Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa
File: AS137370.roa (raw, json)
Hash identifier: S7Pb1ldLw4DBvjLZKJ5zIW7Fcpzf8nYNQtb7AR7kNOw=
Subject key identifier: CA:CA:92:C6:C8:BB:39:54:8D:32:11:87:8A:F7:F5:8A:65:7F:5C:60
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3246ADE0D3434032B8F94305A71D27F0C8AC0F0C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa
Signing time: Tue 10 Dec 2024 05:00:04 +0000
ROA not before: Tue 10 Dec 2024 04:55:04 +0000
ROA not after: Tue 09 Dec 2025 05:00:04 +0000
asID: 137370
IP address blocks: 103.118.176.0/22 maxlen: 24
2403:3540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:46:ad:e0:d3:43:40:32:b8:f9:43:05:a7:1d:27:f0:c8:ac:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:04 2024 GMT
Not After : Dec 9 05:00:04 2025 GMT
Subject: CN=CACA92C6C8BB39548D3211878AF7F58A657F5C60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:80:03:04:ae:3b:e0:f6:0e:19:11:7d:0f:
cb:8d:88:e7:14:1a:86:b4:d2:83:ec:4a:dd:2d:4f:
a9:e0:b2:1f:e3:17:b1:cb:0b:f2:52:fb:a8:30:42:
3b:b8:04:27:8b:6c:4e:0a:89:5b:30:e8:3d:f7:d8:
88:ca:5b:5d:61:5c:d3:b3:ba:e8:1f:54:40:1b:c9:
6b:06:75:37:dd:b8:51:76:06:4c:9e:09:e0:3f:75:
67:72:ef:be:12:a5:45:94:ab:27:35:92:22:a4:11:
0b:2c:fa:0f:f3:0c:29:cc:78:db:24:06:1e:33:5a:
75:e7:e8:2c:54:7c:6e:d8:50:f3:14:93:85:df:a4:
89:eb:35:13:76:88:c5:52:75:af:9e:38:e5:36:a2:
ee:6a:f5:d9:97:69:14:32:1e:e5:a6:e3:e9:0d:09:
99:3b:b1:a4:2e:ca:6e:86:df:9d:87:6f:d0:d6:2a:
30:7e:3f:f0:c0:e4:f1:f3:9e:f1:cb:6f:90:39:c6:
bd:ec:00:6c:9f:8c:42:d3:5c:c2:f6:c1:10:66:58:
36:e6:e6:fe:e1:86:71:d1:c7:17:64:af:3b:30:d4:
06:59:e5:b4:84:95:98:ca:83:1d:25:ad:a5:fc:76:
4f:26:af:e2:53:39:50:cd:db:3f:7b:73:bb:89:d5:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CA:92:C6:C8:BB:39:54:8D:32:11:87:8A:F7:F5:8A:65:7F:5C:60
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.176.0/22
IPv6:
2403:3540::/32
Signature Algorithm: sha256WithRSAEncryption
13:2e:d7:62:e2:44:43:c4:45:7e:24:15:91:0f:89:b8:ad:90:
fa:c1:b7:3a:88:d0:e4:7f:b7:83:b6:b6:2a:7e:18:fa:8f:6b:
58:1d:ab:c6:53:e2:94:6c:d6:d9:ec:ad:03:b0:96:0c:f3:e0:
d6:d8:27:09:b2:86:5f:ed:76:2f:54:fa:d8:13:0f:40:2a:33:
8a:cd:38:f7:42:6a:1e:e1:99:c1:91:92:33:ae:fb:da:2c:e4:
cd:31:02:92:a0:1d:c8:6a:18:6a:19:38:82:e5:c5:b0:30:82:
07:b5:bb:d2:9f:a5:65:06:bb:05:c1:99:b6:43:25:91:d5:ad:
70:0a:c6:fe:19:15:52:b9:de:6a:5a:b6:8a:0c:8f:91:37:2f:
57:35:27:45:d6:aa:5c:bc:bc:f0:82:09:67:88:39:f1:d6:28:
a0:0f:cd:31:3b:3c:d0:f8:f5:ad:54:e5:78:e2:6b:0c:02:5b:
fd:9d:1c:e1:86:fd:bf:61:e1:bc:d1:03:17:97:b7:86:8d:6b:
31:22:e8:39:4d:89:19:13:b8:b1:68:aa:00:fc:4c:43:58:a3:
1c:8b:4c:5a:25:9c:7c:21:24:f3:54:df:83:43:c0:b1:fe:d4:
c2:6c:50:df:7c:fb:04:f1:ed:15:28:a0:12:97:44:e9:90:07:
be:e9:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:47:37 2025 by rpki-client