Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152352.roa
File: AS152352.roa (raw, json)
Hash identifier: YxSuIAVaQyjf8Msyzl5Vdr77vbHT1G9DEm2m/7TO+7M=
Subject key identifier: 30:00:AE:6D:E8:D7:BE:E9:C8:C6:56:0E:96:6A:02:7D:A9:A8:EF:35
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2147D7569792C342BF78E04AD841F101833428C4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152352.roa
Signing time: Fri 10 Jan 2025 10:43:01 +0000
ROA not before: Fri 10 Jan 2025 10:38:01 +0000
ROA not after: Fri 09 Jan 2026 10:43:01 +0000
asID: 152352
IP address blocks: 103.184.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:47:d7:56:97:92:c3:42:bf:78:e0:4a:d8:41:f1:01:83:34:28:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 10 10:38:01 2025 GMT
Not After : Jan 9 10:43:01 2026 GMT
Subject: CN=3000AE6DE8D7BEE9C8C6560E966A027DA9A8EF35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:cc:e1:11:dd:69:9a:3f:3d:15:57:ad:7f:
00:ed:f0:7c:27:fe:25:33:f4:37:fb:dd:87:a4:8b:
11:b1:22:9c:9d:6f:34:0f:3f:2c:d4:49:da:7c:82:
df:33:12:86:08:86:5b:3b:18:af:3b:8c:39:7e:d4:
76:b4:44:0c:d5:1f:7c:d8:06:13:6d:da:30:34:87:
2d:8d:de:8f:e1:35:1e:6b:e8:e7:af:ba:61:7a:d4:
c3:a1:97:87:80:64:41:97:15:3b:c3:48:86:07:bb:
fa:a7:1b:05:0b:b0:78:7d:cf:08:ec:a0:be:6d:0a:
1a:ea:7f:72:eb:d2:ed:74:22:54:9e:ac:19:37:9a:
19:eb:74:d7:f8:07:d9:36:72:d9:2d:c3:af:fa:75:
fa:5b:a9:3d:46:66:48:53:4c:4a:3a:c6:19:60:c6:
93:9b:75:2a:d6:b5:bc:a1:cf:17:fe:dd:19:55:0b:
c3:92:35:0c:96:30:e8:b8:84:04:12:9e:99:99:71:
ce:19:39:11:bb:7c:89:5b:23:c1:f0:59:ee:cb:c7:
10:37:89:fa:d3:4c:e0:e2:db:e0:58:2b:03:08:fa:
37:92:e2:94:7a:90:82:8c:5d:c2:90:16:76:5e:be:
0d:49:29:c9:8f:25:53:d0:d7:6d:3d:ab:6a:43:d0:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:00:AE:6D:E8:D7:BE:E9:C8:C6:56:0E:96:6A:02:7D:A9:A8:EF:35
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f7:a2:96:5b:a9:e2:2a:d4:7b:be:62:2f:ad:9d:e6:a2:26:
76:56:72:f7:38:1c:df:27:9e:25:4f:ab:44:92:77:f0:eb:b9:
be:9f:f0:58:4c:1a:83:25:32:11:e3:91:6c:0b:53:b7:d4:81:
b9:d6:7b:b6:76:a3:d6:fa:2f:70:d8:a2:5e:b5:a1:35:44:76:
46:f1:41:9b:07:cc:00:d2:49:6d:3e:38:63:f2:4d:79:11:45:
aa:d8:18:07:b0:af:fd:05:a0:a3:3d:b3:43:d3:85:c9:0f:26:
5c:37:a6:1b:b9:2e:73:a9:7c:88:b4:64:8a:b4:5a:44:21:57:
d5:75:49:cd:f8:b2:27:94:cd:ab:94:e1:7b:86:db:21:e2:f4:
b3:be:e8:ef:13:e6:29:b2:06:14:a3:48:a9:80:07:31:ad:08:
a4:4b:7a:44:89:59:8a:df:5f:0b:53:9f:55:06:26:2e:b4:d2:
31:fb:62:08:91:a0:bc:bb:97:c8:3d:53:e0:f1:44:48:3e:e6:
d3:9c:c3:28:1f:0d:10:ee:3a:4e:93:3e:73:0e:b7:40:41:84:
a9:05:e7:e2:a3:b2:06:0e:0b:c9:a8:e7:bd:5f:aa:e7:0c:6d:
9a:86:e4:69:19:86:33:1f:e3:d9:2b:29:7e:d5:6c:0b:e3:49:
fe:98:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:17 2025 by rpki-client