8e:89:53:00:b8:65:c1:28:8d:8a:5f:f1:34:
cf:62:ec:1f:52:ce:5a:b9:98:84:a4:dc:76:2c:75:
cc:38:1e:09:f0:f3:1a:06:f8:9e:e3:22:f5:06:3e:
eb:2a:98:82:57:09:24:bb:f8:fe:ab:d5:c7:67:e2:
f5:ef:7b:33:ac:78:9d:64:30:fc:3d:05:f5:7d:de:
9e:25:fa:75:3f:1d:21:21:0f:1b:4d:23:10:36:04:
b4:d9:29:be:17:f3:e7:2f:0f:4a:54:8e:08:90:b5:
59:7f:9e:98:79:1a:9a:bc:c6:0c:24:50:39:e5:a6:
63:74:f2:2b:d0:a8:c1:1c:1b:7e:43:ba:27:f6:77:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:56:6F:B8:89:30:4D:E2:D6:2A:40:3E:10:29:96:D0:48:9B:CC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:97:3b:36:44:fc:c6:aa:f5:9b:62:34:6d:53:b9:ba:99:36:
0f:95:0a:51:d3:dd:a5:9e:2e:35:29:3a:dd:81:9b:b1:3d:14:
89:02:19:f0:e5:a7:d6:dc:b1:7b:b4:6b:87:e5:5b:02:dd:65:
a8:e4:c2:3c:9b:88:e8:24:12:92:3e:7a:90:e4:17:9c:fa:76:
7e:07:9d:b8:71:79:92:30:47:1d:3c:81:16:32:78:b1:7e:87:
4b:dd:2c:97:2e:6a:1c:9d:0c:c8:69:b3:12:d5:ef:17:55:32:
54:54:42:aa:f2:fb:ac:c8:75:e0:b7:ae:f3:d1:7f:75:7a:b2:
43:b9:c2:c9:8e:71:38:93:d6:0f:f7:f1:29:0b:84:1f:94:53:
5e:d1:6c:ac:02:4a:9e:15:4d:7b:86:91:6b:e2:3f:78:4e:c8:
d3:8f:5f:af:41:7a:c2:32:fe:aa:fa:30:c4:f6:55:fc:9e:5b:
d2:3f:21:01:e4:f5:99:6d:fd:db:a5:a3:aa:b7:e5:74:0d:76:
72:47:9c:7f:ae:72:1c:47:15:14:17:06:73:f9:08:9c:57:f8:
9d:a6:ee:e0:99:cf:45:60:44:cf:b5:1b:99:3b:bb:9a:75:e8:
46:b5:5c:9b:5b:59:8b:57:0d:43:37:9c:ff:03:9b:d2:5d:60:
47:dd:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:17 2025 by rpki-client