Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa
File: AS151554.roa (raw, json)
Hash identifier: qKxhTXQ1gpdVlzamMfB58Kc/xgzC7Fh8pj+MUjQYzFY=
Subject key identifier: 52:84:EB:80:B2:56:AF:DA:F0:11:E2:83:C3:14:D0:5B:9F:1D:28:40
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 65DD2AFCDEC3FB7EB1EDF8F577AFA5285F834D58
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa
Signing time: Thu 30 Jan 2025 05:00:00 +0000
ROA not before: Thu 30 Jan 2025 04:55:00 +0000
ROA not after: Thu 29 Jan 2026 05:00:00 +0000
asID: 151554
IP address blocks: 103.244.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:dd:2a:fc:de:c3:fb:7e:b1:ed:f8:f5:77:af:a5:28:5f:83:4d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 30 04:55:00 2025 GMT
Not After : Jan 29 05:00:00 2026 GMT
Subject: CN=5284EB80B256AFDAF011E283C314D05B9F1D2840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:e0:9a:a1:2e:64:7a:3c:cb:94:87:dd:8c:
b2:7b:30:04:e5:52:49:0c:3a:68:de:31:90:08:cc:
02:d8:aa:32:fa:d1:6c:72:6e:dd:c9:52:91:b0:41:
18:1b:c9:8f:14:17:7f:72:d8:a1:0c:61:ca:ff:d3:
80:18:25:28:5f:4f:38:f2:0a:3b:dd:0b:2e:f4:1f:
a7:60:bc:f3:83:52:65:17:e3:b6:55:78:03:94:2f:
1e:1f:68:df:27:c4:05:36:b1:6a:28:91:83:55:43:
fd:88:d5:cf:05:6d:0a:4a:3c:29:12:67:40:f3:73:
6c:d4:ec:37:cc:90:ef:3e:bc:5b:e5:96:8e:4f:46:
82:9b:b2:51:46:fd:f5:ba:46:56:0b:8f:52:79:34:
a2:a7:6c:84:69:66:55:3c:4b:a8:6e:02:24:88:6d:
e2:39:52:1a:a9:e3:d2:5a:3a:e9:e2:51:a6:e1:de:
06:42:ed:8a:e9:e9:62:02:36:32:a7:69:f9:2a:0c:
55:5f:e2:11:1e:74:fe:7a:8a:56:17:22:c3:62:c0:
02:53:0b:06:41:b3:b7:e5:b8:43:6f:0e:76:b6:91:
8a:38:20:2f:82:5e:28:3c:6e:bc:a6:be:02:af:11:
4b:ae:d7:b9:de:95:20:fc:b4:43:6b:c2:07:9b:27:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:84:EB:80:B2:56:AF:DA:F0:11:E2:83:C3:14:D0:5B:9F:1D:28:40
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.104.0/23
Signature Algorithm: sha256WithRSAEncryption
74:95:e0:e9:5f:63:f0:9e:68:ac:b2:86:34:e3:36:97:58:78:
bd:ec:86:f0:db:23:7e:f9:22:9d:64:9e:d5:78:36:a7:d9:3c:
7d:99:0e:1f:18:a3:b4:ad:0c:c7:51:89:02:cc:61:a9:d0:d6:
d1:65:b8:da:6c:0c:7c:97:e7:6a:d1:f7:66:ee:bb:53:41:fe:
71:73:78:56:9d:db:73:2f:eb:bf:2b:7d:cf:62:21:8b:4f:0d:
45:b9:7b:fb:59:aa:75:0b:91:92:81:61:84:61:15:22:a4:84:
80:b0:02:64:30:9a:8a:78:04:8b:0e:26:0c:d9:d1:cb:fb:ec:
29:62:ef:fd:04:05:c8:9e:99:c7:e7:2d:a8:d6:b2:c9:49:c2:
5c:0e:33:0e:9d:13:e4:7c:d5:46:b0:e2:c7:17:ea:46:ed:c8:
09:25:b2:68:1b:6c:0f:e7:45:ec:dd:77:88:61:bf:3c:f5:07:
88:8b:af:17:b1:96:ff:06:c0:c1:39:75:de:7a:ed:6c:99:ee:
b3:7f:74:8e:84:a2:4a:24:27:9b:d5:9a:90:33:48:d8:0e:72:
bd:31:63:cb:c9:16:47:8f:2b:fc:33:bf:9b:cb:f3:d8:fa:1b:
22:d4:1f:2d:c1:12:ae:7a:6b:a3:6c:e5:fb:70:3a:2c:ee:68:
43:e8:23:79
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUZd0q/N7D+36x7fj1d6+lKF+DTVgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEzMDA0NTUwMFoX
DTI2MDEyOTA1MDAwMFowMzExMC8GA1UEAxMoNTI4NEVCODBCMjU2QUZEQUYwMTFF
MjgzQzMxNEQwNUI5RjFEMjg0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANgQ4JqhLmR6PMuUh92MsnswBOVSSQw6aN4xkAjMAtiqMvrRbHJu3clSkbBB
GBvJjxQXf3LYoQxhyv/TgBglKF9POPIKO90LLvQfp2C884NSZRfjtlV4A5QvHh9o
3yfEBTaxaiiRg1VD/YjVzwVtCko8KRJnQPNzbNTsN8yQ7z68W+WWjk9GgpuyUUb9
9bpGVguPUnk0oqdshGlmVTxLqG4CJIht4jlSGqnj0lo66eJRpuHeBkLtiunpYgI2
Mqdp+SoMVV/iER50/nqKVhciw2LAAlMLBkGzt+W4Q28OdraRijggL4JeKDxuvKa+
Aq8RS67Xud6VIPy0Q2vCB5sn4cECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRShOuA
slav2vAR4oPDFNBbnx0oQDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU1NC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWf0aDANBgkqhkiG9w0BAQsFAAOCAQEAdJXg6V9j8J5orLKGNOM2
l1h4veyG8NsjfvkinWSe1Xg2p9k8fZkOHxijtK0Mx1GJAsxhqdDW0WW42mwMfJfn
atH3Zu67U0H+cXN4Vp3bcy/rvyt9z2Ihi08NRbl7+1mqdQuRkoFhhGEVIqSEgLAC
ZDCaingEiw4mDNnRy/vsKWLv/QQFyJ6Zx+ctqNayyUnCXA4zDp0T5HzVRrDixxfq
Ru3ICSWyaBtsD+dF7N13iGG/PPUHiIuvF7GW/wbAwTl13nrtbJnus390joSiSiQn
m9WakDNI2A5yvTFjy8kWR48r/DO/m8vz2PobItQfLcESrnpro2zl+3A6LO5oQ+gj
eQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 12:36:14 2025 by rpki-client