Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142170.roa
File: AS142170.roa (raw, json)
Hash identifier: /pReonWDGp02XGjUa9w/Fa3EzaqdQc8j0zB3behTg1M=
Subject key identifier: 96:6E:18:9C:E8:25:98:74:11:4A:37:CD:AF:96:C3:08:E6:3A:18:5D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3499773E465FE934C7908E435F1C9952E7276A34
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142170.roa
Signing time: Fri 24 Apr 2026 01:22:39 +0000
ROA not before: Fri 24 Apr 2026 01:17:39 +0000
ROA not after: Fri 23 Apr 2027 01:22:39 +0000
asID: 142170
IP address blocks: 163.128.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:99:77:3e:46:5f:e9:34:c7:90:8e:43:5f:1c:99:52:e7:27:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 24 01:17:39 2026 GMT
Not After : Apr 23 01:22:39 2027 GMT
Subject: CN=966E189CE8259874114A37CDAF96C308E63A185D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:88:b2:50:bd:ca:6a:76:56:23:9b:00:0d:c6:
f3:82:73:75:2c:05:9d:da:42:78:98:83:2d:d7:8c:
10:49:d0:62:61:d6:21:45:d2:b6:21:c1:81:02:04:
48:88:88:d7:51:17:d8:02:2d:a0:08:f9:9a:94:19:
d2:44:50:fe:34:e4:26:30:27:9c:da:88:24:b8:41:
51:5c:7c:ad:5c:b6:d6:4e:10:e4:f9:80:25:d2:d0:
5b:c3:04:7a:cf:20:55:28:b6:e5:a9:a5:f9:01:93:
77:29:62:15:fd:9c:44:3d:4b:c9:fd:67:c7:63:9d:
0b:ff:8e:7b:65:e5:ed:40:e1:f3:27:26:09:8d:7f:
38:fc:72:a9:fc:71:e9:55:49:06:9a:ac:92:93:01:
75:fa:dc:5c:6a:fd:bc:2c:25:81:c0:e3:02:63:7d:
e8:c1:31:53:9b:9f:1d:06:91:1b:48:c6:54:ba:2c:
f2:23:10:d2:3e:14:2c:fe:2e:5b:47:d4:55:a0:04:
e9:ae:8a:32:d6:7c:90:d9:a1:12:41:8f:25:05:35:
f9:73:8c:60:40:c0:6d:29:ea:83:0a:ef:64:a8:b6:
83:fa:fa:c1:c1:38:7c:51:83:8b:99:7a:fc:0b:67:
33:88:ae:1f:94:a2:33:a9:49:51:23:25:07:93:f1:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6E:18:9C:E8:25:98:74:11:4A:37:CD:AF:96:C3:08:E6:3A:18:5D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142170.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.176.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5b:17:a1:6c:4a:c1:73:8f:1b:78:13:40:2a:e5:ea:a8:68:
1d:25:c8:63:14:65:e1:59:10:65:8c:87:6c:fe:55:22:04:b3:
39:d5:ef:5f:6c:60:a2:8a:b0:0a:39:d3:5d:86:5a:0e:bf:34:
18:23:e9:94:6f:87:c3:5d:e6:73:9c:82:1f:4c:e3:32:a9:6d:
56:52:f0:e8:d3:0a:71:b3:8a:06:52:cf:6e:16:96:9a:42:85:
7d:1b:de:8e:28:86:63:2f:3b:5e:9d:8f:81:5e:a7:55:a0:02:
99:5d:30:ea:74:40:85:88:2a:6c:2a:53:d9:f5:39:7c:90:a0:
3c:f8:41:4c:01:9b:4f:25:b5:c5:59:c8:70:11:b7:15:15:d1:
92:a7:ed:cb:84:c0:de:4f:17:1d:24:f1:b6:02:8b:0b:8b:6e:
b4:b7:63:c5:b1:2a:fe:d5:f8:9e:50:83:34:61:c5:55:50:28:
0e:49:bc:28:49:e1:f9:ca:54:42:fb:fc:26:42:ee:e0:85:b2:
63:31:fe:c4:1a:d1:f0:4b:f8:a9:a5:95:a8:d1:5b:37:55:38:
d0:fe:01:6a:d9:d3:dd:3e:fc:53:27:87:da:12:d2:ed:70:d8:
69:8d:e5:0b:cc:ef:0e:45:36:dd:de:09:fe:16:5b:c7:b4:87:
f2:d8:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:21 2026 by rpki-client