Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa
File: AS38760.roa (raw, json)
Hash identifier: fSpRo3aBk+5BA8AfNV2izeNG5bfYevpjl6iQjFlWHlY=
Subject key identifier: A6:4B:6F:DE:C1:71:B5:D1:18:E3:CF:9C:B3:D4:65:30:4F:3E:DF:B9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 14CBECFC40981B6E6259FFE969DAEFE7F3FD6742
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa
Signing time: Fri 06 Sep 2024 03:00:00 +0000
ROA not before: Fri 06 Sep 2024 02:55:00 +0000
ROA not after: Fri 05 Sep 2025 03:00:00 +0000
asID: 38760
IP address blocks: 103.4.52.0/23 maxlen: 24
103.99.164.0/22 maxlen: 24
2400:9b60::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:cb:ec:fc:40:98:1b:6e:62:59:ff:e9:69:da:ef:e7:f3:fd:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Sep 6 02:55:00 2024 GMT
Not After : Sep 5 03:00:00 2025 GMT
Subject: CN=A64B6FDEC171B5D118E3CF9CB3D465304F3EDFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:50:cf:bd:de:f4:08:91:82:d7:cf:f0:10:
65:a9:3c:e8:b3:05:19:9a:46:0a:aa:65:cb:b9:0c:
09:25:c3:3b:e2:e8:6f:89:24:2d:fa:27:c8:9e:00:
f4:7a:3f:c3:90:47:0c:82:ed:59:a5:5d:8d:9f:27:
09:4a:3d:21:d8:fc:9b:3d:a3:fa:ff:17:ad:1a:fe:
23:bc:00:11:b6:07:03:0c:da:18:ec:05:66:66:4c:
eb:59:8f:5d:3a:69:dc:59:5c:59:f6:65:e4:5e:91:
63:95:6f:2c:fd:5a:86:2c:c8:52:77:e9:96:df:a2:
43:cd:36:66:d0:82:90:ee:c2:b4:fd:4c:50:f4:ce:
85:a2:2b:6c:86:8d:54:cb:ec:d9:03:e4:99:87:35:
ca:6d:7e:75:13:f9:ba:ad:01:53:40:73:d0:65:02:
4a:30:5b:ff:0c:b9:69:b2:b8:9e:db:be:69:ed:0b:
9e:ed:25:f4:89:dc:81:23:61:7e:87:ab:dd:1f:95:
bc:94:e2:c1:78:db:6a:f6:60:11:57:f3:66:93:32:
ce:2e:71:de:c8:4e:7e:e5:dd:ea:b6:53:c4:ab:1c:
52:ac:5f:fe:0b:23:07:bc:83:5a:44:79:ef:e8:1d:
31:bb:d4:bf:c6:c1:6b:c5:07:e3:f9:20:91:ab:29:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4B:6F:DE:C1:71:B5:D1:18:E3:CF:9C:B3:D4:65:30:4F:3E:DF:B9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.52.0/23
103.99.164.0/22
IPv6:
2400:9b60::/32
Signature Algorithm: sha256WithRSAEncryption
24:e3:42:3f:f3:0c:e8:ac:08:5f:47:7d:3b:a6:49:d3:2b:44:
53:d5:9f:ee:09:7a:35:21:54:b5:0d:d4:b3:bc:df:6e:87:e8:
61:91:15:bb:c7:5a:70:04:0e:74:b3:7a:80:3e:49:f1:9f:6f:
b9:b5:26:08:c8:8c:aa:ec:be:f8:4d:32:c7:63:7b:60:fb:b5:
8b:e1:1e:f9:b8:43:fc:f5:b2:d3:34:86:79:3c:9b:f4:90:5a:
4c:fb:86:1d:85:85:48:7b:10:b8:a2:33:83:98:12:b6:7f:ff:
15:b1:ca:7c:1e:0e:9c:4e:86:f7:e4:ab:3f:fa:22:11:22:f8:
c9:d7:fa:ae:19:fa:43:58:a8:fb:a1:60:73:26:3d:e9:6b:c0:
9d:5c:2d:28:f7:7d:3b:99:f2:15:83:4e:6f:bf:bf:39:d7:96:
d9:b0:ad:09:d1:2d:ca:c9:2d:42:d9:e9:33:24:4a:76:4d:b3:
c1:90:75:c9:39:05:c8:8c:78:88:9a:ca:ac:d0:56:0c:76:45:
20:5c:27:be:82:e9:21:cc:22:35:a3:dd:ae:9e:94:30:48:1d:
8e:d2:2d:33:1d:7a:ba:03:11:a4:47:f3:f4:0a:cc:e4:13:7e:
5c:de:c8:05:6a:08:f3:9c:55:9c:01:40:36:0e:02:4a:c4:ff:
bf:6a:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:02 2025 by rpki-client