Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152368.roa
File: AS152368.roa (raw, json)
Hash identifier: gUxMWRxS6NqRDGEKSGnZ0wjYPwTm8BtMF3Bm7fkSdJ4=
Subject key identifier: 5F:81:28:CC:5C:32:D9:0C:7C:A4:F1:53:F0:EB:4C:61:A2:B1:AD:1A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 017B618A006556007A8F413A864FA5C76CD32CBE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152368.roa
Signing time: Fri 21 Feb 2025 04:33:43 +0000
ROA not before: Fri 21 Feb 2025 04:28:43 +0000
ROA not after: Fri 20 Feb 2026 04:33:43 +0000
asID: 152368
IP address blocks: 163.61.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7b:61:8a:00:65:56:00:7a:8f:41:3a:86:4f:a5:c7:6c:d3:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 21 04:28:43 2025 GMT
Not After : Feb 20 04:33:43 2026 GMT
Subject: CN=5F8128CC5C32D90C7CA4F153F0EB4C61A2B1AD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:fe:35:3b:4a:55:d4:b8:7e:c9:8e:1d:51:
09:fe:c4:f5:7a:55:f7:94:02:49:06:2c:f5:60:3b:
a2:60:d8:9a:f5:3b:4a:eb:8e:42:13:2a:3d:3c:f3:
16:20:89:62:f5:a5:de:ae:f7:bf:74:33:a4:84:a8:
8d:17:ba:b6:c6:92:9b:ca:e4:f0:bf:6d:0e:0a:7e:
42:f2:41:23:71:f1:fb:c8:33:01:ea:d2:62:31:dd:
74:3a:bc:76:e2:9d:e2:10:22:4d:52:7a:d7:8e:24:
47:1b:42:a8:c9:86:e8:66:47:9b:01:c9:e3:50:2f:
58:49:2c:97:80:2c:c9:d8:2d:15:a0:04:dc:e8:f6:
6b:19:68:9b:3b:8f:2b:1c:25:c9:f8:31:f2:ad:6f:
af:23:cd:56:fa:ad:c1:f9:69:fa:94:bd:84:04:70:
61:49:59:46:12:8e:0f:31:fc:bd:43:ff:12:e4:bd:
7d:d7:d6:09:34:a3:40:85:84:fa:fb:64:15:21:04:
76:d1:be:0f:47:03:50:27:cc:aa:05:c1:6d:e6:35:
58:5b:0e:d1:9d:43:69:12:6b:4e:3f:60:3c:fb:66:
07:b4:52:31:2e:1c:44:0b:21:3c:e0:f9:f0:8c:a8:
37:99:82:7a:53:9a:9f:44:db:22:7e:b0:6d:41:03:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:28:CC:5C:32:D9:0C:7C:A4:F1:53:F0:EB:4C:61:A2:B1:AD:1A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152368.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.61.159.0/24
Signature Algorithm: sha256WithRSAEncryption
80:81:d3:10:74:94:0b:5c:d6:85:9e:50:d0:c8:30:c0:89:1d:
45:83:72:7a:ea:53:fc:e4:0d:89:0f:aa:1b:ac:a7:8a:78:de:
f4:ff:6d:8a:d8:a9:07:d8:99:72:3f:c6:37:c7:bb:d1:92:a0:
4c:69:20:a0:fa:72:95:4a:dc:92:0d:92:77:97:4c:c9:38:c3:
f0:08:68:e6:c5:b8:bf:2b:cf:ea:13:91:00:51:f3:e2:e2:c9:
fb:b5:04:be:e2:ef:a6:7e:91:f7:d2:43:6f:e9:86:51:bc:0f:
46:14:58:65:b3:94:f7:16:d2:41:a1:6a:d7:80:42:46:4f:c2:
ce:da:bb:ba:8f:c7:7e:5b:1b:ae:ef:6f:c5:e4:83:c7:7a:5d:
cb:ab:17:45:09:a1:06:6f:ce:d2:bd:30:6d:d0:29:ae:20:bd:
89:d6:fb:19:17:d8:bb:e3:85:2c:35:57:36:1d:1d:ef:81:f2:
68:06:6a:fc:c0:19:39:10:fe:39:8d:84:c0:8f:b9:c9:6e:c8:
cb:d0:d9:45:1e:2d:6d:78:53:1c:11:ad:d9:73:0b:81:22:de:
25:40:14:fe:94:5e:9f:12:00:9b:15:f9:1c:b1:3d:99:b9:63:
5b:50:99:5e:d1:44:f2:f7:64:3b:20:40:bc:e0:12:1b:ff:92:
8a:37:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:49 2025 by rpki-client