Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa
File: AS137341.roa (raw, json)
Hash identifier: U9Qir9XN59NZI63crFmFcEO/uq0Zff+QN8UpzjXZ04k=
Subject key identifier: D9:DE:E5:93:D1:4C:EB:50:15:D3:30:E2:35:01:5C:21:82:5C:D7:46
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 27D2A7F9358B810D1E9F8A72EEDFC217096153A4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa
Signing time: Tue 10 Dec 2024 05:00:01 +0000
ROA not before: Tue 10 Dec 2024 04:55:01 +0000
ROA not after: Tue 09 Dec 2025 05:00:01 +0000
asID: 137341
IP address blocks: 103.28.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d2:a7:f9:35:8b:81:0d:1e:9f:8a:72:ee:df:c2:17:09:61:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:01 2024 GMT
Not After : Dec 9 05:00:01 2025 GMT
Subject: CN=D9DEE593D14CEB5015D330E235015C21825CD746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c8:44:e9:d1:f1:9d:3c:55:86:e9:de:5b:2d:
0b:13:89:bb:17:12:e9:0b:d5:49:cf:a7:b7:8b:50:
c3:bd:16:74:fc:04:db:72:b9:f7:51:b8:be:85:0a:
3b:65:6b:5f:cc:18:66:ab:8c:80:1e:bb:e2:3e:ed:
c5:4e:11:2a:68:41:f8:18:ec:2e:bb:e4:b3:a2:41:
67:1b:30:f0:98:60:45:f6:b5:e2:7a:8d:6f:d1:7a:
30:9d:5b:99:32:53:fc:47:d8:a5:4b:9e:68:18:12:
89:3e:2c:73:36:d7:e9:dd:25:fb:9d:77:8f:3a:fc:
cc:32:62:8f:5d:c4:3e:e8:93:24:64:71:55:ff:31:
de:10:3a:58:ff:1d:e8:7e:80:4e:b3:17:ce:45:11:
ad:32:6b:4f:4a:64:21:03:fc:c8:8a:75:4d:df:42:
9e:c0:c9:d8:15:c4:fb:d9:c0:9a:50:d4:e1:1a:bb:
14:de:70:9b:df:1b:52:a0:38:0d:1f:7b:dd:82:c8:
4c:e7:eb:9c:97:0b:7b:c1:dc:b7:4a:40:cf:ab:ae:
0e:4b:54:d2:ad:cc:9a:41:c1:96:ba:ad:03:dd:b5:
11:37:94:fe:ff:80:5a:41:b2:a5:f5:b7:6b:67:52:
f6:58:e9:f1:53:85:6c:92:9a:89:ac:10:fc:09:e6:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:E5:93:D1:4C:EB:50:15:D3:30:E2:35:01:5C:21:82:5C:D7:46
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.22.0/23
Signature Algorithm: sha256WithRSAEncryption
46:16:78:af:c2:34:a7:07:12:fd:8b:e6:49:0e:84:75:1e:ab:
0d:83:7b:f8:98:79:c4:1f:cc:4b:79:b8:ba:cb:d1:6a:02:ef:
d2:4b:9e:22:a3:8a:fb:17:6d:5d:9b:1f:66:ea:70:94:fe:59:
62:c4:e2:de:cb:49:a9:2b:ea:d6:48:4a:e3:bc:78:60:32:5f:
aa:cc:6f:03:88:ba:15:fd:86:d7:51:e0:d1:20:0b:b6:8d:c4:
e0:62:b5:02:e1:91:c1:04:24:9e:47:6c:82:1f:05:da:d2:d6:
0b:ca:12:2e:17:8b:81:91:3a:f6:0a:a3:a1:9d:2e:31:2b:b0:
09:9e:51:1b:1e:aa:12:1d:08:9c:9b:12:a5:92:dd:e4:87:17:
fe:86:35:bc:90:c1:28:67:4a:b1:18:7d:b4:57:7f:6f:a7:b8:
58:10:53:20:b4:d6:db:c4:46:0d:32:e1:e1:de:d2:4c:3f:69:
e4:9a:87:04:94:e6:11:7e:35:a1:67:da:96:07:aa:a9:5e:c6:
62:38:45:2c:4b:7b:b8:b2:7f:ff:bd:25:ce:59:64:76:b7:b7:
16:d5:87:ff:90:f9:3f:3b:cd:30:43:d0:ff:19:7f:05:6d:90:
7d:e3:63:84:a1:ea:97:b4:d4:ef:63:b0:21:0e:28:eb:9a:fc:
51:2d:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:44:00 2025 by rpki-client