Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140446.roa
File: AS140446.roa (raw, json)
Hash identifier: VhBaeJVCRfeanwBwfRi/eZXk5aZ+pY4fPJtV3rLo954=
Subject key identifier: D5:FF:18:5B:EC:2F:24:BE:D1:24:F6:9E:96:B8:E4:5A:D7:FA:78:B4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 161C8E1A27F68F4F45763C403A9A38DEA5EA3392
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140446.roa
Signing time: Mon 27 Apr 2026 03:00:00 +0000
ROA not before: Mon 27 Apr 2026 02:55:00 +0000
ROA not after: Mon 26 Apr 2027 03:00:00 +0000
asID: 140446
IP address blocks: 103.152.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1c:8e:1a:27:f6:8f:4f:45:76:3c:40:3a:9a:38:de:a5:ea:33:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 02:55:00 2026 GMT
Not After : Apr 26 03:00:00 2027 GMT
Subject: CN=D5FF185BEC2F24BED124F69E96B8E45AD7FA78B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:33:cf:0c:c5:7b:99:6d:22:9c:cc:f0:4a:
52:e7:7f:29:1e:6d:10:b7:18:bf:c9:bd:2e:75:d1:
46:c1:18:63:f8:4f:f1:74:c9:03:14:2f:53:1c:98:
63:13:84:30:96:0b:64:e5:1f:70:fd:9a:6d:73:7f:
80:26:4d:59:ad:93:52:16:46:90:b7:25:2f:b5:cb:
c9:fc:ab:a1:7a:31:01:c8:16:18:47:4e:d0:09:29:
67:9c:90:b8:34:a4:23:99:d1:2f:bd:bd:89:bd:2b:
05:7b:b0:e4:9c:4a:2c:4e:ea:27:85:ea:58:36:05:
1a:86:cb:3e:06:0c:9a:7d:00:87:f3:0d:b6:9a:42:
58:15:c3:ca:55:45:d7:e8:16:e4:36:f3:f5:db:e2:
5f:3b:f5:70:5d:4e:76:ca:c6:41:0a:28:c0:3b:68:
8b:5a:bd:dd:88:be:b1:df:a6:fd:19:90:d8:03:74:
d3:a9:d1:37:17:b4:b5:f3:cd:7b:00:5a:e5:13:c8:
fb:8f:5d:5b:92:91:70:ae:ac:4a:92:10:6d:1e:5c:
3c:95:d2:85:14:60:b5:78:27:67:c1:a5:a8:32:ec:
f5:5b:71:61:e6:8f:39:75:0d:c6:1b:b0:64:c2:18:
d1:8b:4d:fe:d0:14:2b:f1:2f:ac:7c:57:35:06:e1:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:18:5B:EC:2F:24:BE:D1:24:F6:9E:96:B8:E4:5A:D7:FA:78:B4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.232.0/23
Signature Algorithm: sha256WithRSAEncryption
26:c8:5a:3f:b3:79:7f:1b:94:4d:f8:b3:0c:c2:34:fd:8a:13:
cc:08:8f:dd:4c:57:7d:c6:33:54:d8:d5:7b:b7:ad:ff:fb:a1:
09:b6:21:b7:81:2d:6f:79:40:4a:5d:db:b8:a1:c5:5f:aa:1f:
38:26:04:e3:fb:b0:84:0c:59:85:31:52:b9:78:47:1c:2f:85:
60:b1:dd:7d:49:e7:67:03:a9:53:1c:24:5c:c8:08:d7:11:b2:
49:4e:8b:5e:ac:80:32:92:9e:bd:17:6c:77:66:ea:8b:21:71:
8e:cc:0c:31:84:68:d1:c0:c0:64:16:9b:12:ec:23:be:35:a2:
e6:ea:8d:17:7c:1c:36:1a:9d:15:75:d5:07:4d:8a:f3:cf:98:
a0:96:47:95:cd:36:2e:b4:0a:65:4e:5b:3a:94:1e:a3:43:a1:
fe:9e:7a:a5:08:03:e2:54:de:54:47:2b:f8:19:50:70:2c:77:
8d:98:1a:f0:08:79:b6:dc:b5:b7:86:f0:05:89:7c:fa:e5:69:
a1:54:38:7f:63:2b:03:b0:28:c7:4d:29:ea:11:d5:88:e8:f1:
27:94:4e:31:6d:85:06:7c:0e:7a:75:1b:ad:c4:8d:dc:9c:28:
5e:f9:ca:4f:48:f4:3d:4c:e5:cf:48:a7:5e:df:c5:59:59:95:
bf:04:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:00:17 2026 by rpki-client