Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141673.roa
File: AS141673.roa (raw, json)
Hash identifier: 3Rpo5fQrnm6EdyUvu+aPwgG2IYmT6ktBouh1KUVlRhk=
Subject key identifier: 2E:CE:C5:C2:E7:EE:14:0D:1A:9D:77:FF:89:95:E3:0E:D4:5C:0F:66
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3CC4DCF6EC0E3B3E2D699CD8BBFD030B55728776
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141673.roa
Signing time: Fri 03 Jan 2025 10:00:00 +0000
ROA not before: Fri 03 Jan 2025 09:55:00 +0000
ROA not after: Fri 02 Jan 2026 10:00:00 +0000
asID: 141673
IP address blocks: 103.210.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c4:dc:f6:ec:0e:3b:3e:2d:69:9c:d8:bb:fd:03:0b:55:72:87:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 3 09:55:00 2025 GMT
Not After : Jan 2 10:00:00 2026 GMT
Subject: CN=2ECEC5C2E7EE140D1A9D77FF8995E30ED45C0F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:f7:ee:ec:80:b5:52:cf:db:1e:12:37:61:
5f:94:0b:42:43:c4:25:b5:95:ed:42:3a:35:42:d2:
f6:6c:4b:25:85:ce:99:f1:1c:27:d6:a2:b4:41:f6:
93:4f:21:a8:89:39:10:7e:b6:55:3b:5d:e8:56:df:
a3:dc:4f:3c:04:0c:0b:dc:8c:bf:dd:5b:81:12:ce:
e5:48:81:bf:ce:c5:f2:be:af:75:79:14:26:2f:de:
3b:97:60:da:e7:3c:2a:66:bf:1f:7b:fe:f7:cb:4e:
5a:33:02:fb:0e:4d:01:31:ff:0d:f7:21:25:96:8d:
2a:74:80:3c:15:2b:21:a8:a3:1b:99:c2:62:6e:ed:
e4:e4:66:03:94:5f:ce:ba:8e:b1:f4:b7:98:86:13:
f9:20:ab:48:ef:54:47:b7:bd:01:1c:81:82:bc:be:
f6:3f:18:44:df:4d:ae:e3:af:27:34:d8:67:33:f1:
57:49:d9:01:26:12:01:ba:d3:74:45:93:3c:03:5e:
b3:0e:64:fc:03:35:69:aa:6a:6e:cf:1c:aa:e3:76:
ea:e4:82:07:ae:7d:b9:52:be:2a:aa:f2:46:45:e6:
2d:da:23:bb:cd:82:8c:bb:0f:8b:dc:e7:9a:8f:39:
9a:ba:2f:8f:28:65:59:fd:a2:96:85:9b:fa:17:f9:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:C5:C2:E7:EE:14:0D:1A:9D:77:FF:89:95:E3:0E:D4:5C:0F:66
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.52.0/23
Signature Algorithm: sha256WithRSAEncryption
62:77:14:68:26:58:fd:77:20:5d:02:b3:ff:54:db:b0:3d:8b:
b1:2a:42:04:c8:84:36:50:97:7f:b0:5d:e6:15:4e:25:3f:a0:
f0:eb:a0:4f:13:1d:e4:78:40:c1:c3:38:f1:d8:c3:2f:69:1f:
dd:88:46:e6:26:ef:04:7d:4d:ee:d0:ed:d0:ff:1a:fe:56:32:
78:d4:ac:3f:c8:53:af:f0:87:24:55:ea:d8:66:93:87:52:ad:
49:61:4c:db:53:bc:a4:9e:4f:6b:f6:3c:83:82:3f:f8:4b:03:
90:fa:95:3c:bb:36:ac:57:16:2e:91:62:a9:65:cf:00:6f:f6:
fb:c2:31:c2:53:0a:cd:ff:8b:23:a5:86:48:e3:08:33:b1:a0:
3c:08:26:f2:b8:65:8e:da:d7:1c:bb:1e:42:71:11:32:5b:09:
f3:09:6d:f4:91:31:65:19:d6:fe:86:2b:73:e6:67:c4:78:59:
91:88:0c:88:84:94:17:e0:51:f8:d6:5d:65:cd:47:48:0e:fa:
03:9d:bf:3d:81:bd:2e:fe:29:0b:7b:8f:97:e6:73:27:8d:d9:
aa:26:e7:57:3e:9d:d0:59:2d:ae:cc:86:16:d8:47:85:c2:aa:
a5:37:ef:70:97:a2:9d:68:e1:d9:19:2f:cf:13:d1:b0:ae:0d:
8c:e6:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:40:02 2025 by rpki-client