Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58820.roa
File: AS58820.roa (raw, json)
Hash identifier: l4iwBF8ZAjG+QS4AVAYEeu7Mby1N3KNozxVsvVK4HA8=
Subject key identifier: 80:59:E2:4A:FB:73:AD:AC:79:A6:D5:2C:80:CC:22:AE:7D:F8:17:CA
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 01CC11CF3EDCF6A2ACFCB92E76D0578049470AA9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58820.roa
Signing time: Tue 10 Dec 2024 05:00:22 +0000
ROA not before: Tue 10 Dec 2024 04:55:22 +0000
ROA not after: Tue 09 Dec 2025 05:00:22 +0000
asID: 58820
IP address blocks: 103.113.28.0/24 maxlen: 24
103.136.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cc:11:cf:3e:dc:f6:a2:ac:fc:b9:2e:76:d0:57:80:49:47:0a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:22 2024 GMT
Not After : Dec 9 05:00:22 2025 GMT
Subject: CN=8059E24AFB73ADAC79A6D52C80CC22AE7DF817CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:10:13:53:22:f5:63:18:4a:f5:ba:1d:c3:
68:2b:6e:69:26:0e:a1:48:01:a6:60:ab:2a:ba:a3:
30:6b:28:13:54:d4:f0:7a:7f:e8:d1:c6:58:22:47:
7b:ed:31:c4:e0:32:54:83:6d:3f:a4:c7:f1:a8:16:
db:1b:eb:fc:98:ae:7b:6a:a6:55:33:55:4d:6f:28:
3a:cd:c8:13:f7:0a:fd:f9:93:64:20:4b:f3:5a:1c:
d1:c0:ae:26:86:30:81:bb:73:61:46:28:fc:51:f7:
2a:bb:d9:f8:f6:e4:49:9d:2b:af:8f:67:1b:19:b4:
37:80:ff:d1:5c:fc:fd:50:9d:e8:17:8e:8d:e1:c0:
96:4e:49:b0:54:37:06:cd:2e:04:ce:cd:2d:6f:4c:
6a:6f:1b:f0:93:ce:93:fc:93:5d:57:5d:09:42:5f:
a6:91:db:59:2b:7a:d2:89:a4:e3:36:d6:12:df:5f:
1b:9a:1a:e3:3d:7d:cb:f0:c1:08:15:ec:cf:1e:e7:
4f:70:9c:57:15:e0:7e:ad:d7:e2:c8:ad:d8:33:ab:
9c:b0:8e:bb:fd:71:d8:b1:4d:01:1c:ee:e7:04:e1:
d2:16:61:8b:b9:5f:cb:28:61:df:ff:57:d9:61:85:
e0:f1:4d:84:25:9a:67:52:41:b2:5b:e4:4a:00:aa:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:E2:4A:FB:73:AD:AC:79:A6:D5:2C:80:CC:22:AE:7D:F8:17:CA
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS58820.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.113.28.0/24
103.136.16.0/22
Signature Algorithm: sha256WithRSAEncryption
88:94:07:c4:84:3e:3c:43:98:a4:a1:ff:77:8c:38:c2:3d:d4:
b5:d3:1e:56:31:2e:dc:d9:63:f0:76:5a:b5:a2:b9:79:c7:d0:
db:c6:8a:ed:35:1f:be:e6:1f:dc:a5:65:18:69:13:1e:25:cf:
31:b0:c7:0b:95:50:43:1c:9f:67:05:06:64:f9:db:98:fb:00:
18:25:89:25:40:5c:65:60:e9:9c:ad:2c:d5:dd:f3:d0:2f:e3:
59:62:31:63:28:99:ca:37:f8:f2:a4:b8:ab:00:a8:3d:0b:64:
57:fc:9e:46:7d:0e:80:2c:c0:8b:84:f4:31:93:70:71:3f:1a:
18:1d:22:68:1b:dd:e5:86:24:c1:ef:0c:af:81:4a:13:66:7a:
50:12:ff:da:ec:7d:19:71:e5:7a:23:7e:a9:cf:df:3c:2e:76:
6e:b4:18:cb:8d:cc:5d:0b:a0:d9:36:27:56:37:cc:3e:06:2a:
97:85:d2:0d:ee:d5:20:5f:a8:07:3a:24:ae:91:2c:be:27:84:
30:86:24:78:b4:e3:6d:56:02:7a:f9:1d:66:24:8e:06:94:22:
49:19:e1:f0:f8:0e:f1:13:d5:3c:48:d7:cc:0a:11:53:57:db:
1a:40:eb:a5:23:34:a1:dd:22:23:f0:a6:29:8c:ed:71:c1:4d:
7d:f1:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:14 2025 by rpki-client