Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152829.roa
File: AS152829.roa (raw, json)
Hash identifier: 0oQUj+H7d0ECX5M2CwITbsUPVII7QYmPwwhnsh/h54A=
Subject key identifier: F1:FD:42:76:63:F1:FF:AD:B1:CF:6C:73:CD:93:C3:95:EE:6C:56:70
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 59BD45A2B0CAEF2266316194822BB5BE82DC5760
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152829.roa
Signing time: Mon 27 Apr 2026 02:40:17 +0000
ROA not before: Mon 27 Apr 2026 02:35:17 +0000
ROA not after: Mon 26 Apr 2027 02:40:17 +0000
asID: 152829
IP address blocks: 2402:57a0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:bd:45:a2:b0:ca:ef:22:66:31:61:94:82:2b:b5:be:82:dc:57:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 02:35:17 2026 GMT
Not After : Apr 26 02:40:17 2027 GMT
Subject: CN=F1FD427663F1FFADB1CF6C73CD93C395EE6C5670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:fd:10:5a:d8:27:a5:d1:1a:79:4f:1d:84:
20:dc:87:a3:0c:4f:57:06:63:bd:78:f1:4a:14:a2:
ee:e1:03:2a:a1:99:1a:31:14:65:48:34:53:a2:ce:
15:ce:39:5f:e8:13:0e:96:f4:a0:7f:ae:97:f6:01:
8f:b1:67:7f:b0:74:ed:8f:89:59:d7:fa:e0:1d:8d:
8e:ba:39:97:bf:16:7f:e3:d9:5a:49:26:e8:5f:fd:
bd:ca:a5:b0:b8:d7:fa:00:f5:8e:6e:5a:4f:c0:61:
97:72:0b:7d:a5:be:35:8e:dd:74:fe:ab:8f:c2:a0:
d9:a0:85:15:37:4e:cf:92:84:03:45:4b:67:86:9c:
60:e9:32:4e:5a:f8:c1:8e:f0:3c:3e:9d:99:28:82:
32:df:2c:ce:42:e2:21:f4:ef:66:14:86:1c:f0:43:
f2:32:d2:12:d1:a9:3c:94:8e:e6:3b:9e:4d:bf:dc:
8e:31:49:e0:7a:77:c1:0b:f3:68:f1:7d:f9:f6:12:
d0:c0:c5:75:f9:27:e9:a1:bf:f6:9c:fe:4b:7c:8f:
55:cf:a3:37:44:07:d3:0f:9e:20:28:1e:22:9b:60:
eb:8c:50:91:68:4e:bb:d4:59:79:e4:35:27:a7:ac:
6b:3e:64:07:86:39:ce:0e:10:15:39:f5:d0:a1:e1:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FD:42:76:63:F1:FF:AD:B1:CF:6C:73:CD:93:C3:95:EE:6C:56:70
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:57a0::/32
Signature Algorithm: sha256WithRSAEncryption
60:e3:76:8d:20:de:70:db:d7:58:2b:71:91:32:99:90:57:92:
6c:f9:6d:44:44:af:58:97:c4:34:27:a1:ae:4f:1f:fe:3a:4b:
ff:22:75:22:57:9e:2c:00:e6:60:e0:86:ba:be:91:f2:c9:79:
5d:ab:2c:e1:83:87:6c:3a:86:16:e7:0a:f4:c2:57:ca:e7:ea:
24:81:8a:a2:a1:1a:d4:91:b4:01:f4:02:5d:7c:1b:53:53:e4:
3d:03:4a:85:80:63:b5:d7:a8:08:97:5d:d3:93:1c:e8:9c:ec:
27:35:d1:2d:8b:a0:eb:f5:71:96:b2:01:75:0b:7b:9d:cf:2d:
de:53:b3:23:aa:e4:d9:7e:b3:c4:a9:6c:f3:e8:9f:50:ce:b2:
a9:d1:0c:c0:d5:e0:3a:8f:43:06:89:cc:f6:14:2e:ff:65:df:
2a:57:dd:ae:26:ca:9c:e6:bd:44:79:86:94:61:fa:44:0b:49:
5a:88:0f:c1:af:17:9f:be:8a:0f:5e:47:2c:a6:52:d6:d5:ee:
58:5d:2f:e5:e2:ab:2e:d8:28:99:62:1b:06:9d:59:4a:28:3c:
6a:e4:3e:c2:ee:46:18:15:4c:0e:23:fc:bb:63:4d:11:e2:db:
7d:93:54:13:58:df:a2:4c:6e:4f:75:30:31:cf:8f:38:80:21:
a9:59:02:15
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUWb1ForDK7yJmMWGUgiu1voLcV2AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyNzAyMzUxN1oX
DTI3MDQyNjAyNDAxN1owMzExMC8GA1UEAxMoRjFGRDQyNzY2M0YxRkZBREIxQ0Y2
QzczQ0Q5M0MzOTVFRTZDNTY3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOV5/RBa2Cel0Rp5Tx2EINyHowxPVwZjvXjxShSi7uEDKqGZGjEUZUg0U6LO
Fc45X+gTDpb0oH+ul/YBj7Fnf7B07Y+JWdf64B2Njro5l78Wf+PZWkkm6F/9vcql
sLjX+gD1jm5aT8Bhl3ILfaW+NY7ddP6rj8Kg2aCFFTdOz5KEA0VLZ4acYOkyTlr4
wY7wPD6dmSiCMt8szkLiIfTvZhSGHPBD8jLSEtGpPJSO5jueTb/cjjFJ4Hp3wQvz
aPF9+fYS0MDFdfkn6aG/9pz+S3yPVc+jN0QH0w+eICgeIptg64xQkWhOu9RZeeQ1
J6esaz5kB4Y5zg4QFTn10KHhCs0CAwEAAaOCAdEwggHNMB0GA1UdDgQWBBTx/UJ2
Y/H/rbHPbHPNk8OV7mxWcDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjgyOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQCV6AwDQYJKoZIhvcNAQELBQADggEBAGDjdo0g3nDb11grcZEy
mZBXkmz5bUREr1iXxDQnoa5PH/46S/8idSJXniwA5mDghrq+kfLJeV2rLOGDh2w6
hhbnCvTCV8rn6iSBiqKhGtSRtAH0Al18G1NT5D0DSoWAY7XXqAiXXdOTHOic7Cc1
0S2LoOv1cZayAXULe53PLd5TsyOq5Nl+s8SpbPPon1DOsqnRDMDV4DqPQwaJzPYU
Lv9l3ypX3a4mypzmvUR5hpRh+kQLSVqID8GvF5++ig9eRyymUtbV7lhdL+Xiqy7Y
KJliGwadWUooPGrkPsLuRhgVTA4j/LtjTRHi232TVBNY36JMbk91MDHPjziAIalZ
AhU=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:33 2026 by rpki-client