Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24530.roa
File: AS24530.roa (raw, json)
Hash identifier: oVVmiUs9r2u9mAyDiTHcSEPKD69963FrCbv9zfZVu4g=
Subject key identifier: B2:0B:D3:12:22:10:A4:FC:66:CD:80:BB:DA:8F:B4:BE:C3:8D:76:D9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: D183357DCA960122BAF275D173BB70D29B35FE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24530.roa
Signing time: Thu 20 Mar 2025 05:00:00 +0000
ROA not before: Thu 20 Mar 2025 04:55:00 +0000
ROA not after: Thu 19 Mar 2026 05:00:00 +0000
asID: 24530
IP address blocks: 103.178.196.0/23 maxlen: 24
203.190.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d1:83:35:7d:ca:96:01:22:ba:f2:75:d1:73:bb:70:d2:9b:35:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 20 04:55:00 2025 GMT
Not After : Mar 19 05:00:00 2026 GMT
Subject: CN=B20BD3122210A4FC66CD80BBDA8FB4BEC38D76D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:0c:9e:62:c1:dc:06:42:cd:9a:e6:97:72:
77:be:ec:6b:03:4b:a4:74:dc:ff:23:df:5f:7a:15:
60:a9:e4:8c:87:a8:81:5c:93:ca:00:e0:a9:08:e8:
dc:3a:a5:07:19:ad:e7:0c:0b:80:d3:9a:99:ea:a7:
2b:96:ff:80:02:ab:46:01:be:a8:62:87:b2:1b:c4:
85:48:49:5c:7c:43:31:c8:f3:1b:79:08:db:ff:e9:
69:cb:ca:9d:75:af:36:d2:84:6d:8f:c9:13:b7:86:
02:3d:43:6c:65:44:f6:d4:34:46:6f:a5:09:55:80:
be:52:e5:63:2b:5a:1a:c3:bc:2d:59:44:25:42:45:
6c:0a:57:f3:ac:c9:5c:5a:51:1f:ea:a1:2d:0a:b4:
bf:a9:d6:7f:b9:00:45:ca:4c:01:e0:12:4b:d5:27:
a8:87:5c:76:68:c0:0a:5b:a9:72:94:ce:67:3d:52:
d1:5c:dc:14:69:c2:f6:eb:7c:9c:1b:72:f2:ba:c5:
1e:83:70:c4:38:5a:dc:f8:7b:fe:b6:c4:e4:7f:ff:
fa:58:8f:72:0b:d4:ab:66:4f:29:f2:4a:a9:a2:2f:
cd:f6:82:9e:79:83:74:f3:03:22:2f:d7:8b:7d:39:
5c:22:f7:af:db:d8:a7:23:71:47:c2:a5:52:fd:cf:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:D3:12:22:10:A4:FC:66:CD:80:BB:DA:8F:B4:BE:C3:8D:76:D9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.196.0/23
203.190.48.0/21
Signature Algorithm: sha256WithRSAEncryption
83:fd:0c:e7:a2:2d:3a:5b:97:45:b7:49:e1:6b:42:1e:9f:7c:
05:50:e8:ce:09:ae:93:0a:61:c8:d0:6d:f9:e8:a2:e1:4b:c9:
f0:04:23:9b:e8:d9:02:e3:fc:d3:59:9b:19:6c:b5:39:b8:d0:
44:b8:ea:40:33:7a:7c:de:8a:64:c7:9b:ea:53:15:13:e2:29:
40:42:23:b9:c9:1a:2b:c5:83:6c:67:71:de:d3:da:03:df:53:
b4:a8:0d:aa:39:65:ce:07:24:1d:af:1c:fe:91:fb:7f:96:44:
b9:41:17:e6:7b:55:c9:e0:a4:95:b6:f8:dd:ad:f9:a2:25:b8:
d0:f5:36:f9:a7:34:a2:a0:b8:64:fc:c9:d3:5d:2f:ce:ca:3f:
81:7d:87:6c:cc:ca:f6:cf:ec:7a:46:42:8e:dc:d8:f6:6b:8d:
29:d6:a7:f2:90:17:50:7d:1d:30:08:9d:81:e1:17:63:e0:88:
81:78:a8:c4:56:80:15:26:76:68:3a:8b:4b:c0:93:b8:bd:f9:
33:84:98:a0:91:ce:3e:6d:7b:09:f6:4b:f2:b5:4f:cf:31:9b:
85:97:40:80:15:ec:03:5a:6e:38:7f:68:b8:6e:bd:30:80:c5:
30:b5:44:74:1c:32:af:e2:59:26:a2:11:3a:35:09:47:c3:48:
c4:08:0d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:54 2025 by rpki-client