Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59150.roa
File: AS59150.roa (raw, json)
Hash identifier: xYMtuwtjGYZB1EW9F+xvDLkhgoRtmLgvv8jNH0Q0TJo=
Subject key identifier: 74:E9:DC:31:FB:82:66:32:AE:86:51:B0:88:B2:D9:94:31:F5:A8:16
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1DC8E9004CEAE254725BD937A1F3C4CEFC60D421
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59150.roa
Signing time: Tue 10 Dec 2024 05:00:06 +0000
ROA not before: Tue 10 Dec 2024 04:55:06 +0000
ROA not after: Tue 09 Dec 2025 05:00:06 +0000
asID: 59150
IP address blocks: 103.81.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c8:e9:00:4c:ea:e2:54:72:5b:d9:37:a1:f3:c4:ce:fc:60:d4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:06 2024 GMT
Not After : Dec 9 05:00:06 2025 GMT
Subject: CN=74E9DC31FB826632AE8651B088B2D99431F5A816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:52:49:19:c1:87:95:48:f3:d0:f7:e1:1c:
3b:94:15:ac:1e:a3:b3:6d:1d:ca:54:a1:82:a9:b8:
b8:6d:fc:f7:90:26:7f:fd:87:30:f5:2c:8e:b8:93:
2c:cb:02:71:40:f2:e1:0c:99:63:25:a5:8e:f9:ef:
ed:a0:fe:68:1a:b5:5a:62:77:da:b8:15:6f:e9:15:
52:b0:97:43:f8:47:fc:b1:d1:4d:48:68:e4:ec:30:
99:2b:bb:7c:6d:89:f3:be:b2:0a:44:ff:48:6f:fa:
fe:bd:49:f2:ea:82:6e:6d:77:2d:03:3d:83:c4:f1:
df:44:c6:7c:e6:2e:c0:3c:06:e7:f2:a9:44:eb:7d:
10:c4:5d:79:7b:9c:db:4c:fc:42:29:b5:13:b0:4a:
46:d3:b8:f1:cc:2f:0d:24:f7:8b:fb:24:2a:16:04:
3c:64:30:9c:32:9e:f6:17:98:ce:a9:21:32:5a:5e:
c5:94:99:a0:da:9b:59:80:26:49:34:08:da:40:fa:
78:79:b8:3b:0b:7d:ba:21:64:65:a0:80:2b:ac:3d:
74:51:d9:6e:c8:99:05:7c:e6:81:f4:dc:5d:a4:9d:
38:fc:02:cc:ca:5e:32:2d:ed:55:50:db:e7:d7:05:
a5:cd:fa:02:24:d0:ac:71:17:17:41:46:2b:fd:3f:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E9:DC:31:FB:82:66:32:AE:86:51:B0:88:B2:D9:94:31:F5:A8:16
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.81.194.0/23
Signature Algorithm: sha256WithRSAEncryption
25:28:4d:b1:1a:94:08:dc:03:8a:eb:7a:81:9b:97:94:4b:a1:
ce:3d:d5:4c:63:39:55:2a:90:ce:19:9a:f7:a6:5d:61:8b:5d:
e5:df:99:51:34:aa:b1:2a:f0:32:3d:8c:6f:a3:a9:ae:ca:38:
0f:03:62:56:c2:69:50:71:72:63:33:4f:b7:cb:a7:27:9a:07:
78:c1:63:ff:7b:24:fb:c2:ea:40:b9:19:7d:5a:35:ac:3d:b1:
85:c7:d6:01:5a:c3:8f:03:d8:65:5c:91:8e:e8:35:96:f2:f6:
c5:00:3b:d0:de:16:e5:df:71:8c:ec:60:fe:67:0b:22:80:72:
6a:36:57:0d:eb:44:ba:40:69:62:5d:8f:23:6a:5b:4d:11:4c:
80:75:ac:5f:22:88:84:92:ff:2f:06:4a:17:cd:df:a8:45:e8:
85:dc:ea:6b:25:a2:66:13:39:e2:bb:f0:51:20:35:0a:72:4f:
e2:a3:ab:5a:18:2a:d3:bb:db:b0:10:ad:6a:7b:c1:d5:1c:32:
66:8a:33:c8:27:59:94:90:bc:ed:45:67:1a:93:03:76:ae:e8:
91:7c:e2:c4:a1:28:82:1e:9f:00:07:9b:83:88:25:57:53:5c:
5c:07:fe:4f:06:05:f6:94:40:18:81:a6:6b:c5:ac:db:47:f0:
4a:20:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:56 2025 by rpki-client