Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa
File: AS151547.roa (raw, json)
Hash identifier: G8qO6SIrGXqAvct6A00151ari3D5Q1SyGsccyqe7UzM=
Subject key identifier: 20:EE:03:7B:DD:15:CA:CE:B2:45:A0:22:80:A6:03:5B:34:58:2F:9F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 37E4825861BB2B3CC25EA0778A3C24F610E81AC5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa
Signing time: Mon 02 Sep 2024 04:00:00 +0000
ROA not before: Mon 02 Sep 2024 03:55:00 +0000
ROA not after: Mon 01 Sep 2025 04:00:00 +0000
asID: 151547
IP address blocks: 103.245.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e4:82:58:61:bb:2b:3c:c2:5e:a0:77:8a:3c:24:f6:10:e8:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Sep 2 03:55:00 2024 GMT
Not After : Sep 1 04:00:00 2025 GMT
Subject: CN=20EE037BDD15CACEB245A02280A6035B34582F9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:5b:88:ca:81:b2:ec:2b:1c:46:44:e6:f3:
ae:4d:34:5b:61:fd:81:5e:c6:e3:b2:ec:6a:b4:fb:
ac:2d:46:2e:15:6a:c6:49:ad:86:ae:08:82:ee:6d:
f6:9d:b6:d1:3b:28:cf:33:dd:82:28:43:bc:52:6b:
f9:75:04:41:71:3d:93:ae:17:9c:73:43:89:72:82:
41:40:17:1f:3f:6c:55:55:0f:fe:ea:55:6d:05:d4:
88:71:57:6e:1d:7a:62:2c:c4:76:87:9c:cf:d4:91:
9f:15:ac:d1:93:0a:34:b8:13:a8:af:e2:f3:a8:77:
09:f2:58:6e:77:fb:37:2a:17:ce:0a:17:ce:12:95:
25:46:1a:13:36:b5:5c:c1:18:c9:55:e4:b8:74:a9:
16:06:c1:55:f5:17:d5:92:a6:bc:c1:f3:81:e2:6d:
b1:79:3f:bb:ae:c7:44:2a:34:d7:f4:d1:21:d5:ca:
07:50:87:b9:7d:a5:32:9e:6d:9e:e3:61:86:cc:6f:
e6:32:7b:c8:3d:67:24:27:68:9a:79:af:a6:a5:55:
46:d4:0c:e0:70:9e:83:00:7b:0b:36:8e:6f:a5:8b:
02:e1:0e:b6:6c:2b:27:f6:d8:86:dc:b5:f4:b7:cc:
43:ba:22:02:10:1a:26:d2:d1:b1:a3:19:98:1d:5e:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EE:03:7B:DD:15:CA:CE:B2:45:A0:22:80:A6:03:5B:34:58:2F:9F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:84:70:3c:a1:e2:3e:69:cc:12:f7:fb:bf:07:ed:b6:ff:0a:
af:f6:7c:bc:24:05:4f:8c:e6:d8:8d:29:aa:81:b0:20:b4:bc:
f0:cd:a4:7f:69:cf:d6:26:3d:92:cb:1a:3b:98:84:a5:14:98:
50:4e:4d:3f:d3:28:08:ac:17:7f:8f:6a:38:54:d6:ff:b0:b5:
29:0b:cf:82:87:20:ba:82:5a:5d:9c:cd:55:d6:f0:a9:fe:b0:
d9:76:f2:63:2e:a6:ee:90:9c:5a:3c:fd:81:70:31:19:cc:08:
34:f4:6d:2f:b6:ca:12:df:f5:36:88:37:ef:1c:87:05:a4:3e:
56:38:d7:e8:21:78:37:0c:5b:45:8a:27:29:a3:5a:0f:a0:d4:
ec:d0:5f:ca:04:c4:2b:9b:5c:0a:1c:fa:76:29:7b:f6:63:42:
02:15:83:e8:e0:67:04:73:43:85:dd:84:58:53:36:d8:f8:79:
12:2a:5e:3c:be:13:21:76:c4:5c:15:3a:54:c1:a7:07:01:a2:
5a:95:a6:ab:52:7f:94:ff:bf:9f:e1:4d:0f:0e:a7:db:18:45:
d9:60:8b:61:03:e8:59:d6:3f:94:81:a5:68:b7:87:43:fa:1a:
1a:04:67:79:69:ba:db:f7:2e:99:ab:f0:96:52:c6:26:47:db:
29:83:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:16 2025 by rpki-client