Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa
File: AS138141.roa (raw, json)
Hash identifier: Ec8mkTtoD8Ug4PI7BwUF+mwJN+H4tYmHhOUMLX5fY8I=
Subject key identifier: 5C:E7:09:04:3B:45:06:85:C0:81:E3:52:C2:18:08:98:7D:42:B3:0E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 13F945C858EBC8AC4B85E0ED928446BC5EA4BA21
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa
Signing time: Tue 10 Dec 2024 05:00:04 +0000
ROA not before: Tue 10 Dec 2024 04:55:04 +0000
ROA not after: Tue 09 Dec 2025 05:00:04 +0000
asID: 138141
IP address blocks: 103.134.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f9:45:c8:58:eb:c8:ac:4b:85:e0:ed:92:84:46:bc:5e:a4:ba:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:04 2024 GMT
Not After : Dec 9 05:00:04 2025 GMT
Subject: CN=5CE709043B450685C081E352C21808987D42B30E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:74:f4:a2:9e:69:99:79:9f:dc:ff:28:01:5e:
df:e7:10:df:89:29:1b:e8:11:65:13:fe:0c:8c:79:
ad:13:84:b1:4c:a4:52:ee:25:e8:65:e2:8f:aa:b2:
5c:88:08:c9:0c:31:a3:f8:57:7e:ae:6a:6f:40:22:
33:85:50:8e:41:4d:1c:5f:fd:39:e3:93:8f:2c:dd:
40:20:e2:ed:46:cb:47:c3:28:09:9a:c8:2d:61:a8:
ec:8e:42:6c:c1:99:23:6f:82:fc:ec:c8:fe:bb:2c:
7c:22:56:60:3c:e3:5c:96:35:5b:a8:95:6a:40:c8:
b3:bd:ab:80:87:45:de:ae:ae:12:9a:bd:62:8c:27:
11:1f:c2:69:a1:de:af:b7:47:4b:2b:10:32:ea:95:
4e:85:63:16:a4:b4:b7:07:ab:07:4d:e8:1b:f2:60:
4e:7a:b5:66:e5:55:34:4d:a4:86:9a:76:9a:cf:c8:
a3:41:05:dc:f7:10:1e:d2:2a:1f:ee:34:bc:5d:60:
c1:4d:d7:75:52:6b:77:63:ca:be:f4:4e:08:8b:d3:
73:f8:c9:1d:37:ff:9b:28:eb:44:75:a9:e1:0d:2c:
31:95:65:b7:ab:f6:96:8b:21:38:73:c5:52:6c:23:
8c:2d:91:e6:1d:2a:a9:36:37:26:8d:19:d7:32:ee:
3a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E7:09:04:3B:45:06:85:C0:81:E3:52:C2:18:08:98:7D:42:B3:0E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:ef:68:62:93:fb:57:5b:e3:9c:a3:3b:1d:a5:17:1a:a3:54:
89:4b:78:53:65:78:f4:83:cb:a0:83:2a:63:dc:ef:57:d8:a2:
ea:24:1a:21:27:17:0b:cc:b5:12:d2:4e:79:e8:6a:04:5f:0b:
ba:be:74:bf:44:dd:ce:b4:38:ae:e4:78:7a:7d:61:b0:61:34:
79:fd:b9:2f:a4:9c:a8:cd:d7:64:67:05:4f:0e:bf:93:3c:1b:
6a:d7:7d:55:89:49:31:b3:8c:ba:8f:d0:06:d5:c1:69:2a:c0:
4f:3e:da:aa:ee:99:e8:5d:fd:2d:a5:46:a7:7e:08:96:01:0e:
63:d1:14:56:3c:36:a2:6c:da:34:37:dc:54:af:e9:87:6c:ff:
b7:88:42:7c:e3:8a:08:c8:ef:c6:7d:a8:18:a1:a8:a8:e9:21:
e0:7d:f6:88:75:7e:5b:3d:d3:91:b4:47:89:9d:3d:7f:2a:62:
83:84:27:b9:54:fc:a7:c3:35:79:a9:33:2f:ce:0b:c8:ad:f7:
60:9c:e1:c7:bd:51:b5:1a:17:45:6f:12:d0:62:72:0f:70:8d:
e7:31:0f:44:97:c8:85:42:9e:95:d1:bf:bf:90:45:90:21:5f:
4e:a6:59:c0:e8:70:82:e0:79:7b:ee:60:8d:bb:91:38:25:53:
16:fa:22:55
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUE/lFyFjryKxLheDtkoRGvF6kuiEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNFoX
DTI1MTIwOTA1MDAwNFowMzExMC8GA1UEAxMoNUNFNzA5MDQzQjQ1MDY4NUMwODFF
MzUyQzIxODA4OTg3RDQyQjMwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPJ09KKeaZl5n9z/KAFe3+cQ34kpG+gRZRP+DIx5rROEsUykUu4l6GXij6qy
XIgIyQwxo/hXfq5qb0AiM4VQjkFNHF/9OeOTjyzdQCDi7UbLR8MoCZrILWGo7I5C
bMGZI2+C/OzI/rssfCJWYDzjXJY1W6iVakDIs72rgIdF3q6uEpq9YownER/CaaHe
r7dHSysQMuqVToVjFqS0twerB03oG/JgTnq1ZuVVNE2khpp2ms/Io0EF3PcQHtIq
H+40vF1gwU3XdVJrd2PKvvROCIvTc/jJHTf/myjrRHWp4Q0sMZVlt6v2loshOHPF
UmwjjC2R5h0qqTY3Jo0Z1zLuOsECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRc5wkE
O0UGhcCB41LCGAiYfUKzDjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODE0MS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeGEjANBgkqhkiG9w0BAQsFAAOCAQEAju9oYpP7V1vjnKM7HaUX
GqNUiUt4U2V49IPLoIMqY9zvV9ii6iQaIScXC8y1EtJOeehqBF8Lur50v0TdzrQ4
ruR4en1hsGE0ef25L6ScqM3XZGcFTw6/kzwbatd9VYlJMbOMuo/QBtXBaSrATz7a
qu6Z6F39LaVGp34IlgEOY9EUVjw2omzaNDfcVK/ph2z/t4hCfOOKCMjvxn2oGKGo
qOkh4H32iHV+Wz3TkbRHiZ09fypig4QnuVT8p8M1eakzL84LyK33YJzhx71RtRoX
RW8S0GJyD3CN5zEPRJfIhUKeldG/v5BFkCFfTqZZwOhwguB5e+5gjbuROCVTFvoi
VQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:43:51 2025 by rpki-client