Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142427.roa
File:                     AS142427.roa (raw, json)
Hash identifier:          BAk+k0daXNxIWOP6cN8r29ZMPqlYoQbQag1fKVmkxgc=
Subject key identifier:   31:EF:2C:BE:DA:A5:1F:E4:3E:0A:CB:F9:32:E5:0B:B8:06:E4:05:4F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       784739F616763F030AA81A4190E1834538CE1422
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142427.roa
Signing time:             Mon 27 Apr 2026 03:28:28 +0000
ROA not before:           Mon 27 Apr 2026 03:23:28 +0000
ROA not after:            Mon 26 Apr 2027 03:28:28 +0000
asID:                     142427
IP address blocks:        2001:df6:f940::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:47:39:f6:16:76:3f:03:0a:a8:1a:41:90:e1:83:45:38:ce:14:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 03:23:28 2026 GMT
            Not After : Apr 26 03:28:28 2027 GMT
        Subject: CN=31EF2CBEDAA51FE43E0ACBF932E50BB806E4054F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:f8:69:7e:00:aa:6a:a9:be:3a:95:57:bb:
                    2f:27:a5:d9:3e:4f:06:1d:0a:da:a1:74:87:2b:ab:
                    2f:32:9a:78:7a:6e:9e:34:f9:7a:ca:8f:47:dd:ac:
                    b3:7d:37:80:ab:00:e8:5d:4b:8c:0c:c7:8c:97:5a:
                    39:a9:aa:76:37:4d:54:79:3a:d2:42:34:00:c2:22:
                    82:52:3d:21:c1:bb:47:59:15:aa:b8:93:ee:2a:0d:
                    d4:d8:70:32:7e:c9:02:a9:d7:08:8c:bc:d2:5c:fd:
                    fd:70:af:a9:06:6c:62:cc:be:c1:79:64:3c:cb:50:
                    63:0a:5a:f6:d2:34:d9:66:fe:9f:6d:0d:3b:58:89:
                    47:d5:f6:0f:5c:08:c4:17:07:d6:f8:c7:5c:a5:f5:
                    4f:eb:58:af:42:33:07:24:fc:da:a6:0d:80:9a:7d:
                    0a:30:25:d2:56:b9:a0:20:8f:ff:92:00:64:ea:ec:
                    ec:36:05:9f:c8:f4:ce:b3:06:f0:98:95:19:e3:4c:
                    d4:ea:ce:47:f1:17:f8:1d:80:57:d5:7b:7e:04:ba:
                    f3:6e:95:59:7c:01:a9:eb:dd:16:23:86:2b:69:f0:
                    46:27:c9:9b:12:eb:9a:70:69:37:db:3b:3e:0f:cf:
                    1b:53:bc:b6:9d:eb:8b:f5:6f:17:38:9a:47:47:5d:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:2C:BE:DA:A5:1F:E4:3E:0A:CB:F9:32:E5:0B:B8:06:E4:05:4F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:f940::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:2a:f5:e8:d6:b8:7b:13:91:21:98:b2:06:40:f3:ba:82:5c:
         bf:ca:77:bf:04:ce:e0:f4:95:90:d2:95:16:67:77:29:fd:51:
         82:7c:75:f6:51:d4:19:dd:6f:67:42:50:17:d4:b6:a9:46:83:
         2a:13:0f:5c:7e:3a:ee:c8:e1:d6:5f:f4:6a:42:30:49:29:8e:
         32:87:14:b5:9a:63:4d:7f:13:b0:e5:bb:e5:7e:16:9f:36:e4:
         04:0a:a0:08:64:28:d9:84:b0:55:b0:a2:3a:38:5c:3d:53:d0:
         24:b2:af:1a:e5:a5:f8:a1:19:42:aa:14:0b:30:b2:a8:e9:04:
         fe:5c:5a:67:b3:c1:c5:db:ac:af:9f:98:1e:88:e9:0c:c1:7f:
         ef:ea:3b:6d:54:ce:45:b4:c9:e6:b9:ab:90:1e:2e:e8:60:77:
         6e:e3:fb:61:22:2b:d5:f1:36:8b:83:c0:4e:84:93:bc:6d:ad:
         24:bd:83:f6:a1:61:2f:dc:5d:5b:ce:1d:33:fe:7c:d0:48:88:
         4a:74:85:cf:36:57:d4:1a:db:82:f2:fe:99:7e:4c:c3:6b:77:
         5c:85:6e:01:13:40:6f:bd:d3:a0:ba:5d:13:4f:0d:a1:95:ad:
         fd:c1:23:53:13:b1:f0:17:6d:ef:5f:8f:0a:cd:49:8b:18:15:
         70:87:37:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:21 2026 by rpki-client