Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa
File: AS139380.roa (raw, json)
Hash identifier: HNm6AcM62124JotSxBsleSplkNdAwA3X0PIQ8dLKRrw=
Subject key identifier: 23:28:A5:47:ED:BD:01:09:8F:D5:D5:BE:E5:CF:EC:FE:03:5F:84:69
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2E7E844BDA065A7FEAB8331832F2EA3136E0C4C3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa
Signing time: Mon 07 Oct 2024 07:00:00 +0000
ROA not before: Mon 07 Oct 2024 06:55:00 +0000
ROA not after: Mon 06 Oct 2025 07:00:00 +0000
asID: 139380
IP address blocks: 103.239.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7e:84:4b:da:06:5a:7f:ea:b8:33:18:32:f2:ea:31:36:e0:c4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 7 06:55:00 2024 GMT
Not After : Oct 6 07:00:00 2025 GMT
Subject: CN=2328A547EDBD01098FD5D5BEE5CFECFE035F8469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:ad:26:35:c7:b7:e0:4a:bd:5c:cf:a9:53:
16:0f:ba:b4:17:a3:25:c9:9f:b3:ca:70:f7:d9:81:
3d:f4:ad:81:da:35:df:6b:0a:a0:c1:b6:f6:ba:9a:
92:dd:41:37:af:c9:e8:3f:c2:12:a7:48:60:81:b1:
58:37:d5:c0:ad:a3:e9:18:7a:a8:ec:61:f1:fe:a4:
2b:9d:46:d4:96:1c:24:ce:02:0a:46:6a:69:ff:38:
f4:83:ac:3d:b6:aa:d9:ce:b6:86:de:38:b2:c3:ba:
a1:60:2f:4a:8d:8b:24:5b:9f:51:c2:84:00:0e:0c:
58:a3:98:58:da:ef:bf:d8:93:28:8f:ee:66:19:3e:
5f:ea:bf:92:81:7e:79:d7:cb:ce:72:34:8f:65:bd:
fd:9a:19:6c:c1:2d:8a:93:be:a5:ef:29:dd:bb:86:
f0:f4:45:36:7f:a0:e7:69:dd:e5:17:a3:91:34:50:
b2:d0:d9:4f:9f:8b:b3:45:b4:ca:dd:9c:c8:35:ad:
c5:87:b6:77:11:4a:23:ed:0c:bc:93:44:35:4f:bd:
9f:34:b5:d4:a3:8f:94:44:3c:59:26:8e:f2:cb:29:
a7:3e:ad:36:c5:f8:0c:9b:29:64:e9:16:ab:96:e4:
48:d0:e6:6a:ad:54:db:8e:f9:2c:da:8a:62:d5:63:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:A5:47:ED:BD:01:09:8F:D5:D5:BE:E5:CF:EC:FE:03:5F:84:69
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7b:10:33:77:1e:29:e7:c3:5d:92:72:be:b5:61:4a:c1:e6:
8f:5a:fd:b1:f4:ff:ab:d1:bb:93:e4:81:41:22:ee:91:46:31:
e6:08:a1:4e:e9:50:97:f6:dd:c1:8b:27:2e:d9:6a:11:3d:3d:
2b:99:71:79:e9:29:c1:1b:cd:a6:f6:dd:26:7f:04:70:b8:e5:
87:1c:7c:8a:68:dd:eb:7c:3b:ce:b9:7d:32:a3:66:8b:50:05:
fa:49:b1:7c:c8:66:50:75:9b:10:c5:4e:72:9e:64:66:22:57:
aa:b6:88:d0:cf:e5:10:cc:7d:0e:20:81:f5:8b:55:4b:d2:9d:
e9:00:69:81:e2:a0:88:67:14:a4:37:cb:1a:e4:c6:c7:24:e6:
83:c0:0a:e0:5e:65:51:7c:d2:ea:e7:ff:d8:82:76:6c:36:06:
8b:e0:91:ee:b7:52:b0:23:24:9c:e1:e4:c5:49:57:0e:8a:eb:
d6:13:1f:ca:9e:41:4c:0c:b6:2b:c5:3f:df:eb:9a:42:bf:e9:
f6:91:3c:61:1d:c2:b4:55:1a:18:15:ef:24:7a:8c:a9:99:ba:
1c:3d:f1:a4:7b:ae:38:5b:32:15:64:58:40:28:4a:5e:09:bb:
56:9b:c7:3e:41:1b:84:8c:66:17:05:63:07:6a:08:11:33:c8:
e8:f5:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:41:56 2025 by rpki-client