Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151566.roa
File: AS151566.roa (raw, json)
Hash identifier: eKZFTyMf9TVY3bKAceUXTm2YENo6Eh4zgSk4swhvI3M=
Subject key identifier: 4E:F0:1A:95:85:4C:97:C2:AE:1E:EC:57:DE:20:A6:D2:DD:85:D2:45
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 534A8E36B3FF3A7D8F97AC831FFCFDBA215BCFB0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151566.roa
Signing time: Mon 13 Jan 2025 03:58:14 +0000
ROA not before: Mon 13 Jan 2025 03:53:14 +0000
ROA not after: Mon 12 Jan 2026 03:58:14 +0000
asID: 151566
IP address blocks: 103.231.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4a:8e:36:b3:ff:3a:7d:8f:97:ac:83:1f:fc:fd:ba:21:5b:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 13 03:53:14 2025 GMT
Not After : Jan 12 03:58:14 2026 GMT
Subject: CN=4EF01A95854C97C2AE1EEC57DE20A6D2DD85D245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:8c:a7:20:e3:ad:2b:37:39:8e:f5:1f:1c:
23:62:31:ba:7f:25:d4:9e:61:91:15:e4:6a:02:30:
fd:e2:8c:45:8c:3c:37:5d:99:17:8d:e2:4e:c7:65:
46:7e:06:1b:75:8e:46:60:00:2a:49:61:bd:26:05:
ff:44:fd:bd:80:c1:58:ec:c6:87:72:d1:b1:c5:37:
e0:36:f5:4e:9d:7e:44:bf:de:67:65:4b:9d:0d:e8:
f1:a4:ca:f5:9c:44:e6:85:34:4f:cd:2c:f0:1f:c4:
18:61:50:91:2d:f4:9a:83:ae:3b:82:07:c1:81:aa:
16:44:7d:f9:67:7e:c8:f7:7b:ff:65:90:c2:ab:e7:
09:57:a3:3e:85:29:a5:29:b6:66:eb:45:c8:be:c6:
18:71:c2:eb:d1:59:9f:3c:32:2a:9a:78:7f:c2:f4:
2f:f9:10:df:44:5c:a8:15:51:b5:37:f2:fb:60:48:
48:ea:0f:9a:ad:b6:c6:b2:87:7c:cb:db:c1:a0:61:
70:2f:dc:17:80:0e:44:1b:63:31:f6:42:d4:ac:8f:
67:a3:81:96:1c:9c:03:6e:05:e8:9d:ad:49:1b:93:
30:9a:3d:61:de:50:27:76:e3:34:fe:5b:6e:8a:5b:
9b:de:3f:41:a0:da:ce:b3:66:64:47:3f:55:75:7c:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:1A:95:85:4C:97:C2:AE:1E:EC:57:DE:20:A6:D2:DD:85:D2:45
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f1:11:a1:66:ce:d1:a1:05:ad:f4:43:28:6f:19:fa:74:b8:
df:18:46:fc:70:10:bd:09:86:de:d2:6f:9e:d9:df:a3:50:f8:
60:54:ec:1a:31:4c:1a:ef:ee:0f:ac:93:84:ed:19:4f:62:ec:
c8:6b:b5:b6:28:2f:7c:05:5f:04:84:1e:68:e4:27:ec:06:e5:
68:e9:d6:ce:ed:13:d9:db:20:1c:7f:e1:f3:4c:03:0e:92:b8:
cd:79:fa:0d:89:c5:a2:7a:8a:6c:78:ae:cc:5d:68:5b:4d:c4:
46:58:e8:1b:46:9e:89:06:e3:9a:20:87:24:d5:7a:f1:68:48:
9f:6e:7c:a2:b6:62:29:6c:42:92:64:b7:02:4a:c7:b2:38:2e:
29:db:9b:6a:94:a2:71:9f:c5:96:0f:90:d0:56:2c:b7:af:c1:
cf:94:b0:10:fc:0d:65:89:3f:34:97:1c:1a:31:0a:a8:c5:97:
76:e2:e5:58:55:3c:d6:57:bf:5b:f4:0a:77:2b:04:2b:3b:7c:
fa:6d:4a:a6:75:43:3f:87:2f:e9:02:35:77:87:50:58:f7:82:
39:d7:dd:50:cd:3c:2d:eb:63:de:76:d2:8c:a2:35:21:84:f5:
79:c1:34:a2:e4:26:9b:72:3e:f3:9a:1b:49:9f:9c:8d:0b:0d:
d1:ca:e7:fd
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUU0qONrP/On2Pl6yDH/z9uiFbz7AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExMzAzNTMxNFoX
DTI2MDExMjAzNTgxNFowMzExMC8GA1UEAxMoNEVGMDFBOTU4NTRDOTdDMkFFMUVF
QzU3REUyMEE2RDJERDg1RDI0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPBmjKcg460rNzmO9R8cI2Ixun8l1J5hkRXkagIw/eKMRYw8N12ZF43iTsdl
Rn4GG3WORmAAKklhvSYF/0T9vYDBWOzGh3LRscU34Db1Tp1+RL/eZ2VLnQ3o8aTK
9ZxE5oU0T80s8B/EGGFQkS30moOuO4IHwYGqFkR9+Wd+yPd7/2WQwqvnCVejPoUp
pSm2ZutFyL7GGHHC69FZnzwyKpp4f8L0L/kQ30RcqBVRtTfy+2BISOoPmq22xrKH
fMvbwaBhcC/cF4AORBtjMfZC1KyPZ6OBlhycA24F6J2tSRuTMJo9Yd5QJ3bjNP5b
bopbm94/QaDazrNmZEc/VXV8PvcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRO8BqV
hUyXwq4e7FfeIKbS3YXSRTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU2Ni5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfn7TANBgkqhkiG9w0BAQsFAAOCAQEAe/ERoWbO0aEFrfRDKG8Z
+nS43xhG/HAQvQmG3tJvntnfo1D4YFTsGjFMGu/uD6yThO0ZT2LsyGu1tigvfAVf
BIQeaOQn7AblaOnWzu0T2dsgHH/h80wDDpK4zXn6DYnFonqKbHiuzF1oW03ERljo
G0aeiQbjmiCHJNV68WhIn258orZiKWxCkmS3AkrHsjguKdubapSicZ/Flg+Q0FYs
t6/Bz5SwEPwNZYk/NJccGjEKqMWXduLlWFU81le/W/QKdysEKzt8+m1KpnVDP4cv
6QI1d4dQWPeCOdfdUM08Letj3nbSjKI1IYT1ecE0ouQmm3I+85obSZ+cjQsN0crn
/Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:40 2025 by rpki-client