Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56239.roa
File: AS56239.roa (raw, json)
Hash identifier: CRAXMIjv2eWyrrK+wxSbG5IZqMx8zWG1BVvmdxS99a0=
Subject key identifier: 27:EF:CE:68:0A:84:FA:DE:1E:19:11:25:D1:F0:C7:78:EF:26:77:2E
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 225AA696C575DA5A164BC6D7A31A850B93219831
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56239.roa
Signing time: Tue 22 Oct 2024 10:00:00 +0000
ROA not before: Tue 22 Oct 2024 09:55:00 +0000
ROA not after: Tue 21 Oct 2025 10:00:00 +0000
asID: 56239
IP address blocks: 103.157.64.0/23 maxlen: 24
210.211.16.0/21 maxlen: 24
2407:ff40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5a:a6:96:c5:75:da:5a:16:4b:c6:d7:a3:1a:85:0b:93:21:98:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Oct 22 09:55:00 2024 GMT
Not After : Oct 21 10:00:00 2025 GMT
Subject: CN=27EFCE680A84FADE1E191125D1F0C778EF26772E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:e6:29:f6:ae:ea:c0:a3:4e:3e:76:d6:28:
b0:dd:87:08:49:99:c3:89:08:c8:d4:85:c8:3a:a0:
49:ac:03:57:ca:b9:26:a5:d6:32:24:53:fb:41:6f:
26:1c:7f:1f:cf:ad:05:2f:9a:66:bb:c9:49:cb:b0:
ac:f4:14:88:f1:5e:f4:7e:91:22:bd:f9:0e:ef:1c:
ea:08:32:ab:3f:f8:b1:2c:17:4c:75:6c:89:54:9f:
fb:7f:13:3f:7b:ec:74:a5:44:25:11:2f:9a:8b:d4:
d9:73:a5:67:4e:0f:4e:cc:77:de:6b:d8:df:c3:e8:
5e:c1:21:10:59:93:1c:28:be:ff:84:d3:15:e6:97:
91:5f:5f:a0:27:94:9e:2a:d3:32:de:44:1f:9e:a1:
b9:21:ba:4e:b3:dd:6d:20:07:c0:b1:08:62:49:16:
f9:65:fc:83:ef:13:fe:c2:d4:8f:c3:ed:9a:82:05:
46:12:8c:24:27:b1:3f:cd:25:6c:c7:4f:40:e2:ca:
70:4c:09:55:32:d1:0f:a5:eb:80:f1:7e:24:ce:ce:
36:29:e9:02:6d:e3:8e:a2:4d:43:ff:45:9c:ef:c9:
da:df:ee:fc:80:79:36:29:82:f2:4c:e9:ea:2d:d2:
c6:d2:6a:6e:53:3d:53:25:f1:f7:16:e8:8b:21:62:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EF:CE:68:0A:84:FA:DE:1E:19:11:25:D1:F0:C7:78:EF:26:77:2E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.64.0/23
210.211.16.0/21
IPv6:
2407:ff40::/32
Signature Algorithm: sha256WithRSAEncryption
5d:6b:24:f9:60:db:93:83:7f:3a:a6:9e:3e:91:41:a9:36:33:
50:5a:26:90:81:c8:36:62:c4:da:ad:1f:22:eb:af:2a:bd:5c:
49:15:39:1f:bf:df:68:57:f7:5c:95:d3:0c:e6:69:ba:c2:da:
15:6d:6f:33:cf:fc:f4:3d:a3:90:57:fd:9a:90:00:75:9b:43:
37:5c:07:df:8a:86:47:d4:b7:a3:29:65:93:9f:4c:6b:af:aa:
6f:b4:74:04:76:3d:5c:24:e5:3e:a9:63:d4:26:ac:cd:70:ae:
49:b4:4b:ed:55:21:c4:5c:6f:50:2c:58:00:cf:9c:a4:69:52:
08:bc:29:d1:59:38:1c:e1:11:67:00:e2:d2:01:05:bb:c2:19:
9e:54:ae:fe:6c:95:fe:a2:58:4d:84:d1:fb:84:66:79:35:8c:
62:9a:79:54:73:98:ee:02:d0:2a:e1:27:04:09:57:bf:01:26:
7c:77:dc:dc:15:9e:d5:8e:f5:33:11:8f:f8:35:54:ca:84:50:
3a:99:c7:40:61:ec:f1:1f:ac:d6:1d:c7:00:24:27:38:5d:57:
69:69:cd:14:e8:d3:a0:9a:9d:53:7a:2c:95:74:89:8c:98:cf:
4a:9d:da:47:41:3e:6b:bb:47:95:af:8e:33:da:bc:25:40:33:
f3:3c:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:34:16 2025 by rpki-client