Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa
File: AS136844.roa (raw, json)
Hash identifier: OEwGgowKf9IQySgOSuVdq9cAiIQoV1dA1CMk4l8w3/Q=
Subject key identifier: 13:6F:4A:57:A8:3B:69:0C:4A:17:86:FD:D3:4D:E9:96:BB:71:CA:4B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4C4D4CC23921D71FE26B2932BAEAAD725C173A35
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa
Signing time: Tue 12 Nov 2024 03:00:00 +0000
ROA not before: Tue 12 Nov 2024 02:55:00 +0000
ROA not after: Tue 11 Nov 2025 03:00:00 +0000
asID: 136844
IP address blocks: 103.100.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4d:4c:c2:39:21:d7:1f:e2:6b:29:32:ba:ea:ad:72:5c:17:3a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 12 02:55:00 2024 GMT
Not After : Nov 11 03:00:00 2025 GMT
Subject: CN=136F4A57A83B690C4A1786FDD34DE996BB71CA4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:e5:41:c7:2b:dd:14:92:91:b2:b8:d8:04:
c3:05:e7:e9:1c:13:00:c8:a4:d8:22:9b:f1:f9:80:
be:3f:1d:0c:24:b3:c5:57:6a:3a:bd:a5:b8:c7:e7:
56:2d:8f:7a:6c:94:93:fb:e2:12:fa:97:07:85:b1:
3e:ca:f9:79:3b:7e:f3:2b:e5:b8:4c:34:68:f2:b1:
a7:5e:9d:18:71:fc:42:a1:a4:1f:1f:f5:c7:a2:67:
5e:78:d4:ab:23:75:e7:89:9c:e7:80:80:3d:a8:30:
64:db:ea:cd:81:e3:35:01:9c:09:8c:cd:91:67:e7:
92:7c:4d:46:d6:47:e9:f9:40:0e:34:71:a6:65:cc:
c8:4a:3e:87:29:b4:fb:63:c6:4b:a4:b9:57:46:8a:
cb:1c:71:70:45:c4:e5:b8:f2:2b:9c:d3:97:c5:79:
65:d0:97:1f:66:ac:58:a5:5f:36:50:78:c8:78:45:
9b:f8:67:23:6b:d6:2e:eb:bb:ee:a8:67:ae:d1:4e:
49:4d:2f:a1:e8:d8:fe:17:8a:18:35:6a:be:a2:51:
c9:ac:dc:b4:28:4d:58:72:8d:0c:54:d0:61:3a:85:
88:50:73:03:df:83:a5:97:53:cd:94:cb:f3:a5:a3:
50:31:fa:e2:1a:cb:48:ea:1e:22:f5:f0:1f:6d:bd:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6F:4A:57:A8:3B:69:0C:4A:17:86:FD:D3:4D:E9:96:BB:71:CA:4B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.193.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a7:00:d7:b2:6f:e6:94:88:63:b1:5d:53:07:ca:18:56:89:
64:e5:17:0c:77:d3:ef:28:87:b0:a5:9b:97:5e:98:38:45:76:
85:92:1e:e7:ac:ad:19:7a:8b:bf:16:ce:7a:1b:f4:f2:68:1e:
7f:93:ac:7d:ef:b3:af:50:70:1b:98:69:d9:b9:31:d9:bb:88:
8c:fd:74:af:5b:1c:29:b3:b9:13:1f:73:2f:cc:c6:98:59:53:
74:ca:f8:a2:d4:f5:52:a6:2a:3b:07:a4:c8:39:86:17:e0:bd:
4f:04:fc:37:97:6a:94:85:ee:24:c1:72:0a:94:7f:eb:01:5e:
a4:b2:28:74:13:90:67:54:9d:11:e0:3c:77:9b:7f:87:9e:8b:
15:26:44:ac:ef:23:3f:f3:2b:28:38:5d:4a:4e:f6:e8:fa:5d:
7d:de:4a:19:10:46:b2:c9:21:ec:c1:0c:cc:47:2e:2e:40:ac:
3c:6a:a4:d3:82:34:75:a2:0f:45:cc:f8:10:63:1a:97:a1:0d:
b5:38:a4:c1:79:21:76:59:96:3e:b9:fb:1a:15:22:06:4a:c0:
b4:88:9d:af:e5:8e:a4:55:eb:36:13:c9:ae:db:c9:2a:13:f7:
ae:07:4b:71:0c:49:ff:54:6a:1c:33:b6:3e:c9:dd:8b:93:38:
dc:4a:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:41:52 2025 by rpki-client