Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153774.roa
File: AS153774.roa (raw, json)
Hash identifier: 2gar5txdHyisW6dOWEdQGbGsPZOQrCokN//koe4Mu3I=
Subject key identifier: CB:85:F4:D6:EA:1F:E7:65:DB:5D:F0:BC:0B:15:B1:A9:8E:F5:79:40
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 49D967BDA77DD459994BEAFE6094897AE8F39C98
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153774.roa
Signing time: Tue 21 Apr 2026 08:00:00 +0000
ROA not before: Tue 21 Apr 2026 07:55:00 +0000
ROA not after: Tue 20 Apr 2027 08:00:00 +0000
asID: 153774
IP address blocks: 163.223.150.0/24 maxlen: 24
2001:df5:4340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d9:67:bd:a7:7d:d4:59:99:4b:ea:fe:60:94:89:7a:e8:f3:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 21 07:55:00 2026 GMT
Not After : Apr 20 08:00:00 2027 GMT
Subject: CN=CB85F4D6EA1FE765DB5DF0BC0B15B1A98EF57940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:2d:b6:1f:ee:2b:a4:81:73:25:b6:93:4c:
d5:e2:97:99:ac:ae:4e:8a:a3:c7:23:cc:9c:00:2e:
81:4f:82:ea:60:24:34:1d:c6:b5:c6:04:a4:e7:08:
14:29:8a:99:07:57:b2:f8:6d:89:89:2a:30:50:71:
a8:bd:d3:9c:fd:b4:ed:d2:2c:34:25:4e:f3:8e:c7:
77:55:1d:14:56:6e:c8:49:2c:d5:f5:12:ec:d0:05:
40:45:84:dd:9c:c8:78:3a:b7:5b:b5:8d:c2:4a:91:
98:1d:7d:40:aa:c9:0b:34:0e:88:78:16:11:dd:81:
b4:26:2f:f2:c0:ea:09:da:5f:21:95:40:bb:b4:74:
06:e6:e1:d4:e9:22:ae:aa:42:0f:fc:9d:70:72:6e:
8d:dc:73:8b:82:77:97:ef:ba:1a:f3:a5:c4:d7:a2:
8e:6a:53:72:ad:9d:b3:63:96:57:5d:6c:6d:0c:43:
52:ef:72:98:4d:67:a9:9e:87:80:37:e3:a9:2c:ec:
c0:00:e5:5e:4c:a3:d1:48:72:f2:b0:55:da:68:9f:
ae:10:78:f8:4c:ab:4c:71:1b:d2:ed:f3:f5:8a:83:
bc:a1:12:38:c0:c8:b0:6f:f3:e5:4e:93:ca:b7:6a:
5b:2b:39:68:98:c6:fc:21:1d:63:82:86:1e:69:09:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:F4:D6:EA:1F:E7:65:DB:5D:F0:BC:0B:15:B1:A9:8E:F5:79:40
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153774.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.223.150.0/24
IPv6:
2001:df5:4340::/48
Signature Algorithm: sha256WithRSAEncryption
7b:82:0f:b3:04:b4:79:c4:fd:70:95:06:7e:be:b3:d0:ff:a4:
69:84:02:a9:01:43:09:d5:e2:91:25:59:1c:d3:f6:40:32:3b:
9e:ed:e7:a1:51:d1:57:fd:b4:ee:f4:e7:3a:5f:2f:a3:c8:a2:
a0:93:a3:7d:67:b5:85:bb:c4:36:20:1d:fb:7e:85:22:89:95:
d9:1f:b4:9d:19:ce:3b:13:27:20:9d:02:04:cf:77:2a:72:e2:
67:85:b6:48:a4:c5:95:f1:dd:a3:d0:a2:d5:0f:7f:bb:5e:15:
6a:40:0a:d1:56:0a:bb:14:56:ae:09:9f:ee:36:ae:36:fb:26:
ef:55:04:3c:7d:82:30:8e:b6:3f:b0:99:27:21:d3:10:68:45:
b0:8c:fe:64:c8:6e:c3:ab:0c:23:1a:05:36:d1:85:fe:b6:1a:
54:e4:3e:5e:19:bb:cf:f6:80:11:dd:78:ef:01:49:bc:24:6d:
f4:f1:36:9b:42:45:79:15:8c:08:74:ce:8d:d6:74:ea:01:a2:
d1:3e:c8:0a:eb:8f:5e:eb:7e:24:73:e5:5c:00:d8:ae:0d:ec:
04:b6:54:00:ee:bd:7e:75:f8:41:8a:f8:1d:22:4b:f1:2f:0c:
e8:8c:fb:4e:fa:f0:32:47:04:0c:d7:19:b7:6b:89:1c:98:87:
1e:53:1f:ee
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUSdlnvad91FmZS+r+YJSJeujznJgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyMTA3NTUwMFoX
DTI3MDQyMDA4MDAwMFowMzExMC8GA1UEAxMoQ0I4NUY0RDZFQTFGRTc2NURCNURG
MEJDMEIxNUIxQTk4RUY1Nzk0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmELbYf7iukgXMltpNM1eKXmayuToqjxyPMnAAugU+C6mAkNB3GtcYEpOcI
FCmKmQdXsvhtiYkqMFBxqL3TnP207dIsNCVO847Hd1UdFFZuyEks1fUS7NAFQEWE
3ZzIeDq3W7WNwkqRmB19QKrJCzQOiHgWEd2BtCYv8sDqCdpfIZVAu7R0Bubh1Oki
rqpCD/ydcHJujdxzi4J3l++6GvOlxNeijmpTcq2ds2OWV11sbQxDUu9ymE1nqZ6H
gDfjqSzswADlXkyj0Uhy8rBV2mifrhB4+EyrTHEb0u3z9YqDvKESOMDIsG/z5U6T
yrdqWys5aJjG/CEdY4KGHmkJleECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTLhfTW
6h/nZdtd8LwLFbGpjvV5QDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzc3NC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAKPfljAPBAIAAjAJAwcAIAEN9UNAMA0GCSqGSIb3DQEBCwUAA4IB
AQB7gg+zBLR5xP1wlQZ+vrPQ/6RphAKpAUMJ1eKRJVkc0/ZAMjue7eehUdFX/bTu
9Oc6Xy+jyKKgk6N9Z7WFu8Q2IB37foUiiZXZH7SdGc47EycgnQIEz3cqcuJnhbZI
pMWV8d2j0KLVD3+7XhVqQArRVgq7FFauCZ/uNq42+ybvVQQ8fYIwjrY/sJknIdMQ
aEWwjP5kyG7DqwwjGgU20YX+thpU5D5eGbvP9oAR3XjvAUm8JG308TabQkV5FYwI
dM6N1nTqAaLRPsgK649e634kc+VcANiuDewEtlQA7r1+dfhBivgdIkvxLwzojPtO
+vAyRwQM1xm3a4kcmIceUx/u
-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:26 2026 by rpki-client