Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141076.roa
File: AS141076.roa (raw, json)
Hash identifier: +YyMg8N/b05NVTA9AGVaxK/nAW/LuGA8vjabdUbay/0=
Subject key identifier: 57:C8:E3:21:2D:48:A9:21:C2:A4:7B:9B:53:0C:60:2D:03:CD:D8:7A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 24CF7DE8D420751E27E78B97DA968E107D5FD261
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141076.roa
Signing time: Tue 10 Dec 2024 05:00:20 +0000
ROA not before: Tue 10 Dec 2024 04:55:20 +0000
ROA not after: Tue 09 Dec 2025 05:00:20 +0000
asID: 141076
IP address blocks: 103.155.221.0/24 maxlen: 24
103.165.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cf:7d:e8:d4:20:75:1e:27:e7:8b:97:da:96:8e:10:7d:5f:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:20 2024 GMT
Not After : Dec 9 05:00:20 2025 GMT
Subject: CN=57C8E3212D48A921C2A47B9B530C602D03CDD87A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:c2:b3:f8:68:f8:7a:cd:ce:81:8f:de:bb:
37:c3:f7:4c:fd:6a:0b:5f:3e:41:ef:11:ee:14:23:
c7:5d:55:04:a3:84:bc:ab:3f:45:29:5d:21:12:04:
d0:f9:a2:c6:cc:bb:68:a7:82:97:a2:63:3c:e0:bf:
4c:12:42:60:4c:51:f3:de:ed:a8:de:86:ef:69:99:
b9:dd:4c:89:ff:31:26:f9:44:17:64:49:9b:40:75:
70:ed:25:79:84:37:ae:9f:89:2e:cd:32:5d:83:41:
92:0c:20:65:95:42:da:26:76:eb:8e:a2:41:8c:b4:
2e:b4:0d:b4:68:7f:dd:54:82:bb:91:02:d5:44:3d:
e7:5d:a1:ce:90:21:38:8b:35:96:b9:a4:ae:cd:2b:
20:95:64:53:72:9f:42:32:0e:03:0b:28:b0:4e:cd:
56:ab:56:ef:1f:d2:0c:ae:3e:fb:56:4b:7a:84:91:
0d:01:a6:a5:3a:34:37:1f:22:dd:5e:19:da:16:ba:
c1:46:5c:9d:b6:6e:46:ed:12:74:7c:61:6a:36:3b:
5b:ea:cd:a0:f1:bf:a0:bb:b0:ad:85:05:3f:c9:c9:
22:02:27:17:9e:a3:89:4a:c1:34:a3:8f:82:03:f7:
da:0f:60:4d:90:18:ec:5b:de:d3:af:0e:15:b8:a7:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:E3:21:2D:48:A9:21:C2:A4:7B:9B:53:0C:60:2D:03:CD:D8:7A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.221.0/24
103.165.86.0/24
Signature Algorithm: sha256WithRSAEncryption
17:57:e0:c5:df:a5:b1:66:76:ee:6d:ed:ca:88:0a:c6:c3:14:
3e:5e:1c:2a:1a:26:bd:d7:ee:85:79:55:8b:42:ab:b4:3c:19:
d0:71:91:66:5b:cf:d3:89:5d:5f:1c:86:82:2e:ea:e7:9b:b5:
73:ef:55:69:20:ad:4a:7f:1d:df:4a:58:dd:33:09:8b:80:bc:
b2:a4:b3:35:a0:57:83:64:63:af:fd:41:6e:29:22:7e:ad:60:
99:2c:ff:66:67:38:c0:31:03:2a:e7:6b:0b:b5:ea:13:eb:fb:
29:db:42:a4:30:5f:c7:4e:ad:fb:f8:7b:5c:c1:e3:23:75:83:
a9:f4:75:be:f4:64:e9:de:08:e5:4c:ee:73:96:00:47:5d:17:
ab:3f:fc:e4:fc:91:fc:7d:c6:3a:e0:a9:48:33:fd:3d:8b:bd:
96:11:f2:ca:39:07:e7:97:04:a7:80:6c:6d:d3:9c:5a:08:21:
5c:10:ea:56:4e:09:6b:22:60:7f:c3:2d:cc:3a:79:a6:7b:e8:
88:28:b1:02:2e:3a:92:ec:e6:3b:28:b1:53:13:5f:a3:18:ff:
36:42:9b:5c:5a:12:b8:00:fb:10:14:5f:78:60:bf:27:ab:23:
ba:93:e1:95:3b:47:66:95:04:1b:75:77:8f:5e:dd:3f:bb:79:
7f:69:60:fe
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUJM996NQgdR4n54uX2paOEH1f0mEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyMFoX
DTI1MTIwOTA1MDAyMFowMzExMC8GA1UEAxMoNTdDOEUzMjEyRDQ4QTkyMUMyQTQ3
QjlCNTMwQzYwMkQwM0NERDg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5iwrP4aPh6zc6Bj967N8P3TP1qC18+Qe8R7hQjx11VBKOEvKs/RSldIRIE
0Pmixsy7aKeCl6JjPOC/TBJCYExR897tqN6G72mZud1Mif8xJvlEF2RJm0B1cO0l
eYQ3rp+JLs0yXYNBkgwgZZVC2iZ2646iQYy0LrQNtGh/3VSCu5EC1UQ9512hzpAh
OIs1lrmkrs0rIJVkU3KfQjIOAwsosE7NVqtW7x/SDK4++1ZLeoSRDQGmpTo0Nx8i
3V4Z2ha6wUZcnbZuRu0SdHxhajY7W+rNoPG/oLuwrYUFP8nJIgInF56jiUrBNKOP
ggP32g9gTZAY7Fve068OFbinHvMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRXyOMh
LUipIcKke5tTDGAtA83YejAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTA3Ni5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGeb3QMEAGelVjANBgkqhkiG9w0BAQsFAAOCAQEAF1fgxd+lsWZ2
7m3tyogKxsMUPl4cKhomvdfuhXlVi0KrtDwZ0HGRZlvP04ldXxyGgi7q55u1c+9V
aSCtSn8d30pY3TMJi4C8sqSzNaBXg2Rjr/1Bbikifq1gmSz/Zmc4wDEDKudrC7Xq
E+v7KdtCpDBfx06t+/h7XMHjI3WDqfR1vvRk6d4I5Uzuc5YAR10Xqz/85PyR/H3G
OuCpSDP9PYu9lhHyyjkH55cEp4BsbdOcWgghXBDqVk4JayJgf8MtzDp5pnvoiCix
Ai46kuzmOyixUxNfoxj/NkKbXFoSuAD7EBRfeGC/J6sjupPhlTtHZpUEG3V3j17d
P7t5f2lg/g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:41:53 2025 by rpki-client