Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa
File: AS150266.roa (raw, json)
Hash identifier: Ii1Db4FPr3qGsssotdhYcIiowKTcXphqHu9Xc2F9biE=
Subject key identifier: DA:EE:B7:20:0E:46:A7:09:5F:27:51:F5:EE:F1:DD:DB:63:12:FF:14
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 71CE33363EFD5204864D8012D04DD3C64C79B2A0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa
Signing time: Mon 20 May 2024 05:00:00 +0000
ROA not before: Mon 20 May 2024 04:55:00 +0000
ROA not after: Mon 19 May 2025 05:00:00 +0000
asID: 150266
IP address blocks: 103.91.137.0/24 maxlen: 24
103.218.183.0/24 maxlen: 24
2001:df2:7b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ce:33:36:3e:fd:52:04:86:4d:80:12:d0:4d:d3:c6:4c:79:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 20 04:55:00 2024 GMT
Not After : May 19 05:00:00 2025 GMT
Subject: CN=DAEEB7200E46A7095F2751F5EEF1DDDB6312FF14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:77:37:2b:bc:b9:41:3b:39:ed:3a:b8:71:
49:8a:db:48:65:2f:11:6f:d2:1f:10:7e:5b:00:e0:
04:0a:ce:88:c5:27:25:e4:9e:64:01:5b:72:75:68:
f0:5e:fd:de:5d:2c:01:4e:f4:ab:1f:97:f0:2a:a1:
2a:8d:62:dc:3d:5b:04:76:1d:55:e5:91:5e:46:6a:
66:ce:13:cc:cc:23:f9:7e:38:59:79:5f:f8:e0:d2:
c6:00:66:99:ee:76:47:48:6b:5c:55:09:44:f2:41:
67:44:36:50:5a:d4:20:a1:39:6e:84:39:02:52:39:
54:81:33:05:0b:74:3d:b0:40:00:82:b1:12:aa:18:
a0:72:c7:df:90:b0:59:41:19:3b:c0:8d:20:f7:95:
c6:30:51:2f:0a:05:87:6d:41:e5:86:0c:8a:af:54:
1e:f1:f5:3d:e2:13:68:69:4c:c6:62:98:b0:db:12:
c5:65:4a:fb:69:8d:5a:32:ce:52:f0:0b:f7:7f:c5:
71:13:71:a8:32:fa:c0:30:72:e6:7a:1f:d7:27:93:
40:75:01:19:8f:04:88:26:c5:cf:6c:8c:e6:a2:e2:
9f:df:c5:5f:e3:d3:1a:06:79:d4:88:fd:30:d6:1a:
b0:c9:9d:2c:f6:68:32:a7:cf:e9:97:95:e8:b8:d0:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EE:B7:20:0E:46:A7:09:5F:27:51:F5:EE:F1:DD:DB:63:12:FF:14
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.137.0/24
103.218.183.0/24
IPv6:
2001:df2:7b40::/48
Signature Algorithm: sha256WithRSAEncryption
8f:a7:08:dc:28:54:97:fd:ca:17:19:a8:15:3b:90:05:a6:90:
67:53:f2:69:53:dd:3a:95:6d:ee:9a:80:34:41:79:30:36:98:
33:1a:df:84:a3:c1:c5:ad:59:cb:2d:17:a2:af:34:a7:b3:19:
db:06:59:e7:eb:f1:e7:fb:60:95:ed:95:b1:dd:93:67:a0:25:
6c:8d:e0:82:c4:9e:21:00:c7:52:23:e7:1b:8e:93:2f:8c:a6:
5f:ee:9b:e5:ce:04:fc:7d:c3:c1:8c:9a:63:04:5a:c5:37:40:
9a:ce:fe:5e:7e:df:e9:12:d5:03:e5:0e:51:32:cd:d3:b2:fb:
77:62:51:57:ff:2c:46:00:db:9c:da:71:34:c1:e0:ab:e4:28:
89:46:9c:f5:70:ce:2d:b8:fd:16:39:e8:ce:7e:97:52:28:38:
3c:f6:c7:54:8b:08:3b:9c:2a:a9:57:d9:de:b2:ac:16:d8:1a:
b7:d0:f5:0f:db:57:d4:f1:05:7a:37:0d:92:cd:21:ac:9e:58:
ea:b2:67:dc:35:03:e8:63:7a:9e:00:4b:fb:e3:dd:d1:ef:62:
6a:02:8e:ca:0b:b4:82:8b:f8:3c:77:31:d9:13:02:63:6b:09:
f6:09:12:bb:38:c6:d7:0b:d3:ad:27:f7:c4:31:15:1f:a4:05:
12:fb:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:47:40 2025 by rpki-client