Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
File: AS133800.roa (raw, json)
Hash identifier: Ow5ja54DD3rav1PmJRZ9RbbTIm9J7as7hCbFAuDFxwQ=
Subject key identifier: A4:D4:8B:D7:1F:49:40:A1:75:CB:FA:90:21:3E:72:BF:2B:F3:51:DB
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 764709BB058EDD8A0E7C5289FD521212D1EEF9CC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
Signing time: Tue 28 Apr 2026 04:00:00 +0000
ROA not before: Tue 28 Apr 2026 03:55:00 +0000
ROA not after: Tue 27 Apr 2027 04:00:00 +0000
asID: 133800
IP address blocks: 103.28.75.0/24 maxlen: 24
103.31.204.0/23 maxlen: 24
103.44.26.0/23 maxlen: 24
103.77.104.0/23 maxlen: 24
103.89.0.0/22 maxlen: 24
103.89.4.0/22 maxlen: 24
103.93.52.0/22 maxlen: 24
103.93.56.0/22 maxlen: 24
103.93.64.0/22 maxlen: 24
103.93.128.0/22 maxlen: 24
103.93.132.0/22 maxlen: 24
103.93.160.0/22 maxlen: 24
103.125.180.0/23 maxlen: 24
103.127.96.0/23 maxlen: 24
103.127.98.0/23 maxlen: 24
103.127.132.0/23 maxlen: 24
103.127.134.0/23 maxlen: 24
103.127.136.0/23 maxlen: 24
103.127.138.0/23 maxlen: 24
103.127.208.0/23 maxlen: 24
103.127.210.0/23 maxlen: 24
103.129.148.0/23 maxlen: 24
103.150.80.0/24 maxlen: 24
103.150.84.0/23 maxlen: 24
103.150.86.0/23 maxlen: 24
103.150.88.0/23 maxlen: 24
103.150.90.0/23 maxlen: 24
103.150.92.0/23 maxlen: 24
103.150.96.0/23 maxlen: 24
103.150.98.0/23 maxlen: 24
103.150.100.0/23 maxlen: 24
103.150.102.0/23 maxlen: 24
103.150.116.0/23 maxlen: 24
103.150.120.0/23 maxlen: 24
103.150.190.0/23 maxlen: 24
103.150.192.0/23 maxlen: 24
103.150.194.0/23 maxlen: 24
103.150.196.0/23 maxlen: 24
103.175.216.0/23 maxlen: 24
103.175.218.0/23 maxlen: 24
103.175.220.0/23 maxlen: 24
103.196.146.0/23 maxlen: 24
103.196.152.0/23 maxlen: 24
103.196.154.0/23 maxlen: 24
116.206.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:47:09:bb:05:8e:dd:8a:0e:7c:52:89:fd:52:12:12:d1:ee:f9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 28 03:55:00 2026 GMT
Not After : Apr 27 04:00:00 2027 GMT
Subject: CN=A4D48BD71F4940A175CBFA90213E72BF2BF351DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:a2:16:b2:d6:7a:ae:5a:bd:db:de:a3:cb:
26:08:e5:6c:3a:ea:26:bf:fc:4c:20:77:49:0a:92:
b8:e4:07:88:18:f5:29:53:3b:cf:f8:49:94:2b:dc:
5b:d8:94:20:3f:3a:15:3b:9f:13:95:8e:19:6b:45:
9a:21:95:ee:6d:72:10:da:bf:ae:ae:ea:37:01:6c:
b8:ab:93:f3:a5:48:83:b6:64:87:bd:a4:67:8a:67:
1c:09:59:f2:cf:55:2e:66:78:9d:e2:fa:d3:ed:7c:
2e:fc:2b:0a:6d:a8:67:9a:1a:ce:db:03:8a:26:e5:
44:53:54:36:4a:b4:95:ac:52:94:2a:fa:83:db:b2:
f2:86:a3:03:19:3a:8e:d9:88:33:b2:eb:d1:f2:e4:
97:f7:59:9d:ff:52:d2:4f:f9:1d:c2:38:9e:ed:6a:
ae:ff:4c:4a:40:d9:26:50:ef:12:e2:54:e2:8e:96:
eb:49:b1:a4:19:b3:97:93:82:50:62:12:6f:48:81:
83:a3:53:4a:c9:01:d0:c1:4c:97:ae:fa:6c:e3:38:
4f:2e:9c:13:ba:86:1b:6e:03:df:41:28:44:8a:6f:
18:3a:12:87:14:fb:13:80:41:1f:53:cb:14:7b:77:
c1:52:0b:b0:f3:4c:a7:83:42:39:08:6c:37:91:17:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D4:8B:D7:1F:49:40:A1:75:CB:FA:90:21:3E:72:BF:2B:F3:51:DB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133800.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.75.0/24
