Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa
File: AS141976.roa (raw, json)
Hash identifier: yxAjs3lRwphtp+W0X1UIwRRsDJ3bfg8iKe3uIq3WLvo=
Subject key identifier: 9D:D5:20:6B:0A:A5:99:68:63:AA:07:AB:5F:19:7F:DB:4E:34:43:BE
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 307EAA880095EC2030140AC577C50D85B364E721
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa
Signing time: Tue 10 Dec 2024 05:00:05 +0000
ROA not before: Tue 10 Dec 2024 04:55:05 +0000
ROA not after: Tue 09 Dec 2025 05:00:05 +0000
asID: 141976
IP address blocks: 103.167.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:7e:aa:88:00:95:ec:20:30:14:0a:c5:77:c5:0d:85:b3:64:e7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:05 2024 GMT
Not After : Dec 9 05:00:05 2025 GMT
Subject: CN=9DD5206B0AA5996863AA07AB5F197FDB4E3443BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:57:2e:da:65:1d:86:b6:ec:6e:50:61:a6:
3d:31:6e:3f:b4:77:49:ab:cb:65:d4:10:f4:7c:fe:
33:00:98:78:fa:42:a6:1d:2f:1c:69:06:c9:42:af:
4c:48:91:8f:4b:a8:6a:e9:54:54:e2:b0:f0:c0:67:
85:6d:5c:c3:25:51:f4:c2:13:46:5c:c7:1e:e5:48:
70:9b:65:c3:6e:68:b6:6c:0f:f9:92:72:18:9e:8a:
e5:aa:ef:9a:50:ad:61:ac:51:3f:ea:62:98:64:6d:
18:88:9e:e6:e5:7d:5d:fb:1a:6a:ee:65:5c:fb:ba:
fe:35:f8:ba:95:88:32:75:d9:5d:5b:16:8f:13:d0:
bf:5c:12:a5:e6:40:05:20:f0:a5:91:61:95:d5:28:
42:6b:b0:bf:ae:be:2c:45:65:2e:da:83:6c:64:bf:
e3:12:d0:e2:9f:3b:b4:56:ab:86:68:96:ea:94:79:
cd:ac:3c:bd:c4:8a:49:ba:b9:71:e9:00:b6:6a:ef:
65:44:9e:42:a7:b3:e9:ea:43:af:62:66:ad:7b:28:
4c:23:92:74:13:39:af:f5:c3:95:57:84:c7:be:96:
98:77:1c:ef:3b:5e:f2:25:3c:ce:3d:89:17:c3:cc:
0d:19:b4:30:72:a9:5a:d4:cc:be:a9:4e:17:d8:10:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D5:20:6B:0A:A5:99:68:63:AA:07:AB:5F:19:7F:DB:4E:34:43:BE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.114.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e1:07:b6:4e:65:b6:2a:12:ce:06:00:40:97:a7:16:90:1e:
8a:6d:d9:10:9a:48:46:24:2f:e9:71:65:23:22:bf:f0:7f:05:
a6:7d:42:07:be:1c:a7:3e:c5:31:d7:ba:3f:b1:16:a5:fd:6f:
0b:d4:bb:ce:a2:4e:77:70:a0:83:f0:fd:aa:2c:0d:d4:11:8f:
9c:a8:8e:dd:90:38:a6:3d:8c:f8:11:61:73:38:bb:1e:78:a4:
e1:ee:f8:71:1d:48:21:7a:1f:fc:1c:e2:94:ca:23:68:e7:2d:
f9:7f:60:32:31:a7:0d:3e:89:f6:f9:e2:29:34:ce:0b:bc:4e:
7b:4c:18:cb:14:17:9e:3b:25:96:10:5a:5b:76:ae:80:a5:01:
81:f3:24:ea:29:c7:d4:79:4c:56:db:14:dc:1c:04:9b:28:5c:
28:b1:e0:0b:e0:d3:b6:1c:55:af:51:e9:49:c8:74:14:5f:ee:
ef:b8:a8:88:51:8b:91:b8:42:fa:86:ed:d7:fc:e5:1a:3d:e1:
0f:d3:2e:ef:53:79:e5:ca:d0:4e:2c:85:fb:f5:4a:99:9a:fc:
3e:e2:68:2c:8b:17:b0:54:34:6b:ff:d6:d0:bf:d0:ba:37:9d:
2b:97:d2:21:03:c1:fa:ed:9d:b6:ff:65:b9:50:7c:f4:70:a3:
68:ad:7e:8c
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUMH6qiACV7CAwFArFd8UNhbNk5yEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNVoX
DTI1MTIwOTA1MDAwNVowMzExMC8GA1UEAxMoOURENTIwNkIwQUE1OTk2ODYzQUEw
N0FCNUYxOTdGREI0RTM0NDNCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANYBVy7aZR2GtuxuUGGmPTFuP7R3SavLZdQQ9Hz+MwCYePpCph0vHGkGyUKv
TEiRj0uoaulUVOKw8MBnhW1cwyVR9MITRlzHHuVIcJtlw25otmwP+ZJyGJ6K5arv
mlCtYaxRP+pimGRtGIie5uV9Xfsaau5lXPu6/jX4upWIMnXZXVsWjxPQv1wSpeZA
BSDwpZFhldUoQmuwv66+LEVlLtqDbGS/4xLQ4p87tFarhmiW6pR5zaw8vcSKSbq5
cekAtmrvZUSeQqez6epDr2JmrXsoTCOSdBM5r/XDlVeEx76WmHcc7zte8iU8zj2J
F8PMDRm0MHKpWtTMvqlOF9gQxJ8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSd1SBr
CqWZaGOqB6tfGX/bTjRDvjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk3Ni5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGencjANBgkqhkiG9w0BAQsFAAOCAQEAaeEHtk5ltioSzgYAQJen
FpAeim3ZEJpIRiQv6XFlIyK/8H8Fpn1CB74cpz7FMde6P7EWpf1vC9S7zqJOd3Cg
g/D9qiwN1BGPnKiO3ZA4pj2M+BFhczi7Hnik4e74cR1IIXof/BzilMojaOct+X9g
MjGnDT6J9vniKTTOC7xOe0wYyxQXnjsllhBaW3augKUBgfMk6inH1HlMVtsU3BwE
myhcKLHgC+DTthxVr1HpSch0FF/u77ioiFGLkbhC+obt1/zlGj3hD9Mu71N55crQ
TiyF+/VKmZr8PuJoLIsXsFQ0a//W0L/QujedK5fSIQPB+u2dtv9luVB89HCjaK1+
jA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:43:53 2025 by rpki-client