Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153639.roa
File: AS153639.roa (raw, json)
Hash identifier: D2xGjLKyHpbvsAu0udKXo07GRlw2cWgeg301EENskJY=
Subject key identifier: 31:71:3D:84:D2:42:36:1F:FE:A0:0B:F5:3E:4B:AA:BE:BA:03:DC:18
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 25B836A8FE36C78195DA57AA87A280F6DBBEA605
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153639.roa
Signing time: Mon 27 Apr 2026 05:00:00 +0000
ROA not before: Mon 27 Apr 2026 04:55:00 +0000
ROA not after: Mon 26 Apr 2027 05:00:00 +0000
asID: 153639
IP address blocks: 2001:df4:ebc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b8:36:a8:fe:36:c7:81:95:da:57:aa:87:a2:80:f6:db:be:a6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 04:55:00 2026 GMT
Not After : Apr 26 05:00:00 2027 GMT
Subject: CN=31713D84D242361FFEA00BF53E4BAABEBA03DC18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:53:57:c4:e2:e8:7f:7e:44:4e:df:bb:aa:
75:d1:50:f7:55:69:bb:32:65:d4:1e:39:6c:4d:81:
2a:8b:f7:61:25:98:dd:25:1b:b6:76:9a:01:04:9c:
49:67:88:e4:86:d8:1b:dd:61:53:bf:f7:d2:46:85:
94:c8:6c:6f:ca:c7:40:73:92:1e:ca:47:a8:8e:0b:
03:0a:a2:e2:1a:24:8d:47:a2:a6:e5:e0:4a:8d:e7:
18:40:d0:f7:84:43:46:58:83:4e:de:98:3d:7a:8e:
52:a5:29:6e:cb:02:d6:c1:8b:76:37:8f:c1:bc:11:
c4:5e:01:c8:28:43:c8:51:90:e9:6f:33:c5:44:18:
e3:4b:d4:7b:02:6f:8b:e5:16:03:14:17:fd:67:48:
47:dd:9a:04:d1:09:8f:c0:a8:ba:c0:5e:de:ca:65:
41:df:da:15:92:5b:fd:0c:7f:30:fc:a0:a1:3b:ed:
24:c5:b4:c1:b4:c5:64:aa:95:95:24:ea:08:f4:f8:
96:e7:2d:83:5b:57:7e:6d:e5:f6:24:2f:a1:f3:a3:
12:a9:b3:11:4f:82:76:14:91:de:22:98:d7:d3:ab:
df:00:67:27:d5:47:4c:d1:9d:77:6b:ca:37:a9:fb:
56:48:9c:43:bb:ba:1c:51:ef:5b:a6:2e:84:e3:e0:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:3D:84:D2:42:36:1F:FE:A0:0B:F5:3E:4B:AA:BE:BA:03:DC:18
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:ebc0::/48
Signature Algorithm: sha256WithRSAEncryption
31:2c:3d:d2:7b:88:61:3c:6e:36:53:63:9c:1c:c1:cc:65:2f:
f5:44:5e:36:50:2d:d6:44:2f:c2:b2:88:91:19:94:9d:59:49:
60:a0:38:a6:6c:e2:a3:ec:a6:4e:6e:7c:ed:5c:c1:0c:be:5a:
0f:14:12:d7:73:81:cb:5e:39:69:39:39:34:07:96:19:88:d1:
2e:81:97:ec:4f:f4:dd:c6:f0:4b:7a:48:80:2a:bf:99:f2:77:
fe:25:d1:a9:ca:25:b6:11:5e:3f:af:f8:cb:6b:f3:ae:b9:ba:
e1:51:98:3c:67:82:1c:81:39:54:1d:c2:73:9d:b0:04:ef:6b:
e0:d5:6b:3c:ed:3e:61:17:3b:e5:55:56:7c:fd:5e:5b:76:f0:
41:54:96:3c:be:c9:0b:a3:48:d2:43:c3:2d:4b:a1:16:76:cf:
fd:b3:15:2f:d3:d2:fc:7e:50:40:e4:07:56:7d:59:84:21:24:
dd:56:85:66:c5:1f:35:9c:b3:3a:50:21:6f:59:03:28:1d:c9:
a2:3d:3e:db:e8:7a:e4:9c:b4:bb:7a:e0:48:cb:33:ac:0e:7f:
5e:ad:e9:04:57:6f:52:7c:cd:fc:30:2c:b4:00:7e:05:f1:05:
db:7a:ff:5d:ab:b0:81:5e:88:69:37:32:0a:63:dc:1e:c7:40:
19:33:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 00:09:34 2026 by rpki-client