Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59282.roa
File: AS59282.roa (raw, json)
Hash identifier: x5GhZ2EAgRx4kqdrSrY6E0v4eabN69o7Nb4gNYMBnHA=
Subject key identifier: 11:4D:D7:5F:9A:43:48:18:98:B0:82:C0:40:78:EE:71:36:BF:35:B8
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4C0D1174DDF09CEE723BB5E0710C9BA8F9515E7B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59282.roa
Signing time: Wed 24 Jul 2024 05:00:00 +0000
ROA not before: Wed 24 Jul 2024 04:55:00 +0000
ROA not after: Wed 23 Jul 2025 05:00:00 +0000
asID: 59282
IP address blocks: 103.254.104.0/22 maxlen: 24
202.74.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0d:11:74:dd:f0:9c:ee:72:3b:b5:e0:71:0c:9b:a8:f9:51:5e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 24 04:55:00 2024 GMT
Not After : Jul 23 05:00:00 2025 GMT
Subject: CN=114DD75F9A43481898B082C04078EE7136BF35B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:9d:ce:a0:40:8b:30:70:00:e7:67:5a:ff:
45:2d:be:b7:66:cf:09:ad:7c:5e:f7:73:f6:1f:d4:
05:6b:1e:9a:72:5d:ab:ab:52:98:c8:50:11:e4:2c:
53:9d:0e:c8:04:db:f9:8c:f9:d5:f7:0e:f9:7d:55:
75:6e:ed:89:65:76:6f:dd:bc:6d:aa:2d:0f:0e:74:
9f:45:59:13:78:74:b4:6e:f6:37:b3:40:00:b8:ff:
07:1a:1e:7a:8b:56:96:51:43:46:1a:d5:82:85:ed:
54:ef:c3:65:8d:b7:0b:49:5b:5d:78:db:e5:cb:33:
6d:be:e0:db:c8:45:74:6a:79:14:0b:17:94:7a:71:
fd:39:47:df:5b:3a:4d:de:05:a4:ba:a4:f7:d3:61:
8f:f5:64:1c:e4:99:63:cd:e6:fe:ab:67:34:aa:0f:
c3:5c:9c:04:c9:ea:a0:4e:ce:8b:18:f3:0a:91:4b:
3d:54:93:46:22:7a:5a:51:e0:43:70:5b:89:df:18:
3c:06:9b:19:50:f3:b3:7c:cb:bb:a7:1e:75:6c:2b:
0c:ca:d8:cf:20:53:b1:3c:c4:5e:2d:9a:36:5a:7e:
25:f2:91:68:00:a8:4b:eb:9c:11:c2:01:9c:80:7d:
2e:95:e6:f4:7d:e6:cc:b4:36:b7:68:e6:54:ee:0d:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4D:D7:5F:9A:43:48:18:98:B0:82:C0:40:78:EE:71:36:BF:35:B8
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59282.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.104.0/22
202.74.76.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:48:ce:22:34:92:9c:ae:36:24:e2:ad:60:4d:8d:91:cb:f2:
60:90:c1:a5:55:28:ef:a4:3d:6a:3b:c2:21:30:38:42:34:29:
8a:e2:84:d9:a2:a2:4e:ff:45:86:5e:54:90:ae:cb:d2:85:e9:
75:97:df:c2:c6:d2:7c:f2:93:95:7f:d3:48:96:64:b5:93:8d:
70:55:e6:08:ae:41:24:f2:56:7a:60:2b:99:e4:59:16:85:2f:
95:42:fd:c1:0f:d4:9e:dc:c7:df:06:97:e9:12:7a:65:0e:fc:
99:ca:27:26:b6:6f:ce:6b:74:76:32:8f:52:63:f5:d4:66:c0:
2d:70:c4:e1:15:ca:07:7b:10:99:98:71:dc:b8:ae:06:55:71:
eb:8a:11:57:2d:fc:9f:69:c1:3f:8c:98:f6:64:e5:95:22:14:
b4:12:32:9a:a2:12:e0:24:f7:e1:d0:ec:38:de:12:59:a8:34:
2e:47:00:3b:12:fc:1c:4e:89:84:f8:2a:63:16:95:08:54:ce:
c7:58:ef:96:26:f0:07:c1:cb:08:a5:46:aa:90:73:9e:22:f5:
c1:89:db:32:2a:07:16:c6:45:4c:33:ae:5a:1f:d6:48:be:cf:
a6:01:82:46:16:aa:03:ad:fc:86:de:55:74:af:33:c5:59:c7:
ee:fe:0d:c3
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUTA0RdN3wnO5yO7XgcQybqPlRXnswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNDA0NTUwMFoX
DTI1MDcyMzA1MDAwMFowMzExMC8GA1UEAxMoMTE0REQ3NUY5QTQzNDgxODk4QjA4
MkMwNDA3OEVFNzEzNkJGMzVCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2cnc6gQIswcADnZ1r/RS2+t2bPCa18Xvdz9h/UBWsemnJdq6tSmMhQEeQs
U50OyATb+Yz51fcO+X1VdW7tiWV2b928baotDw50n0VZE3h0tG72N7NAALj/Bxoe
eotWllFDRhrVgoXtVO/DZY23C0lbXXjb5cszbb7g28hFdGp5FAsXlHpx/TlH31s6
Td4FpLqk99Nhj/VkHOSZY83m/qtnNKoPw1ycBMnqoE7OixjzCpFLPVSTRiJ6WlHg
Q3Bbid8YPAabGVDzs3zLu6cedWwrDMrYzyBTsTzEXi2aNlp+JfKRaACoS+ucEcIB
nIB9LpXm9H3mzLQ2t2jmVO4NQtkCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBQRTddf
mkNIGJiwgsBAeO5xNr81uDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU5MjgyLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ/5oAwQCykpMMA0GCSqGSIb3DQEBCwUAA4IBAQAqSM4iNJKcrjYk
4q1gTY2Ry/JgkMGlVSjvpD1qO8IhMDhCNCmK4oTZoqJO/0WGXlSQrsvShel1l9/C
xtJ88pOVf9NIlmS1k41wVeYIrkEk8lZ6YCuZ5FkWhS+VQv3BD9Se3MffBpfpEnpl
DvyZyicmtm/Oa3R2Mo9SY/XUZsAtcMThFcoHexCZmHHcuK4GVXHrihFXLfyfacE/
jJj2ZOWVIhS0EjKaohLgJPfh0Ow43hJZqDQuRwA7EvwcTomE+CpjFpUIVM7HWO+W
JvAHwcsIpUaqkHOeIvXBidsyKgcWxkVMM65aH9ZIvs+mAYJGFqoDrfyG3lV0rzPF
Wcfu/g3D
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:13 2025 by rpki-client