Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38150.roa
File: AS38150.roa (raw, json)
Hash identifier: BzrLA7sGnHzS6hNkvVyjpNg/44v2uTGwgzMSLtLDH9M=
Subject key identifier: C3:71:C4:6F:4E:F9:BE:6E:24:67:73:D7:B7:26:AD:BC:77:5D:EF:36
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0945C9314C1BDF5FC49028F143D613A97B8AC564
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38150.roa
Signing time: Mon 08 Jul 2024 03:00:00 +0000
ROA not before: Mon 08 Jul 2024 02:55:00 +0000
ROA not after: Mon 07 Jul 2025 03:00:00 +0000
asID: 38150
IP address blocks: 103.156.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:45:c9:31:4c:1b:df:5f:c4:90:28:f1:43:d6:13:a9:7b:8a:c5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 8 02:55:00 2024 GMT
Not After : Jul 7 03:00:00 2025 GMT
Subject: CN=C371C46F4EF9BE6E246773D7B726ADBC775DEF36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:5e:33:38:b5:27:c1:04:78:fd:66:4f:b0:
cb:16:34:79:ef:fe:43:c3:d3:12:d7:7f:16:9e:e6:
13:07:56:2e:e7:c9:f1:38:da:a8:f0:21:05:7e:11:
91:b6:e7:2f:6a:c9:57:86:cd:de:fd:0c:aa:a5:f4:
0e:0e:fb:43:0e:2c:c3:2f:97:be:bb:78:24:c8:85:
37:0b:1d:4d:ad:83:c4:08:c6:ec:41:f9:d7:48:78:
a3:20:41:c5:e7:31:07:e1:b0:ac:90:4c:b9:20:99:
91:6f:f1:58:68:d9:85:d2:28:aa:a1:81:76:18:75:
5e:de:04:d6:d2:cd:9b:25:8d:cb:d6:db:5c:81:96:
38:bd:8b:10:03:33:49:6e:a9:04:88:da:49:f3:66:
d7:9b:27:61:15:1e:0b:62:9b:a2:ed:55:a0:1e:88:
33:d6:cd:9b:05:65:3a:bc:78:6c:73:a6:ad:8a:94:
94:76:6a:f4:e9:bc:27:48:c4:af:f4:13:8b:0e:4e:
b9:c5:02:45:70:ac:dd:45:71:d4:41:df:f6:eb:39:
89:bf:21:e6:93:21:e6:e8:0e:af:a6:67:3c:31:3b:
c3:3f:a9:22:54:85:df:86:27:65:b9:cf:03:d7:a7:
74:15:59:a5:4a:7b:04:e8:4f:26:65:ca:01:be:07:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:71:C4:6F:4E:F9:BE:6E:24:67:73:D7:B7:26:AD:BC:77:5D:EF:36
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.240.0/23
Signature Algorithm: sha256WithRSAEncryption
25:1a:e5:5e:3c:68:64:67:0e:3e:45:90:71:e7:05:69:2f:c6:
81:f4:a9:75:71:fa:0d:ad:6c:4d:09:98:0a:b7:0b:9c:b9:a5:
60:09:e1:1e:f7:1d:fe:3a:af:05:c9:f1:9f:3c:2a:86:d6:a5:
b2:4a:c3:92:80:4c:8b:9a:fc:dd:a5:63:2d:86:3a:10:2d:c2:
45:01:9e:76:a2:12:d8:91:c5:cd:37:52:8d:d1:03:84:25:31:
5c:01:dc:ee:12:f6:fb:05:23:ff:6e:95:66:1c:70:a7:93:7e:
9d:d9:a8:af:fe:2f:e9:5e:53:72:56:46:48:33:64:20:76:6a:
72:71:84:35:e4:3a:e0:24:25:4c:db:99:a8:f6:33:dc:47:fa:
b5:d4:b2:a3:87:23:41:36:d1:0e:47:fd:27:88:ba:f4:9f:bc:
0a:89:5e:8d:08:a4:2f:bd:fa:a3:92:00:c1:dc:7c:1f:90:d5:
a2:3f:fe:ef:a5:7f:b0:3b:82:e7:e9:88:21:36:63:13:5c:55:
69:0b:fb:a1:01:8a:d2:11:21:ea:8f:1c:2c:11:4c:c1:b3:f3:
ab:6f:4f:f6:48:da:93:11:4b:f5:e3:1e:e6:f1:80:4e:b5:2e:
35:50:3b:ef:f6:00:b3:b9:3e:fb:1b:56:5f:df:21:f7:aa:49:
53:47:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:34:15 2025 by rpki-client