Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153559.roa
File: AS153559.roa (raw, json)
Hash identifier: e5fSxteB63p+QZJPqUkDdGIWV3udcwDn7zVR7tUPXfo=
Subject key identifier: F5:51:1E:86:A0:57:E9:41:94:7D:81:3E:37:80:92:3A:BE:9B:9A:D6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 261669EB2F12E512A137ECA2695A20616B253945
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153559.roa
Signing time: Fri 07 Mar 2025 01:47:25 +0000
ROA not before: Fri 07 Mar 2025 01:42:25 +0000
ROA not after: Fri 06 Mar 2026 01:47:25 +0000
asID: 153559
IP address blocks: 163.47.46.0/24 maxlen: 24
2001:df4:fec0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:16:69:eb:2f:12:e5:12:a1:37:ec:a2:69:5a:20:61:6b:25:39:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 7 01:42:25 2025 GMT
Not After : Mar 6 01:47:25 2026 GMT
Subject: CN=F5511E86A057E941947D813E3780923ABE9B9AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:0d:75:a2:ba:b3:de:5e:c9:87:45:f4:d5:
38:f4:45:f1:39:15:3f:d0:2d:c2:04:32:55:d4:35:
1c:20:f1:25:4c:52:d6:e2:61:30:92:26:56:ce:db:
60:27:06:d9:03:51:52:d1:d8:b9:5a:df:df:a7:15:
56:c7:dd:ee:00:fe:21:66:62:d1:63:3b:16:06:a9:
80:2c:13:98:0d:34:aa:83:5f:9c:d1:70:ec:cb:4a:
bd:0d:62:6b:59:39:73:01:13:93:c3:60:7b:e3:7f:
02:c8:1c:9f:96:f7:a4:cd:48:7b:4b:29:e0:70:c6:
c7:7c:da:7f:e2:98:8a:79:c1:b6:4e:f8:5d:59:c0:
b0:65:6f:30:5d:81:8a:98:ec:7c:80:16:7f:80:cb:
2b:e1:25:e6:08:87:18:ce:55:3f:33:90:cd:de:f2:
ba:4a:73:23:44:55:e9:b6:24:dd:df:b9:71:93:d6:
3f:dc:ae:aa:d1:fa:26:be:f6:1e:b6:ea:ed:55:38:
b5:be:7b:f7:de:89:3a:6e:17:a9:6b:e6:f9:bb:2a:
ae:d4:33:5d:5c:11:9f:d9:a8:ec:51:0c:85:3c:b2:
4c:ee:7a:1a:a4:9b:35:48:e1:f4:2a:5c:b6:14:8b:
66:71:de:e8:94:bd:1a:2d:0c:2e:0d:26:50:ff:e9:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:51:1E:86:A0:57:E9:41:94:7D:81:3E:37:80:92:3A:BE:9B:9A:D6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.47.46.0/24
IPv6:
2001:df4:fec0::/48
Signature Algorithm: sha256WithRSAEncryption
28:68:10:ba:c4:34:7a:4d:df:80:46:8c:be:80:30:07:45:3b:
c0:80:2d:e5:e5:06:fc:01:72:3b:8f:a7:0e:bd:5d:e8:05:2f:
67:4e:97:73:b3:80:62:29:e6:f5:bf:43:81:d6:9b:e4:8a:0b:
4f:b8:32:a4:dc:f0:8a:9b:5c:de:9a:a7:5d:65:df:16:98:a6:
2f:66:77:66:f0:c2:8c:b3:a8:02:d9:2e:e8:25:42:8a:46:b5:
e3:ae:91:a2:b4:d6:65:f1:95:d5:6c:a2:65:77:c0:e2:ab:e1:
e4:ec:c5:a2:12:01:da:cc:d0:db:12:63:42:cc:ae:54:1e:45:
aa:ae:d1:06:6d:90:e0:37:bb:15:05:ac:0e:9e:5f:96:9a:26:
d8:f3:4d:bc:a1:87:e1:2e:65:70:41:55:e2:20:19:b7:61:df:
75:c3:57:68:04:52:0e:b3:41:90:e9:e4:01:f8:c7:92:56:03:
e3:24:c4:b9:16:17:e3:45:f9:a9:ae:a9:92:c9:b9:d7:7c:15:
59:ec:b0:0e:0e:48:b7:2a:48:54:2b:71:10:cb:fd:03:f1:0b:
3f:79:ce:02:a6:a8:49:38:ca:b9:0a:b5:a1:bf:d3:b3:01:34:
c4:2f:c6:89:0e:04:ef:3c:d5:48:43:f0:c2:e9:87:8a:ad:4d:
29:1d:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:06 2025 by rpki-client