Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138816.roa
File: AS138816.roa (raw, json)
Hash identifier: uUcFimFNIHX79vGopl2IxZAufz2hRviWUns6wr4jigc=
Subject key identifier: 17:2B:66:FC:5A:38:01:D2:8D:02:85:F0:DD:59:03:A0:6E:90:55:28
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0253A5FB308057FE954310984F9E0AAD1162B894
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138816.roa
Signing time: Tue 10 Dec 2024 05:00:10 +0000
ROA not before: Tue 10 Dec 2024 04:55:10 +0000
ROA not after: Tue 09 Dec 2025 05:00:10 +0000
asID: 138816
IP address blocks: 103.136.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:53:a5:fb:30:80:57:fe:95:43:10:98:4f:9e:0a:ad:11:62:b8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:10 2024 GMT
Not After : Dec 9 05:00:10 2025 GMT
Subject: CN=172B66FC5A3801D28D0285F0DD5903A06E905528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:91:ef:41:2d:cf:cf:80:98:95:95:d4:5a:
ac:f5:97:32:24:97:20:7b:6f:17:51:d3:fb:b3:a8:
6c:f3:62:a1:70:02:06:97:c2:dc:eb:a4:bf:5a:32:
2c:8e:ba:4c:bc:5f:9a:19:6e:48:39:3f:2d:66:bc:
06:4a:93:4e:3f:7b:48:89:14:27:ee:3b:38:5f:45:
46:2e:56:33:06:9f:d7:0e:09:de:68:c9:03:33:10:
07:b2:64:ea:6c:2f:81:3d:db:4a:3f:43:c2:53:c3:
4b:17:69:b6:26:9a:d3:92:95:a8:4e:28:95:e3:2e:
e2:67:53:27:50:af:ce:fe:21:a1:c9:ad:39:8c:f7:
64:dd:df:f0:ef:43:bb:89:35:7d:94:4f:d4:2a:9a:
a3:cb:0e:9a:e8:7e:92:2c:5c:24:e8:6e:3a:65:c2:
99:74:da:58:52:70:28:18:1d:29:fa:2a:f9:b1:17:
87:41:95:74:eb:fd:7a:6f:64:be:93:b7:e2:09:86:
14:72:eb:79:b9:f8:b2:2b:51:16:f3:37:ce:00:ee:
8b:cd:e6:dd:d4:cb:63:b9:73:ef:d0:d1:a6:de:92:
26:0f:2a:c0:3b:8d:79:5e:2a:54:6b:58:6f:a0:9c:
de:c8:3f:e7:24:26:2d:33:94:b6:7f:63:69:17:54:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2B:66:FC:5A:38:01:D2:8D:02:85:F0:DD:59:03:A0:6E:90:55:28
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.182.0/23
Signature Algorithm: sha256WithRSAEncryption
85:75:30:aa:27:08:bf:63:f1:25:76:74:14:cc:80:6c:70:ed:
8b:d3:6e:47:16:4f:0e:99:77:58:30:5d:cb:8e:fe:04:9f:54:
c0:02:97:89:90:3d:66:84:f8:43:09:a5:12:87:70:d3:4e:1a:
89:04:5a:4c:70:9c:13:cf:29:b0:fb:c1:cb:63:84:78:c0:47:
61:b2:38:61:49:b7:a1:f3:4d:6a:df:bd:8b:ea:4d:6f:ec:61:
b6:02:8d:f8:bf:6d:ea:cf:fa:1f:2c:d9:4d:4a:f2:2e:3e:9d:
66:e2:72:06:ee:be:fb:79:16:f3:19:bb:11:d1:91:14:4e:d4:
89:a1:16:d4:b6:e7:84:3d:8e:68:c9:ad:45:23:9f:69:20:0f:
44:18:2d:3f:6f:66:64:8b:08:1b:98:2d:5f:57:40:74:5a:3b:
cd:1d:35:42:66:73:40:bb:87:a9:7e:42:c8:bc:18:ec:83:e4:
2c:19:aa:6a:f6:80:53:5d:93:17:31:0c:fd:b3:0e:47:8c:20:
8a:71:89:11:be:87:67:01:f5:81:21:01:16:a4:95:a1:a0:80:
4a:9e:bb:9d:29:f9:41:c4:93:a2:ed:86:14:a3:4e:ea:e1:08:
3c:56:1b:b2:ee:33:67:f0:4e:ac:13:44:d6:80:67:cb:0d:22:
08:86:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:37:41 2025 by rpki-client