Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa
File: AS56253.roa (raw, json)
Hash identifier: WCpuNTzqMFxdGtRnf99tvT05VNH0TEhqMysw+iJJ0dM=
Subject key identifier: A6:16:FE:2E:BA:2D:12:D6:E2:2B:CC:43:40:4D:B8:8B:AF:D4:E4:54
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 522F3246B88F9D83B11D50387769DF3AEE170C89
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa
Signing time: Tue 10 Dec 2024 05:00:11 +0000
ROA not before: Tue 10 Dec 2024 04:55:11 +0000
ROA not after: Tue 09 Dec 2025 05:00:11 +0000
asID: 56253
IP address blocks: 103.10.146.0/23 maxlen: 24
103.75.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:2f:32:46:b8:8f:9d:83:b1:1d:50:38:77:69:df:3a:ee:17:0c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:11 2024 GMT
Not After : Dec 9 05:00:11 2025 GMT
Subject: CN=A616FE2EBA2D12D6E22BCC43404DB88BAFD4E454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:44:ab:98:3e:e7:66:9b:3c:bc:00:7a:68:
1e:13:fa:91:db:04:01:6c:da:6d:f7:07:95:c0:60:
f8:0a:44:dc:58:de:72:05:97:14:03:2c:42:24:ae:
66:79:b0:2f:c3:fd:2a:83:dc:02:b7:52:0e:39:75:
e4:f3:02:57:b5:15:0b:3a:7a:d4:79:2a:d5:fd:19:
32:54:c8:b5:27:9c:a9:b1:18:7f:90:8a:5b:28:ca:
e0:c1:bd:ef:87:ce:ae:0d:1e:05:ea:70:f5:fc:a9:
a8:78:35:fa:0d:ae:94:89:8b:71:cd:00:27:57:af:
f0:93:c8:bf:4b:e0:27:3a:89:97:da:17:f8:1d:86:
63:71:af:97:90:ae:66:cd:ba:dc:86:98:59:56:5c:
ec:b2:ea:87:64:2e:2c:12:81:0c:ec:67:db:ed:2c:
25:f9:6b:50:4f:05:d4:3e:5a:70:ca:78:0e:8b:7c:
2c:c1:b9:c6:32:fb:40:e5:cc:a7:fc:b3:65:d6:aa:
d4:cc:0e:ea:33:cd:10:51:47:0e:8d:50:63:17:57:
92:51:33:9b:b3:a6:7e:76:88:39:33:2b:0b:79:77:
22:f0:d8:2d:48:57:bd:be:ed:c7:37:46:bb:d8:bc:
11:3a:28:99:26:89:1a:b3:e7:1b:12:d8:42:9d:a6:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:FE:2E:BA:2D:12:D6:E2:2B:CC:43:40:4D:B8:8B:AF:D4:E4:54
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56253.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.146.0/23
103.75.51.0/24
Signature Algorithm: sha256WithRSAEncryption
42:aa:4a:b3:b0:a9:96:5e:71:31:00:7b:b9:26:53:91:1e:53:
f5:c2:4f:0a:0b:0a:bc:23:93:af:91:b7:d8:50:1e:f1:29:9d:
fd:da:1a:3f:66:81:57:48:4c:65:42:b2:2c:b1:fc:c4:2a:c2:
84:c4:19:5c:69:7d:b1:8d:73:56:04:fb:c8:7b:d8:4c:44:b2:
1a:03:e8:b9:79:17:a1:ae:65:8b:53:8a:3d:57:75:18:d8:d8:
02:88:06:87:88:de:0e:df:dd:6e:72:7f:42:d6:c0:29:ea:88:
58:dc:31:f2:0e:49:18:b2:74:38:aa:0b:3e:48:44:a7:ab:94:
4c:cd:e5:85:12:d0:71:c5:8b:bd:3a:4a:fe:97:d5:2e:fb:d1:
00:45:66:13:07:95:6c:b6:83:10:02:9b:de:36:61:9a:ad:f7:
32:a9:2b:a2:e6:5c:5e:f5:3d:2e:5c:00:eb:de:6f:13:73:d4:
2d:b9:02:c7:fd:fb:75:af:4c:a6:fb:04:d9:21:e2:c5:a1:c4:
ef:53:c9:e0:67:22:a3:b0:4a:96:8e:95:6f:e2:3f:45:c5:c4:
96:a0:e3:3d:ba:a4:e6:9f:b6:d1:3e:47:1d:96:1a:a0:28:dd:
0d:6a:bc:5d:47:52:b1:53:1f:cc:87:35:96:aa:26:82:ad:91:
5a:0e:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:41 2025 by rpki-client