Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138077.roa
File: AS138077.roa (raw, json)
Hash identifier: 6D1mAnthse2hc9A3ix+nxM1g+Y3wD4aYcKXQz5WL9tw=
Subject key identifier: DD:5D:B4:70:7A:87:29:4A:DF:1D:75:6A:9A:92:AA:DA:B2:ED:2C:6C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 72F264875C99D50EA736119853FB9B6506A73A71
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138077.roa
Signing time: Sat 05 Oct 2024 00:26:29 +0000
ROA not before: Sat 05 Oct 2024 00:21:29 +0000
ROA not after: Sat 04 Oct 2025 00:26:29 +0000
asID: 138077
IP address blocks: 103.7.187.0/24 maxlen: 24
103.52.2.0/23 maxlen: 24
103.87.70.0/23 maxlen: 24
103.140.20.0/23 maxlen: 24
103.160.54.0/23 maxlen: 24
103.160.154.0/23 maxlen: 24
103.169.204.0/23 maxlen: 24
103.176.106.0/23 maxlen: 24
117.103.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f2:64:87:5c:99:d5:0e:a7:36:11:98:53:fb:9b:65:06:a7:3a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 5 00:21:29 2024 GMT
Not After : Oct 4 00:26:29 2025 GMT
Subject: CN=DD5DB4707A87294ADF1D756A9A92AADAB2ED2C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:08:fd:6b:36:e2:74:67:25:a2:1f:1c:f2:
a0:c2:f3:ad:58:49:74:04:87:55:c1:fd:dc:aa:e0:
a9:64:07:2d:89:d6:0e:01:6f:5a:01:c4:01:55:11:
91:ca:42:0d:4d:7b:f7:68:01:8c:dc:0d:fc:3f:da:
7d:9c:d2:7f:8a:15:5d:81:d5:24:8a:27:35:0d:06:
6c:01:55:d0:e7:4f:da:ab:8b:e7:27:84:31:7d:f8:
e7:e6:73:f9:e6:15:bd:83:c8:4b:1f:91:82:3c:37:
95:28:99:73:b2:77:94:b3:fc:57:0d:37:41:67:36:
8b:2d:23:38:81:6e:e1:c1:aa:23:a0:57:5f:50:ec:
d1:ae:8d:90:ae:eb:12:11:74:52:f4:89:7e:03:96:
b9:14:29:fb:68:f3:27:6d:0a:a1:77:97:9f:ff:7f:
b3:44:ce:85:36:dd:d4:2c:d8:ae:ba:a2:3b:8b:15:
41:c4:ae:c8:df:02:54:a0:61:09:ed:e6:66:c5:66:
9c:96:34:e0:84:54:eb:57:35:fd:3f:97:c6:8f:ce:
c8:79:1a:9b:95:cd:c7:f0:2d:e9:ec:5d:ba:bd:9f:
e8:ce:59:b1:2c:81:6d:10:0f:a0:97:05:da:00:93:
6b:ef:a4:ba:4e:ef:2e:36:a8:22:77:63:2f:ae:04:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:B4:70:7A:87:29:4A:DF:1D:75:6A:9A:92:AA:DA:B2:ED:2C:6C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138077.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.187.0/24
103.52.2.0/23
103.87.70.0/23
103.140.20.0/23
103.160.54.0/23
103.160.154.0/23
103.169.204.0/23
103.176.106.0/23
117.103.116.0/23
Signature Algorithm: sha256WithRSAEncryption
97:81:bc:d0:79:1e:ce:c2:8e:f5:25:6f:2e:e8:0b:a8:e1:70:
86:68:40:59:9f:7d:4d:bf:29:dd:c2:34:31:f7:ec:26:20:b1:
f8:30:b6:83:80:ed:8a:6a:c1:a4:b8:14:15:d9:a3:0d:cd:71:
30:f0:20:f3:c6:a2:4d:a0:b7:a1:28:34:f0:be:bf:6c:6e:21:
c2:fb:5c:7f:7a:83:16:e7:74:24:c6:8e:1b:4c:a3:c4:7d:ff:
a8:d5:fa:e1:26:0e:f1:45:d1:0b:88:5a:ae:24:83:18:1d:46:
ab:73:eb:4f:27:6b:49:2d:62:3d:25:52:c6:af:b6:83:fb:31:
08:e9:dd:0f:7c:ea:73:c0:54:ff:0c:63:09:ee:70:5e:e4:c1:
40:3f:9b:43:32:7b:a0:85:5d:43:74:62:b2:a8:07:3b:a1:60:
c5:68:d4:94:2f:9a:5e:26:99:95:30:d5:25:76:54:79:d9:b8:
62:9e:ca:4f:40:02:04:a6:62:36:1c:43:29:cd:43:75:ea:47:
22:08:73:7f:da:8d:1e:0b:ee:75:ab:94:27:2a:e9:69:ce:d0:
a3:21:e0:58:b2:d9:0d:09:87:0d:68:e8:c7:d1:3a:22:a5:ee:
90:a8:8c:98:71:14:c4:c7:ec:4d:64:b9:cb:98:ea:e5:c2:f1:
eb:f5:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:03 2025 by rpki-client