Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153822.roa
File: AS153822.roa (raw, json)
Hash identifier: ttxMwVHteW1/R9tWIMiKiOVzUNnXzf01UsVq1gGRWBg=
Subject key identifier: 40:58:86:82:68:6B:49:E8:E6:E7:E7:7E:9F:17:43:1F:88:EA:AA:64
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 25793813A1A9D579C81BDDB89CF5CAA75CAB4425
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153822.roa
Signing time: Mon 20 Apr 2026 08:00:11 +0000
ROA not before: Mon 20 Apr 2026 07:55:11 +0000
ROA not after: Mon 19 Apr 2027 08:00:11 +0000
asID: 153822
IP address blocks: 163.227.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:79:38:13:a1:a9:d5:79:c8:1b:dd:b8:9c:f5:ca:a7:5c:ab:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 20 07:55:11 2026 GMT
Not After : Apr 19 08:00:11 2027 GMT
Subject: CN=40588682686B49E8E6E7E77E9F17431F88EAAA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:39:29:84:fd:8b:10:0e:8e:86:a2:e2:64:99:
b5:fc:ef:e2:d5:b7:50:7f:fe:54:a4:aa:f1:72:03:
5d:d9:17:20:3d:01:cb:e9:dc:93:8b:6f:d1:a2:16:
ff:7f:07:61:eb:ea:4b:4c:c4:b1:ce:e1:f2:dc:60:
af:03:ad:e9:d7:60:5a:8d:de:3f:e1:9f:33:89:39:
6a:f6:bf:3e:da:6a:b8:eb:dc:14:21:71:09:c6:1a:
67:e4:eb:a3:a6:f8:51:35:c4:1e:6b:33:a0:92:fe:
50:e0:fb:80:ec:29:74:08:73:6c:5b:78:fe:27:2b:
f5:63:56:e3:a8:bc:f2:d3:0d:49:ab:f0:5a:c2:dc:
1c:27:87:b1:f8:5c:fb:08:fb:69:b6:fe:8a:b0:b0:
13:c4:a9:a3:5f:33:1f:66:cf:89:d2:f5:15:8a:2d:
0a:7a:3f:b5:24:20:90:b1:f5:79:c2:d6:eb:03:f1:
1c:85:bf:71:76:74:a2:6e:fe:94:de:65:11:91:a0:
56:2b:cb:ce:17:59:54:2f:5e:e8:3d:7b:d2:91:da:
51:c3:78:c6:fc:3d:a2:ad:e9:dd:57:6a:7f:4f:07:
44:9b:89:fd:01:42:88:da:3f:9f:31:8c:c3:cd:ac:
6e:73:12:41:68:62:03:eb:bb:3f:8d:94:09:b9:17:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:86:82:68:6B:49:E8:E6:E7:E7:7E:9F:17:43:1F:88:EA:AA:64
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.227.135.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2f:12:fb:d3:a0:6b:aa:36:f6:06:c9:9b:59:90:f4:e0:4d:
29:dc:a3:32:d9:be:89:1a:66:97:a0:71:4b:c3:c8:01:c0:78:
1c:30:5a:11:47:d4:16:85:3d:61:3a:b3:a4:48:d1:7f:d6:3a:
9a:4f:f8:bc:59:fc:16:42:c2:a4:e9:bf:55:90:24:48:74:0e:
4c:49:2c:bd:49:57:21:23:e9:04:37:50:55:8c:5c:ee:08:75:
23:5e:d1:76:e4:61:be:d3:57:71:bf:6b:b4:b9:c4:a7:bd:cf:
11:c4:47:0b:93:5d:f4:0d:28:5a:df:97:99:52:6a:5f:24:df:
d9:98:3a:97:c6:41:c9:79:b5:ad:4d:1b:fe:4c:d5:93:b3:29:
91:f5:19:72:5b:63:f8:2d:b6:77:3d:15:c5:84:b8:a0:2a:ee:
ed:cd:d6:3f:39:16:ba:9d:03:f1:ea:2c:91:38:a2:d5:fb:e5:
11:f0:00:72:ac:17:b9:f8:8d:86:27:6c:f7:73:41:f1:3c:c3:
20:b0:89:5d:45:80:47:90:c0:83:3a:25:3f:2b:5e:71:00:ca:
69:da:58:eb:46:74:4b:0f:27:18:b3:73:57:95:d1:71:24:94:
51:ac:68:8a:11:fa:96:6f:3a:a9:c1:a1:c4:88:ef:23:fe:25:
3e:12:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:32 2026 by rpki-client