Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139233.roa
File: AS139233.roa (raw, json)
Hash identifier: EaMBND7+T3FHtqtlWEWouzCHlNz4ib6WUY+mqxqW4lU=
Subject key identifier: 18:77:17:63:24:75:0A:60:14:2D:FD:C8:95:EB:33:54:18:B4:4D:E1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 30401FC95DC8EE118B3B41F5502627463C1D1450
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139233.roa
Signing time: Mon 27 Apr 2026 02:53:54 +0000
ROA not before: Mon 27 Apr 2026 02:48:54 +0000
ROA not after: Mon 26 Apr 2027 02:53:54 +0000
asID: 139233
IP address blocks: 2001:df6:f7c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:40:1f:c9:5d:c8:ee:11:8b:3b:41:f5:50:26:27:46:3c:1d:14:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 02:48:54 2026 GMT
Not After : Apr 26 02:53:54 2027 GMT
Subject: CN=1877176324750A60142DFDC895EB335418B44DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:92:ed:f1:7d:2a:aa:98:41:ae:85:19:f1:
4e:14:2c:03:ba:e5:91:57:b0:46:df:6b:af:f4:de:
58:c2:51:15:40:e0:32:61:40:2b:1d:ba:92:d0:41:
93:70:74:a3:fe:39:dd:30:81:7c:6a:22:05:f3:d8:
7a:cf:3b:a3:47:2c:1c:7c:2c:c9:d2:4b:34:b7:be:
23:9e:d9:52:6f:8d:4a:1a:a7:68:a3:4a:fc:c3:76:
80:26:6b:55:29:fd:30:ce:d8:24:cf:26:b6:68:8f:
29:39:54:60:1c:ed:29:b9:55:38:d3:7f:97:fb:b2:
a9:e8:75:79:8a:70:47:a7:1c:20:be:16:e5:c0:f1:
1f:ea:f6:5f:e3:1a:aa:df:b6:b3:ee:75:2f:f6:fc:
f8:b6:6f:25:4f:f4:d8:32:c8:7d:81:ce:50:96:a5:
e2:25:fe:9e:b2:3f:78:5c:85:4c:66:7e:59:7f:6c:
cb:f2:dd:bb:20:fc:b7:bb:b2:91:8e:35:dd:22:49:
50:5c:d0:1c:7b:03:66:00:8a:ce:cf:3f:9f:6b:29:
0e:ae:0b:47:e7:02:47:0a:2f:d7:f2:1e:a2:ed:06:
6f:cf:d9:cc:ed:fc:f0:4e:26:da:27:73:38:8c:25:
f7:e4:3e:f1:40:6a:54:39:e7:fc:1c:76:da:dc:59:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:17:63:24:75:0A:60:14:2D:FD:C8:95:EB:33:54:18:B4:4D:E1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:f7c0::/48
Signature Algorithm: sha256WithRSAEncryption
69:a9:59:ab:37:e4:fb:d7:22:b7:9b:61:54:16:64:f3:f0:7a:
55:ff:57:5a:66:66:f5:28:02:11:06:d3:35:cb:54:c8:9b:fe:
22:8b:2c:97:29:c4:10:4c:c1:07:66:2d:b4:bb:b9:14:06:30:
c6:83:76:89:6d:75:cb:cf:46:f1:9f:e2:9a:5f:76:29:15:e8:
ef:da:50:2d:7c:9e:93:a9:c5:72:22:0a:96:82:5a:37:78:9b:
78:ee:d6:46:b8:c2:64:cb:fa:97:0f:c3:97:ce:11:e8:a3:7e:
c7:63:e9:62:df:e2:8c:99:d0:96:81:94:82:57:34:46:cb:fd:
bc:0e:0b:60:11:3c:bb:3b:14:5e:13:ea:8a:5d:d9:1b:67:41:
04:f7:7e:0e:26:e0:2a:33:4d:18:24:4a:c7:1d:4f:29:2f:ad:
19:3f:35:0e:7f:9f:4d:e7:35:a8:d7:68:67:e4:e2:63:15:a8:
d3:bc:bf:69:c9:a7:f0:a0:93:a9:84:1a:4c:c0:6e:10:03:b7:
83:46:e6:dd:f4:e6:4a:cf:89:99:44:36:bb:02:ca:01:06:36:
6e:fb:26:f1:88:92:11:a0:da:b0:a8:3e:52:98:57:77:f2:5d:
7b:62:1b:bf:db:92:f8:36:41:e3:ec:9a:82:71:8d:5a:90:65:
69:2c:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:21 2026 by rpki-client