Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa
File: AS9794.roa (raw, json)
Hash identifier: 0OPGTwvXaBNBcLvHHcyv5gtZVbsReDmZCPpbNyAUt2E=
Subject key identifier: 12:6F:2C:B6:EC:76:5C:81:93:80:5A:EB:1D:F7:65:3E:7D:64:63:7E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 248C7EF4CE1EA38C42D5E36FAC2AA4E5132AD052
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa
Signing time: Tue 10 Dec 2024 05:00:02 +0000
ROA not before: Tue 10 Dec 2024 04:55:02 +0000
ROA not after: Tue 09 Dec 2025 05:00:02 +0000
asID: 9794
IP address blocks: 103.252.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8c:7e:f4:ce:1e:a3:8c:42:d5:e3:6f:ac:2a:a4:e5:13:2a:d0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 04:55:02 2024 GMT
Not After : Dec 9 05:00:02 2025 GMT
Subject: CN=126F2CB6EC765C8193805AEB1DF7653E7D64637E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:36:a2:a3:4d:0e:87:f0:1a:f8:25:c3:d6:9f:
bb:e0:e7:cd:1a:34:bf:6d:56:4c:65:68:78:c5:3e:
eb:62:72:0f:df:e2:8b:2b:87:bd:4d:b4:f1:90:91:
8d:06:52:b1:aa:bb:39:e8:ff:58:0f:2d:c4:35:36:
bf:7d:37:5c:e4:9d:61:75:e6:58:0f:cc:ec:7f:b4:
ec:1d:59:13:50:33:5b:d0:f5:46:28:cd:86:0d:3a:
20:62:f5:cc:20:e8:ad:b7:67:70:d1:c0:03:cb:9b:
db:c7:2f:f0:e8:fa:94:5b:66:40:7d:98:65:eb:0a:
58:cb:83:82:45:0b:1c:f2:f4:b8:cf:87:54:ab:df:
ee:7c:5c:4c:b4:04:c3:88:50:96:e0:5f:30:98:66:
76:5b:9b:bf:d4:a2:53:e4:e6:14:99:99:28:d0:58:
7b:fa:ee:ef:c6:a0:75:70:70:87:00:79:da:8b:a0:
f7:1c:6c:0a:d2:17:c7:4d:a0:d4:96:d9:5a:19:cb:
c5:17:1e:f5:97:7c:ad:45:f7:3f:d7:e3:43:2a:7e:
b3:62:6d:dd:52:48:10:e5:d2:43:f0:40:e8:37:0c:
5c:97:bc:c2:9a:2a:be:6f:c1:a0:3f:d2:1d:ff:12:
aa:53:34:fe:b7:70:90:a3:56:46:35:dc:36:ae:41:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:2C:B6:EC:76:5C:81:93:80:5A:EB:1D:F7:65:3E:7D:64:63:7E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.252.22.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0e:08:3d:9c:a6:f7:51:68:d6:4f:4b:e5:25:1d:e5:1e:d0:
99:5c:72:5b:40:9c:97:b7:ef:ec:54:23:fe:1a:39:b8:7a:88:
61:6b:bf:77:87:e4:af:5e:5b:a3:ae:a7:db:56:03:2f:e8:a9:
d8:c6:cf:67:73:de:2f:e1:f6:c4:f7:c7:07:85:ca:15:1d:da:
9c:60:5a:c9:36:e3:14:24:1c:f5:23:bb:80:c4:78:a6:86:5e:
ee:d0:28:6e:d6:67:3a:6a:e8:ce:ba:52:47:c1:2e:1a:cd:92:
4d:8c:25:f3:a0:9f:8b:ff:f9:1c:91:67:0a:15:40:65:25:79:
0a:7e:fd:e0:6f:0c:70:b8:42:46:e4:02:29:15:70:1c:fa:89:
95:f2:3a:24:d7:a8:9b:d7:68:8d:c5:a5:c9:a3:b0:d3:6e:ee:
63:28:e3:6c:8c:4a:ec:f4:40:d3:a8:3f:c7:6a:79:92:6e:96:
b8:8c:16:2f:03:2d:71:8d:26:eb:28:1b:a8:5f:31:60:97:65:
99:0c:81:ac:d1:a8:b9:69:f4:2d:0f:ec:9b:4d:67:ed:29:3a:
17:04:7b:a8:56:0c:01:a7:94:52:02:d8:5f:9a:d8:2a:88:b9:
36:b4:ed:a2:28:e6:68:c4:db:15:7b:23:84:7f:75:85:a5:2c:
63:0a:25:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:54 2025 by rpki-client