Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149882.roa
File: AS149882.roa (raw, json)
Hash identifier: ak255ou4/rkfyGpO4E5AOEsgDUGsoBY3fGOGoSWz2WY=
Subject key identifier: 9D:BF:71:FF:CD:5C:D7:88:EA:1B:06:61:11:D7:B4:25:E3:F8:00:08
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 21CB7B14EE082944B6074F715F5FAC57ABAAC4EA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149882.roa
Signing time: Mon 27 Apr 2026 07:00:00 +0000
ROA not before: Mon 27 Apr 2026 06:55:00 +0000
ROA not after: Mon 26 Apr 2027 07:00:00 +0000
asID: 149882
IP address blocks: 2401:1ba0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cb:7b:14:ee:08:29:44:b6:07:4f:71:5f:5f:ac:57:ab:aa:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 06:55:00 2026 GMT
Not After : Apr 26 07:00:00 2027 GMT
Subject: CN=9DBF71FFCD5CD788EA1B066111D7B425E3F80008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:61:5c:6b:e1:97:07:19:48:87:13:ce:c8:
0e:62:80:e0:e3:bd:58:b6:7f:81:66:ec:4e:8a:9f:
9f:c4:a8:d8:65:0f:2d:ca:82:36:92:f5:90:96:48:
95:21:99:f7:de:84:d1:58:fe:47:a0:f7:8f:b5:b8:
26:1a:f0:7b:2b:bb:7d:8e:3c:f3:53:f2:b6:95:2b:
b1:d5:8d:1b:ef:44:4a:81:77:4d:ee:47:ac:5c:bb:
58:fc:7a:8a:a0:ff:2f:8a:c6:11:25:5f:38:24:09:
f6:c5:55:23:e9:a7:b8:9d:15:4e:f2:f2:d4:be:67:
06:6c:9e:ce:3d:6a:2c:04:6d:2d:98:e7:8a:bf:01:
03:62:31:96:04:e3:25:41:98:c4:06:4b:35:8a:bb:
fa:36:a7:33:e6:da:a6:df:bb:c5:60:ae:92:1a:2e:
36:81:6c:6a:00:90:1d:2d:3e:cf:d0:cd:c9:42:2f:
31:aa:80:ca:4b:8d:ff:3d:ad:9c:bb:13:c7:d6:dd:
03:17:5d:18:ad:a7:fd:d5:90:e1:cd:23:85:e3:d9:
f6:9c:75:7c:11:b4:2d:ca:4c:c8:41:19:e9:53:90:
de:32:4b:d4:f0:a0:b5:23:08:17:9f:c2:46:11:84:
7b:db:da:ac:09:a2:f1:81:a2:1b:aa:6d:5e:fd:0c:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:71:FF:CD:5C:D7:88:EA:1B:06:61:11:D7:B4:25:E3:F8:00:08
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:1ba0::/32
Signature Algorithm: sha256WithRSAEncryption
51:78:7b:ce:88:26:fa:7c:c9:c9:23:b3:51:38:6d:bb:e5:d9:
1d:c0:47:eb:a7:b2:7e:ac:5d:79:3b:f9:e4:d5:99:c9:f9:04:
7f:36:f9:e4:8b:d7:33:78:f8:6d:32:b0:10:e4:e8:fc:27:bd:
38:bd:62:ef:5b:56:93:25:81:71:f0:02:06:3a:e0:a2:e6:24:
4c:da:a7:a1:1d:e0:56:2e:f6:8f:47:29:41:4d:cd:34:7a:1b:
d1:6b:da:90:78:db:83:ff:73:ec:4d:e6:d7:cd:ac:b9:0f:1a:
00:20:28:b0:64:d9:df:1e:fd:24:6b:e9:50:c1:19:a9:93:6b:
c4:f7:90:80:5d:39:6e:f9:62:e5:70:e9:96:6b:63:73:c1:a3:
75:3f:a3:53:3c:89:91:c8:d9:1e:dc:88:12:d8:08:35:de:05:
3a:48:ea:cd:70:e8:3f:cd:d6:34:64:4f:53:76:9b:f9:2b:fb:
1f:14:7e:1b:ec:cc:9d:c2:4d:fb:e0:b2:6a:ca:11:ef:e6:1f:
8a:aa:76:84:6f:fc:80:71:89:8d:2e:a6:ba:04:46:b7:da:3a:
71:1f:df:fa:ef:59:57:b2:ac:1c:44:9c:43:4a:95:b9:6c:11:
49:15:9e:a1:e8:f6:16:7b:59:80:b0:fe:d5:54:f2:4e:d3:11:
28:a6:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:28:33 2026 by rpki-client