Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137363.roa
File: AS137363.roa (raw, json)
Hash identifier: OeNidxtjapjItxmA7lVUQAeQL3Hu5jH29I8xX0KY4+E=
Subject key identifier: B7:64:36:4B:11:D4:50:84:08:F6:AD:D7:C5:7A:82:E3:6F:15:AB:64
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 23DAC2E4F52596C7FA322F91994E53EA5956295A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137363.roa
Signing time: Tue 24 Dec 2024 08:57:33 +0000
ROA not before: Tue 24 Dec 2024 08:52:33 +0000
ROA not after: Tue 23 Dec 2025 08:57:33 +0000
asID: 137363
IP address blocks: 202.10.56.0/24 maxlen: 24
202.10.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:da:c2:e4:f5:25:96:c7:fa:32:2f:91:99:4e:53:ea:59:56:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 24 08:52:33 2024 GMT
Not After : Dec 23 08:57:33 2025 GMT
Subject: CN=B764364B11D4508408F6ADD7C57A82E36F15AB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:4c:c2:66:74:21:e4:ed:a6:8f:68:ec:86:
17:b3:c2:60:ee:f6:3c:c4:78:26:6d:98:6e:58:86:
14:7d:67:3c:6c:84:f7:3b:bd:5e:e6:58:31:54:ce:
6b:98:59:65:86:3e:a3:19:64:fb:f7:0f:b5:ab:9f:
3c:5a:78:10:ef:97:0e:a9:e3:62:36:7f:7c:b6:16:
49:d2:f4:31:d3:9a:d3:3c:ec:e6:65:01:51:1c:ae:
10:64:3e:1a:d3:7d:2d:66:a5:50:bf:d5:09:8e:cc:
e2:73:6b:bb:85:4d:bd:18:e9:5f:16:6d:a2:21:ea:
7e:f0:80:b0:35:16:65:6c:6f:6d:1a:18:84:6d:64:
f0:dc:f8:b1:ec:fa:88:c1:bf:06:2c:39:9b:98:c2:
85:14:38:11:fb:47:8e:a8:4e:8f:82:5f:f4:27:ef:
c3:39:28:a6:6f:81:b3:60:c3:2f:9d:ff:31:a3:67:
2c:9e:da:ad:5c:58:65:a5:e6:fe:c6:9e:9a:82:2b:
d2:24:42:f7:6d:de:03:e9:e1:a7:9d:20:dc:a8:cb:
81:43:75:85:28:be:a1:cc:d0:2b:d1:38:04:5d:d9:
2c:f3:e1:50:ee:60:c0:6c:cb:f5:47:00:24:51:45:
13:94:16:43:91:93:b3:86:70:42:9b:5f:23:46:72:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:36:4B:11:D4:50:84:08:F6:AD:D7:C5:7A:82:E3:6F:15:AB:64
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137363.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.56.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:c5:f2:e9:b6:86:ac:9d:1b:94:5a:6f:69:2f:74:4f:02:47:
52:52:7f:fd:31:ef:5f:2c:76:97:48:84:49:6a:53:e7:c0:2f:
6f:1f:c4:5c:0e:a2:77:94:34:68:36:c3:4a:29:f0:34:bf:5d:
0f:90:87:90:39:12:08:4b:cd:0c:6f:c4:fb:69:32:d9:1a:e0:
a1:ab:c1:75:86:83:68:7f:40:9f:7a:77:fa:ca:f7:5a:50:e4:
39:c2:eb:63:1a:da:3e:14:2f:a3:55:d2:60:b2:5f:e7:10:c7:
41:4f:b1:c6:be:22:74:ef:c6:8a:0a:f1:55:d2:d2:2d:d7:3a:
dc:23:22:f6:10:b7:ad:27:b1:17:ac:31:3c:28:cf:e6:68:ec:
ed:70:81:b4:59:e9:e5:9c:af:67:fc:c9:cd:9b:95:13:83:2f:
b3:5d:92:66:1e:ec:c8:81:5a:3b:a2:e3:69:81:b0:d1:b3:c7:
90:a3:fe:15:09:e6:b5:ae:d4:69:d6:ef:c0:e6:0c:ce:d8:6d:
c4:62:03:68:86:c5:15:7c:01:58:df:72:a6:fd:a9:a8:d4:cc:
9d:3c:91:47:aa:c8:7e:ea:cc:5b:fe:17:3c:a4:c4:64:09:d8:
e8:53:66:09:56:1e:1b:26:46:4b:0b:60:b0:e1:77:63:61:ff:
bd:1c:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:40:02 2025 by rpki-client