Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa
File: AS38505.roa (raw, json)
Hash identifier: WFYbIoLpl6zer5Y1vxLCQ0Ol9ELyxRmQz/+sB3t/qpY=
Subject key identifier: 3F:91:18:2C:D1:87:7E:7F:D2:52:6E:19:F2:95:64:C6:70:F2:14:CF
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1A63B2E8E810ED7942069D86F9127E7B32A03ACA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa
Signing time: Tue 10 Dec 2024 05:00:21 +0000
ROA not before: Tue 10 Dec 2024 04:55:21 +0000
ROA not after: Tue 09 Dec 2025 05:00:21 +0000
asID: 38505
IP address blocks: 103.11.186.0/23 maxlen: 24
203.217.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:63:b2:e8:e8:10:ed:79:42:06:9d:86:f9:12:7e:7b:32:a0:3a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 10 04:55:21 2024 GMT
Not After : Dec 9 05:00:21 2025 GMT
Subject: CN=3F91182CD1877E7FD2526E19F29564C670F214CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:e0:bf:7f:a8:9f:b6:cc:53:2b:2f:f5:f6:
fb:af:a2:c3:36:e0:dd:9f:87:b0:0c:aa:45:51:d7:
d5:37:14:e5:68:2e:17:92:78:02:cf:a6:4f:7b:a3:
b0:92:6c:90:c1:35:59:ed:d6:95:ee:64:70:d5:7b:
d5:c2:db:65:c4:01:ad:46:5c:cf:7d:ae:25:ee:23:
aa:f4:66:7c:e7:57:8a:80:fd:1f:34:fc:5e:26:68:
c9:8a:3c:b2:fe:6a:0b:fc:7d:d3:00:dc:a0:e1:ba:
04:6c:27:f6:6f:43:31:7e:fe:1c:9e:94:60:b8:44:
ae:b9:dc:47:c6:29:8c:b1:96:f6:32:96:d1:43:36:
4b:36:0c:79:44:1a:52:bf:09:31:ab:2d:e0:eb:b1:
c1:5b:09:ab:d9:af:b1:83:35:98:67:d7:d8:41:a1:
ec:00:2b:3a:9c:ef:22:1e:d2:1a:e0:c6:91:50:d6:
aa:96:e1:ec:7f:c7:24:4c:b2:3f:ef:69:d4:43:9f:
b0:10:6d:9b:6d:9c:b2:a0:7f:f1:6b:0b:73:de:ef:
6d:31:5d:fd:43:a6:1f:02:f5:11:c7:80:98:8c:71:
4d:7f:06:5c:01:9d:3e:0f:64:4f:e3:4b:54:ba:77:
7f:ba:32:81:53:ce:8d:05:ba:e5:c8:33:a4:ed:47:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:18:2C:D1:87:7E:7F:D2:52:6E:19:F2:95:64:C6:70:F2:14:CF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38505.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.11.186.0/23
203.217.132.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:95:56:04:85:71:e2:18:a3:b3:26:2c:84:e8:d3:9a:21:97:
7e:a7:bc:a3:f3:69:4e:14:b1:63:99:1d:db:ef:2d:30:63:ff:
7d:b4:21:fb:fc:98:65:17:65:c7:91:2c:43:27:14:7f:e1:b0:
0a:82:94:16:a6:c6:14:6b:61:fa:ba:ff:9b:47:61:bf:61:3d:
0e:e0:2f:84:d8:87:de:3e:cc:31:f5:3c:d9:4a:46:ec:fa:ca:
51:18:6d:fb:45:44:89:d5:c0:7b:8f:da:fc:88:cf:2f:76:42:
a9:11:36:47:31:f5:46:62:a3:28:1d:68:aa:fc:a8:3f:62:5d:
72:a5:d6:8b:6d:b4:3a:89:1e:2b:c0:39:cf:41:ac:7b:b8:44:
f4:9a:e0:b1:b7:c9:90:5b:b5:e9:1d:f8:d9:bd:24:1e:25:ed:
b8:3a:24:24:de:08:9f:36:6d:d7:62:20:9c:d8:9e:4e:4a:d7:
1e:2e:b9:a1:03:89:01:0d:23:91:cd:f1:3b:45:d6:1d:d1:7c:
32:5f:f5:50:e1:8a:3b:22:8e:f2:0c:bc:47:54:08:6d:cf:e1:
49:ae:2c:ca:98:e4:ee:9e:19:99:60:02:07:92:fe:d9:df:7a:
57:f2:3d:bb:3b:46:2c:0e:84:2e:15:64:72:79:e7:d2:02:ac:
6f:a0:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:34:16 2025 by rpki-client