Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa
File: AS140437.roa (raw, json)
Hash identifier: LRS5eEjAnv2nPnmE3tv0dGIHNUw+JrYD4dgOP0DktXg=
Subject key identifier: FD:C9:DA:91:54:F5:BC:13:BB:95:C5:09:3D:89:E6:9E:1B:A2:B6:33
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4542ACBFB85D45EE4EC8E6DF93D5579094C6C861
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa
Signing time: Tue 10 Dec 2024 05:00:05 +0000
ROA not before: Tue 10 Dec 2024 04:55:05 +0000
ROA not after: Tue 09 Dec 2025 05:00:05 +0000
asID: 140437
IP address blocks: 103.151.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:42:ac:bf:b8:5d:45:ee:4e:c8:e6:df:93:d5:57:90:94:c6:c8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:05 2024 GMT
Not After : Dec 9 05:00:05 2025 GMT
Subject: CN=FDC9DA9154F5BC13BB95C5093D89E69E1BA2B633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:26:64:8b:95:f6:18:db:2a:d8:3f:db:bf:
fe:05:67:26:24:7f:40:24:ae:fe:6f:ed:8c:a2:73:
bc:b4:a2:82:8b:e1:8e:e3:0d:1b:ac:9c:cb:5e:6b:
4d:b3:3b:56:bf:c8:c2:93:da:73:01:2e:41:41:77:
e8:a0:94:f8:d1:77:d0:64:c0:70:6d:8d:f5:dc:d7:
3a:fc:81:ec:a2:8e:35:c6:59:12:4b:c6:e1:00:74:
55:65:0e:fd:22:c7:25:47:49:7a:6a:15:4c:2a:9e:
f2:a7:8a:41:11:6d:c4:e2:cb:d0:6d:81:8e:4e:91:
f1:b2:73:a9:77:a0:5e:17:c2:43:6c:e9:5d:40:09:
67:27:2f:6a:77:16:5b:cb:2d:79:5d:59:2e:7b:d2:
bb:47:4c:29:d5:13:3f:29:bb:69:37:83:c7:67:da:
b8:2a:8f:45:37:d2:2e:c3:ff:90:7f:f7:e5:ba:ab:
88:67:0d:ca:1e:2c:ff:14:d4:cf:ec:62:65:fa:1a:
51:86:7d:70:ab:db:fd:fd:73:fe:09:de:85:63:5e:
73:3e:93:5d:6c:92:08:fb:a2:47:bc:75:66:10:ee:
93:78:2e:4e:e8:8d:53:01:f6:5d:1e:9f:65:f4:b7:
f4:1f:7e:36:a8:18:9e:88:d4:a7:1e:c6:bb:88:0e:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:DA:91:54:F5:BC:13:BB:95:C5:09:3D:89:E6:9E:1B:A2:B6:33
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:3a:00:22:e7:48:2d:f6:2f:a7:fb:4a:df:43:23:e9:dc:b9:
bb:85:68:a5:b5:8f:24:6c:69:1e:07:08:70:3d:c6:cd:83:35:
5d:eb:d7:d6:89:b5:fc:18:8a:44:56:24:35:d9:57:f2:19:36:
96:b0:b0:58:eb:dd:d9:ce:aa:43:db:64:c8:2e:c7:bd:d5:24:
c8:4b:24:71:4c:bf:b3:06:80:6e:66:7f:c7:cb:e9:53:6f:f4:
e9:e2:15:69:77:3d:ee:72:44:90:85:fa:a4:5e:b8:9a:b1:b1:
0b:8e:fb:87:2c:3a:7d:79:01:c3:10:bd:85:bb:dd:b5:86:cf:
ba:b5:fc:80:83:57:19:c3:c2:7b:c5:51:cb:27:c0:64:70:39:
4b:e3:2d:19:f3:84:a7:be:85:7c:f8:27:05:fc:c9:10:c2:ae:
b0:e3:82:ce:ce:86:8b:e9:14:35:d3:a8:3a:89:f5:89:08:00:
c9:d3:94:ec:1b:20:10:43:ce:c3:58:0a:0d:8a:88:04:10:51:
82:74:c4:62:cd:6d:3e:49:8b:5b:05:02:ab:bf:ad:ed:18:4e:
e3:be:09:d9:dd:b9:20:e4:ed:6b:f5:7b:bb:d0:53:ec:f4:d2:
97:7c:bb:6a:cb:31:f3:a1:cf:b3:cf:19:de:dd:8f:70:59:b7:
91:87:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:45:27 2025 by rpki-client