Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131769.roa
File: AS131769.roa (raw, json)
Hash identifier: pnlVp/B1w1I/esqjxo+CvZ7jcATm68YwiYb7yHMdeTA=
Subject key identifier: 45:4D:1F:6A:FC:63:47:44:C3:93:8F:E6:6E:D5:F0:FD:42:FC:B2:08
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6E3BC07196DE71D82FF401FE26C8CAB776CF114F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131769.roa
Signing time: Mon 27 Apr 2026 08:00:00 +0000
ROA not before: Mon 27 Apr 2026 07:55:00 +0000
ROA not after: Mon 26 Apr 2027 08:00:00 +0000
asID: 131769
IP address blocks: 103.16.132.0/23 maxlen: 24
103.211.160.0/24 maxlen: 24
103.227.148.0/23 maxlen: 24
203.18.39.0/24 maxlen: 24
203.153.20.0/22 maxlen: 24
210.87.122.0/24 maxlen: 24
2400:c080::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3b:c0:71:96:de:71:d8:2f:f4:01:fe:26:c8:ca:b7:76:cf:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 07:55:00 2026 GMT
Not After : Apr 26 08:00:00 2027 GMT
Subject: CN=454D1F6AFC634744C3938FE66ED5F0FD42FCB208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:e0:4a:e1:55:14:92:76:f0:7f:8a:24:2c:
7f:b2:3e:de:aa:60:57:78:4d:d7:28:ad:8d:02:71:
28:d7:f9:ad:17:37:82:04:49:3f:74:f5:1c:7f:99:
de:a5:6f:8c:1a:01:ad:36:d0:76:f2:2f:a7:08:44:
b4:8d:49:27:a6:35:7f:9f:ea:9f:d2:42:72:c0:2b:
71:8f:f2:c2:34:a4:03:ee:20:62:bb:26:19:51:ee:
8d:e2:fa:67:f5:14:3c:c2:98:da:09:a8:c5:86:68:
e6:f3:84:b3:c1:d3:8c:58:c1:41:17:8e:3d:5c:32:
0d:08:c0:4d:56:ef:6d:66:79:40:1a:30:5d:f8:2e:
3a:a7:1a:0c:07:35:9e:08:28:d6:e0:2c:a2:7d:dd:
4d:92:c8:24:0d:28:36:79:78:88:9e:10:bb:1a:47:
52:12:4a:9c:af:85:36:24:92:60:c3:79:21:7a:35:
d4:23:6b:61:8d:01:cf:01:b2:c4:14:79:c0:57:c8:
e8:cd:42:84:8b:c6:36:6c:a7:de:23:ce:67:ab:27:
bc:bb:67:72:fe:91:57:d9:42:db:91:16:52:c8:70:
1a:25:7d:19:ef:3f:71:f0:05:8d:47:61:08:d8:44:
0b:d1:5f:f5:78:1f:0b:71:d3:3e:51:bb:eb:cc:dd:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:1F:6A:FC:63:47:44:C3:93:8F:E6:6E:D5:F0:FD:42:FC:B2:08
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.132.0/23
103.211.160.0/24
103.227.148.0/23
203.18.39.0/24
203.153.20.0/22
210.87.122.0/24
IPv6:
2400:c080::/32
Signature Algorithm: sha256WithRSAEncryption
33:08:1b:88:9a:5d:c0:73:21:27:d7:73:3b:fb:11:67:1f:03:
8d:f4:52:a4:0c:c2:dd:f9:61:b0:a2:80:bb:ab:12:17:34:ba:
6d:cb:3c:f3:09:71:83:77:31:bc:19:b6:50:92:73:4d:17:da:
bc:0f:c2:ed:b0:91:f1:7a:5a:ff:ce:f7:cc:b7:1e:66:a3:1c:
0e:ff:e0:0b:c0:c6:30:9e:3c:cd:06:08:ad:b3:e6:50:b5:70:
b2:79:1c:26:fd:68:18:f7:60:91:fe:72:80:40:5b:6b:37:f4:
48:17:0b:66:af:e0:82:56:57:99:93:be:ab:68:b5:e6:d1:48:
37:10:0e:d7:fa:42:c3:47:29:5a:43:22:37:3d:86:89:ef:8c:
1d:d5:85:75:cb:2c:4d:98:83:81:c6:bc:ce:26:ff:98:88:86:
fe:ca:d5:97:1b:83:fc:5f:7d:26:bb:eb:c6:34:6c:9b:9c:ba:
5c:4b:75:e5:bc:e6:62:af:77:47:2f:59:7f:b6:d4:24:bc:96:
02:61:a1:2f:4b:99:af:9e:3b:12:0f:3e:36:c8:53:60:69:8f:
c5:b1:42:fb:e8:11:13:8d:38:9a:d1:2f:e7:df:bf:bf:2c:df:
25:41:82:3a:21:b5:d3:82:c8:9d:c2:fe:61:a2:1e:c8:93:d1:
ba:96:29:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 19 01:15:49 2026 by rpki-client