Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153824.roa
File: AS153824.roa (raw, json)
Hash identifier: VfU5Oiz8XE9pn46zbx0JyuxvQJG3Nl3JA/YmnQCAu4Q=
Subject key identifier: 6D:2F:F6:1A:2B:02:92:C2:79:71:B8:7F:D4:8E:EF:DC:E0:91:EA:C1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2AE6F304D39ACEBE1684CFB4BF1349E8718AC9B3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153824.roa
Signing time: Wed 29 Apr 2026 07:00:00 +0000
ROA not before: Wed 29 Apr 2026 06:55:00 +0000
ROA not after: Wed 28 Apr 2027 07:00:00 +0000
asID: 153824
IP address blocks: 163.227.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e6:f3:04:d3:9a:ce:be:16:84:cf:b4:bf:13:49:e8:71:8a:c9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 29 06:55:00 2026 GMT
Not After : Apr 28 07:00:00 2027 GMT
Subject: CN=6D2FF61A2B0292C27971B87FD48EEFDCE091EAC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:45:0d:ee:66:b3:36:f1:c4:45:bb:b9:c0:
0f:06:d6:ff:d1:bd:25:66:cc:0d:14:32:e8:5a:88:
60:9a:cf:98:07:d0:a7:ae:43:e9:11:c0:9d:c5:44:
25:28:d8:dd:d2:e8:5a:fc:0c:89:eb:6b:7a:67:90:
a4:d0:1d:14:fd:0f:9e:8e:04:92:8f:6e:56:5f:5f:
5c:01:6b:af:93:04:60:61:62:e5:a5:7e:90:a5:51:
47:16:50:58:d2:bb:c6:58:e7:f1:ca:cc:b4:5e:0c:
0d:bc:ba:dd:c2:1c:1a:99:5d:de:91:42:16:4d:1a:
9f:c1:a8:74:37:31:89:f8:3e:57:36:03:72:7e:8c:
72:93:cb:42:53:e8:a0:cb:ea:4f:00:c1:af:60:80:
b0:7f:bb:8a:ca:24:73:74:79:bb:5f:ff:7e:61:c4:
02:95:4a:f0:a3:61:41:9f:51:5e:88:f8:b9:02:78:
5c:90:58:e4:d9:1c:cc:ff:ea:09:0f:16:bf:46:df:
94:45:45:e5:30:57:92:e0:fe:19:ba:7c:40:7c:41:
67:7f:a4:2b:f7:1f:92:fd:32:09:d7:20:79:88:5f:
13:5d:de:4f:44:d6:70:6d:70:48:52:ac:07:7e:18:
b9:fa:52:17:80:91:7f:85:20:0a:e9:bb:02:37:39:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:F6:1A:2B:02:92:C2:79:71:B8:7F:D4:8E:EF:DC:E0:91:EA:C1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.227.112.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b5:23:d9:81:bb:eb:68:50:3a:29:b3:56:cf:38:95:a3:5d:
ab:25:fb:ab:7d:63:c4:25:df:76:5a:f2:03:f9:04:c2:c7:97:
ca:2b:28:26:c6:ec:d5:47:b3:cd:2f:31:c1:c8:e9:08:59:e4:
5c:f0:03:b6:7d:53:18:94:81:70:70:62:fc:42:8f:39:5c:e1:
8f:68:6e:6d:c8:c3:25:ce:7c:09:47:88:22:fd:8f:55:92:f0:
3c:4c:68:d0:8d:a5:9c:c0:e3:ba:eb:26:51:f4:b1:c7:d9:40:
cb:69:d4:d6:43:d3:1c:4b:4f:99:2f:51:68:9a:68:d9:8b:e1:
bc:87:5f:b4:b6:dd:7d:68:59:1b:23:a4:48:aa:ff:4d:ac:db:
30:9b:60:8e:2a:66:ec:f4:d2:1b:2a:d2:7e:f7:3a:89:85:c6:
e4:87:4e:f2:a8:8e:2b:d0:ef:03:39:a2:a6:fa:33:a2:0b:13:
5d:cc:b1:ed:7f:41:c2:eb:c9:9f:af:10:52:8c:93:51:4f:6c:
68:18:91:1a:3e:3c:c7:43:b0:1e:49:6a:d4:ba:b8:21:af:b4:
51:cf:6e:e0:27:39:ae:1b:db:f2:b5:5d:69:12:e4:52:d6:6b:
73:7e:a6:1b:7c:4f:6f:00:30:d5:e1:c6:d8:3b:02:9d:c7:af:
3c:67:f2:7a
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUKubzBNOazr4WhM+0vxNJ6HGKybMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyOTA2NTUwMFoX
DTI3MDQyODA3MDAwMFowMzExMC8GA1UEAxMoNkQyRkY2MUEyQjAyOTJDMjc5NzFC
ODdGRDQ4RUVGRENFMDkxRUFDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMulRQ3uZrM28cRFu7nADwbW/9G9JWbMDRQy6FqIYJrPmAfQp65D6RHAncVE
JSjY3dLoWvwMietremeQpNAdFP0Pno4Eko9uVl9fXAFrr5MEYGFi5aV+kKVRRxZQ
WNK7xljn8crMtF4MDby63cIcGpld3pFCFk0an8GodDcxifg+VzYDcn6McpPLQlPo
oMvqTwDBr2CAsH+7isokc3R5u1//fmHEApVK8KNhQZ9RXoj4uQJ4XJBY5NkczP/q
CQ8Wv0bflEVF5TBXkuD+Gbp8QHxBZ3+kK/cfkv0yCdcgeYhfE13eT0TWcG1wSFKs
B34YufpSF4CRf4UgCum7Ajc5DR0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRtL/Ya
KwKSwnlxuH/Uju/c4JHqwTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzgyNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKPjcDANBgkqhkiG9w0BAQsFAAOCAQEAQrUj2YG762hQOimzVs84
laNdqyX7q31jxCXfdlryA/kEwseXyisoJsbs1UezzS8xwcjpCFnkXPADtn1TGJSB
cHBi/EKPOVzhj2hubcjDJc58CUeIIv2PVZLwPExo0I2lnMDjuusmUfSxx9lAy2nU
1kPTHEtPmS9RaJpo2YvhvIdftLbdfWhZGyOkSKr/TazbMJtgjipm7PTSGyrSfvc6
iYXG5IdO8qiOK9DvAzmipvozogsTXcyx7X9BwuvJn68QUoyTUU9saBiRGj48x0Ow
Hklq1Lq4Ia+0Uc9u4Cc5rhvb8rVdaRLkUtZrc36mG3xPbwAw1eHG2DsCncevPGfy
eg==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:43 2026 by rpki-client