103.31.204.0/23
103.44.26.0/23
103.77.104.0/23
103.89.0.0/21
103.93.52.0-103.93.59.255
103.93.64.0/22
103.93.128.0/21
103.93.160.0/22
103.125.180.0/23
103.127.96.0/22
103.127.132.0-103.127.139.255
103.127.208.0/22
103.129.148.0/23
103.150.80.0/24
103.150.84.0-103.150.93.255
103.150.96.0/21
103.150.116.0/23
103.150.120.0/23
103.150.190.0-103.150.197.255
103.175.216.0-103.175.221.255
103.196.146.0/23
103.196.152.0/22
116.206.196.0/22
Signature Algorithm: sha256WithRSAEncryption
58:3f:e1:dd:9f:49:05:b9:b7:e3:8c:6d:46:af:ed:34:02:ae:
c4:6c:ca:48:3b:ba:ed:69:3a:b3:72:de:34:34:a6:7f:dc:83:
3e:66:b8:d0:79:b8:3a:d5:4a:17:17:33:13:70:25:dc:41:82:
c3:66:fd:eb:7c:c9:8e:b2:f0:37:29:34:42:12:45:73:12:d5:
62:73:5a:d4:38:be:10:fe:9f:6c:16:aa:4d:41:d9:95:36:1f:
30:18:52:99:55:23:7e:d4:66:89:ae:7a:03:41:4e:dd:a8:71:
51:17:81:f7:83:c2:ea:e1:81:e7:bd:e2:b2:26:03:52:ad:84:
a4:83:ea:a4:fb:67:f0:c4:80:4b:20:b2:1b:b4:c6:2b:25:0a:
59:92:fb:a0:79:7b:e9:2d:29:f1:1f:37:76:9d:79:63:d1:ad:
76:c5:1d:37:05:8a:36:88:6f:d0:9d:24:35:03:b1:0a:d0:6c:
a4:66:76:1c:9c:4e:bc:83:82:b0:df:e5:db:0a:a1:be:14:ba:
b9:92:c2:7a:27:1d:96:57:a7:f7:8d:bb:b3:86:a2:70:ff:4e:
81:e4:a3:59:7b:92:5c:1b:77:91:8e:3b:57:d0:5f:e8:d1:e3:
aa:95:87:87:fe:52:86:48:56:d3:aa:59:0c:26:54:72:f4:5b:
02:61:c0:b6
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIUdkcJuwWO3YoOfFKJ/VISEtHu+cwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyODAzNTUwMFoX
DTI3MDQyNzA0MDAwMFowMzExMC8GA1UEAxMoQTRENDhCRDcxRjQ5NDBBMTc1Q0JG
QTkwMjEzRTcyQkYyQkYzNTFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALUnohay1nquWr3b3qPLJgjlbDrqJr/8TCB3SQqSuOQHiBj1KVM7z/hJlCvc
W9iUID86FTufE5WOGWtFmiGV7m1yENq/rq7qNwFsuKuT86VIg7Zkh72kZ4pnHAlZ
8s9VLmZ4neL60+18LvwrCm2oZ5oaztsDiiblRFNUNkq0laxSlCr6g9uy8oajAxk6
jtmIM7Lr0fLkl/dZnf9S0k/5HcI4nu1qrv9MSkDZJlDvEuJU4o6W60mxpBmzl5OC
UGISb0iBg6NTSskB0MFMl676bOM4Ty6cE7qGG24D30EoRIpvGDoShxT7E4BBH1PL
FHt3wVILsPNMp4NCOQhsN5EXbdsCAwEAAaOCAocwggKDMB0GA1UdDgQWBBSk1IvX
H0lAoXXL+pAhPnK/K/NR2zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzgwMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB1QYIKwYBBQUHAQcBAf8EgcUw
gcIwgb8EAgABMIG4AwQAZxxLAwQBZx/MAwQBZywaAwQBZ01oAwQDZ1kAMAwDBAJn
XTQDBAJnXTgDBAJnXUADBANnXYADBAJnXaADBAFnfbQDBAJnf2AwDAMEAmd/hAME
Amd/iAMEAmd/0AMEAWeBlAMEAGeWUDAMAwQCZ5ZUAwQBZ5ZcAwQDZ5ZgAwQBZ5Z0
AwQBZ5Z4MAwDBAFnlr4DBAFnlsQwDAMEA2ev2AMEAWev3AMEAWfEkgMEAmfEmAME
AnTOxDANBgkqhkiG9w0BAQsFAAOCAQEAWD/h3Z9JBbm344xtRq/tNAKuxGzKSDu6
7Wk6s3LeNDSmf9yDPma40Hm4OtVKFxczE3Al3EGCw2b963zJjrLwNyk0QhJFcxLV
YnNa1Di+EP6fbBaqTUHZlTYfMBhSmVUjftRmia56A0FO3ahxUReB94PC6uGB573i
siYDUq2EpIPqpPtn8MSASyCyG7TGKyUKWZL7oHl76S0p8R83dp15Y9GtdsUdNwWK
Nohv0J0kNQOxCtBspGZ2HJxOvIOCsN/l2wqhvhS6uZLCeicdllen9427s4aicP9O
geSjWXuSXBt3kY47V9Bf6NHjqpWHh/5ShkhW06pZDCZUcvRbAmHAtg==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:00:04 2026 by rpki-client