Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa
File: AS149359.roa (raw, json)
Hash identifier: zUqmcigRUFQryxwBk+eMfEiS8ROE2wD/3BMOZ8xFvas=
Subject key identifier: CF:C6:EB:E5:06:D3:6C:0F:5F:4F:CC:25:2D:B6:FE:5E:92:28:75:1E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3DE59765C1A6AB0426102497EF0219A3109C7B60
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa
Signing time: Thu 02 Jan 2025 18:49:19 +0000
ROA not before: Thu 02 Jan 2025 18:44:19 +0000
ROA not after: Thu 01 Jan 2026 18:49:19 +0000
asID: 149359
IP address blocks: 49.0.26.0/23 maxlen: 24
103.19.78.0/23 maxlen: 24
103.180.118.0/23 maxlen: 24
103.215.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e5:97:65:c1:a6:ab:04:26:10:24:97:ef:02:19:a3:10:9c:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 2 18:44:19 2025 GMT
Not After : Jan 1 18:49:19 2026 GMT
Subject: CN=CFC6EBE506D36C0F5F4FCC252DB6FE5E9228751E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:c4:aa:51:34:b0:60:f6:58:53:a6:bc:ed:
35:44:8f:8e:ff:90:bf:7c:d6:24:82:d9:36:02:35:
32:ac:be:bb:03:9a:d3:66:70:4e:93:34:0d:48:a1:
8a:8f:87:9a:95:ca:f2:f2:3b:f1:00:5e:6e:83:e7:
8e:73:5a:79:da:f4:eb:60:84:7c:07:f0:ae:e8:dd:
2a:19:82:a9:33:c7:06:33:63:bb:87:84:f7:84:73:
d4:d0:ad:c8:96:ab:72:0e:49:41:6c:27:af:25:5f:
44:46:0b:60:d6:23:b6:0b:f1:b8:e8:7e:81:fa:e5:
d4:35:e8:d1:25:ff:71:bb:24:56:2e:90:19:da:96:
5b:0c:ff:1b:c3:3f:c7:d4:18:df:b6:4e:e2:6a:e4:
74:11:03:24:ba:e7:a4:40:cd:5b:90:45:7b:8b:f4:
27:d1:cb:e1:53:74:b5:63:1d:d7:0b:6c:4e:3c:4b:
3b:07:4a:5a:86:41:ad:9a:da:ae:eb:55:22:76:cb:
8f:68:85:95:96:79:68:71:72:54:d8:bd:14:8f:59:
5e:f0:05:93:dc:b7:c1:26:d4:cd:22:0c:1a:c1:0d:
49:cf:0e:31:69:1e:c1:97:8c:4a:a2:9f:f9:76:98:
65:9a:7e:b2:c0:6f:bd:9b:1b:9a:f7:5b:5b:fa:ba:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C6:EB:E5:06:D3:6C:0F:5F:4F:CC:25:2D:B6:FE:5E:92:28:75:1E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.0.26.0/23
103.19.78.0/23
103.180.118.0/23
103.215.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:94:ea:e5:e1:ea:c3:21:88:14:de:9c:4e:85:df:3c:4a:88:
bb:a4:26:0b:c3:34:6a:bc:17:8b:b3:1c:6d:e7:c5:b4:fc:21:
d7:3c:6a:de:a7:2c:88:e8:fd:49:d1:e2:da:ac:78:45:bb:04:
b6:ed:49:5b:2d:34:0f:b4:b2:4d:d7:4f:62:ae:a1:28:22:af:
24:86:5b:02:ed:1d:33:d3:31:a7:41:10:b2:32:bb:3e:0c:7a:
a4:40:7b:e2:67:3f:40:ac:98:57:2b:19:91:be:02:d4:91:fc:
29:c8:13:4c:21:e0:60:1d:c0:d9:55:50:e7:6d:3e:ad:0b:41:
f1:07:ea:c2:15:60:af:40:d3:84:f1:55:14:f2:08:cc:30:2b:
41:3e:c6:09:5c:98:75:06:e3:71:23:56:8b:eb:40:4b:8c:ac:
b2:76:5a:6a:12:56:8b:4b:65:dc:4a:0b:d6:36:2a:7d:36:b8:
be:fb:a5:24:c3:07:ec:10:a0:8d:55:b9:2d:18:cf:2a:92:31:
7d:be:b3:2d:ce:55:9d:97:cb:f7:a7:78:f7:6a:e0:0f:01:be:
63:b6:f8:72:6c:17:34:45:3b:02:d4:d4:fc:e8:7a:bb:d4:b0:
f2:22:bb:ea:c7:e3:5a:5d:22:a6:7a:4e:ad:70:4d:a4:ed:4c:
7a:09:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:36:21 2025 by rpki-client