Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153718.roa
File:                     AS153718.roa (raw, json)
Hash identifier:          5RGQWwFnbWIBsB0D0gpcyjNtA+4SqQS818uGmHn/QDE=
Subject key identifier:   DC:BB:61:F9:1E:15:91:03:A6:79:77:24:F3:D2:CF:61:AD:01:25:45
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       093D5FA2FAB8DF0E41AF5AB6C5AE7B4134F499D8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153718.roa
Signing time:             Sun 19 Apr 2026 09:00:00 +0000
ROA not before:           Sun 19 Apr 2026 08:55:00 +0000
ROA not after:            Sun 18 Apr 2027 09:00:00 +0000
asID:                     153718
IP address blocks:        163.223.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3d:5f:a2:fa:b8:df:0e:41:af:5a:b6:c5:ae:7b:41:34:f4:99:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 19 08:55:00 2026 GMT
            Not After : Apr 18 09:00:00 2027 GMT
        Subject: CN=DCBB61F91E159103A6797724F3D2CF61AD012545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:d5:22:a2:c0:51:43:23:04:e8:29:b3:20:
                    38:11:f2:6f:8f:1f:37:9f:48:41:4f:ce:94:37:6b:
                    75:b0:27:06:84:b2:aa:98:b7:4c:6e:80:50:da:d6:
                    74:83:f1:9e:5d:6d:a0:7b:0a:da:e8:ba:3b:c9:38:
                    f6:b5:92:b7:6a:be:5f:27:7e:85:28:a1:fe:f8:82:
                    68:05:70:f7:eb:8f:6f:42:96:b0:07:69:2d:c1:00:
                    4f:a4:94:7d:5e:03:31:24:43:60:18:38:ab:a1:ac:
                    52:31:3f:89:3d:d2:8a:ee:3a:7d:12:d4:81:d2:35:
                    ca:71:3e:1c:c7:26:29:e8:73:12:bc:3f:c1:61:a4:
                    74:b5:e9:96:c7:3f:2c:7f:c4:5c:89:93:09:8e:86:
                    d5:03:e0:5a:95:cf:72:a7:dc:f5:a4:0a:c2:19:9e:
                    b1:da:07:88:0d:3c:44:6d:91:72:bf:f6:18:02:50:
                    92:3d:01:8e:eb:e3:79:e9:d4:0f:34:f3:f9:ee:83:
                    4f:4e:aa:e6:98:6b:21:fc:74:ff:96:76:33:26:1f:
                    22:df:f3:7b:75:2f:f2:5d:2d:a1:0e:82:0f:09:66:
                    24:af:2a:46:78:30:c2:fd:4f:32:01:2b:fb:de:49:
                    9e:81:51:e3:96:57:c9:78:17:8c:71:50:db:af:2d:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BB:61:F9:1E:15:91:03:A6:79:77:24:F3:D2:CF:61:AD:01:25:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153718.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0c:f6:ed:75:6e:a1:cc:19:f0:f1:75:82:18:22:f7:1f:08:
         ee:31:4e:fc:ac:8a:c1:d2:18:1d:8d:be:fb:50:a6:33:c3:7b:
         28:93:81:29:01:cd:e2:e4:6a:7e:f5:5c:1a:1f:88:90:16:71:
         b1:d6:dc:66:6d:cc:a2:99:e1:12:40:48:4e:bd:2e:25:73:e9:
         e5:2c:19:82:41:20:c3:14:2f:17:63:00:a3:b7:ad:8f:a4:a1:
         87:f7:b6:09:4e:fc:5e:9a:25:7a:7f:dc:27:99:25:6c:a2:29:
         20:af:2b:ed:90:c8:0a:d5:19:f8:08:5b:b0:9e:ed:d5:ab:93:
         4c:74:11:80:03:e8:25:79:75:01:ac:33:67:9f:40:a6:67:45:
         24:b9:da:9a:d9:c6:3b:18:6f:39:b9:dc:36:6c:ad:11:60:80:
         23:d1:54:96:76:3f:cd:1c:5b:d0:c9:a0:18:a8:43:34:a4:e3:
         a1:49:7d:8d:59:23:d6:36:c6:3b:97:4b:a5:16:05:dc:b6:a8:
         56:29:c1:46:31:02:8f:0b:39:4b:1e:ca:b2:20:f6:20:48:a6:
         c3:de:02:a1:9c:b5:8a:52:14:12:42:b5:c2:05:4c:b4:e2:a9:
         fb:5a:22:e6:b7:40:92:fb:68:37:d0:96:a3:01:20:11:6b:0f:
         8e:d4:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:43 2026 by rpki-client