Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38165.roa
File: AS38165.roa (raw, json)
Hash identifier: SaGUHFUQ+ifSiGVZDPIgbxYTnOTKzN830JSC8tZmrzs=
Subject key identifier: 9C:00:E6:8B:14:37:8B:18:6C:AE:A3:D0:5C:7A:07:4A:3C:89:09:43
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 127F480D195548B2515CCA5F6557615250593A6F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38165.roa
Signing time: Tue 19 Nov 2024 07:00:00 +0000
ROA not before: Tue 19 Nov 2024 06:55:00 +0000
ROA not after: Tue 18 Nov 2025 07:00:00 +0000
asID: 38165
IP address blocks: 103.17.182.0/23 maxlen: 24
103.247.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7f:48:0d:19:55:48:b2:51:5c:ca:5f:65:57:61:52:50:59:3a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Nov 19 06:55:00 2024 GMT
Not After : Nov 18 07:00:00 2025 GMT
Subject: CN=9C00E68B14378B186CAEA3D05C7A074A3C890943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:ab:4a:ac:bf:c9:b7:16:a2:01:16:f9:78:
12:31:b7:68:26:65:1c:a8:1a:35:64:94:9e:87:0f:
ed:9a:e3:7b:a2:b4:c8:aa:14:9b:bd:75:1a:61:b7:
d6:2c:a3:69:bd:4d:12:ec:f7:76:9c:26:2e:c0:bc:
af:cd:96:12:b9:14:1b:73:ba:cd:4b:98:9e:06:0c:
49:52:a3:88:1e:83:d8:60:d6:5f:2c:9a:05:70:b2:
92:b9:7d:6b:d9:a1:60:0d:f6:f9:f1:b3:25:b1:fe:
b7:1a:89:fb:39:68:78:59:83:a7:bd:21:86:78:56:
db:22:db:4e:8f:11:3b:f5:18:0b:25:56:e9:4a:7d:
a2:45:2f:15:95:12:83:d0:09:62:3f:4e:b9:86:80:
e0:cb:bb:00:2b:1a:f8:ea:e7:52:c4:91:61:47:3a:
cc:09:77:53:d2:9e:88:8d:4f:10:75:60:62:58:3f:
d3:e0:d1:73:bc:3d:c8:79:06:0f:dc:96:51:86:16:
69:4e:84:2c:28:51:e4:71:43:f9:97:aa:fb:03:b4:
b7:9d:60:a5:78:cf:e8:b7:74:11:c5:3e:06:cc:3e:
4b:87:94:03:37:f0:b2:03:8a:36:27:89:1a:db:e9:
64:9a:41:fc:1b:d0:8f:03:ca:2c:06:cb:a9:8f:84:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:E6:8B:14:37:8B:18:6C:AE:A3:D0:5C:7A:07:4A:3C:89:09:43
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38165.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.182.0/23
103.247.16.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:31:66:2a:54:7a:75:4f:ad:65:8f:92:79:d5:ac:8d:28:9a:
c5:38:e8:a1:79:ec:db:b9:0c:e1:8d:98:a1:eb:2f:44:4c:b7:
9f:3a:9c:67:a8:ba:ae:69:70:18:86:1b:b0:ed:91:95:b9:46:
6f:59:2f:84:3b:47:83:f5:a1:c5:a3:9b:ed:cf:ad:93:95:dc:
81:c6:f6:4f:7c:16:03:6f:73:ff:63:d8:a1:6d:8d:6c:da:0b:
8f:43:d7:8e:df:35:5e:1e:50:38:ac:ca:03:96:58:5f:f9:4d:
aa:65:b9:ce:c1:60:e7:ca:2f:fc:d0:6f:76:8a:eb:52:bb:55:
7f:cb:ce:3f:b2:c0:ac:92:f9:1a:bb:28:3a:ab:37:6b:dc:33:
d7:c9:ca:1c:60:8c:15:b7:50:12:6c:b7:85:41:e9:2b:d7:44:
f1:d2:3c:20:aa:cd:9c:93:48:97:f0:e6:a7:24:78:62:c6:ac:
01:2d:92:f2:22:af:23:b1:8e:b5:a8:54:9c:22:5c:7f:56:89:
a1:69:9b:75:67:89:7a:6e:a8:ae:2e:c4:1c:6d:37:fe:f5:22:
f5:66:90:3e:d8:c7:9d:76:58:92:d5:0b:4e:78:4e:69:68:00:
47:78:31:f0:81:82:c9:4d:a0:3e:7c:f2:27:13:62:e7:04:cb:
86:45:2a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:14 2025 by rpki-client