Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153858.roa
File: AS153858.roa (raw, json)
Hash identifier: bx4K3HVpsJWPVTrVFpJhGIaJ4GE3J+Iunv++EZMJsfM=
Subject key identifier: 52:CE:81:60:55:75:18:15:C9:4E:DF:74:43:FB:F8:6B:CB:FF:5A:3C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0AEE976227276DF684399EE9153798D4D506B464
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153858.roa
Signing time: Tue 28 Apr 2026 07:00:00 +0000
ROA not before: Tue 28 Apr 2026 06:55:00 +0000
ROA not after: Tue 27 Apr 2027 07:00:00 +0000
asID: 153858
IP address blocks: 163.227.176.0/24 maxlen: 24
2001:df5:7640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ee:97:62:27:27:6d:f6:84:39:9e:e9:15:37:98:d4:d5:06:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 28 06:55:00 2026 GMT
Not After : Apr 27 07:00:00 2027 GMT
Subject: CN=52CE816055751815C94EDF7443FBF86BCBFF5A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:27:0d:9d:57:1f:1f:a7:64:cd:e2:fe:27:
38:2f:6d:e8:a2:ae:e7:b6:e6:e3:e3:e0:ef:97:3d:
eb:3d:27:a8:82:76:99:63:24:71:0c:6c:65:33:b4:
95:ef:1e:05:aa:f7:f1:00:e3:3a:a0:3f:dc:12:25:
e1:ca:6e:8f:c4:3c:3a:b4:36:03:1b:1d:d8:04:12:
38:03:1c:fb:3f:24:45:5c:a5:6a:4f:ae:3f:7c:37:
97:b1:4b:3b:05:50:6e:8e:f9:fb:94:f0:2d:31:88:
f4:fb:28:80:75:b1:92:99:ea:fe:dc:31:fa:37:df:
df:b1:ee:d0:fd:da:bd:a8:c8:81:9e:f6:66:1c:84:
4e:0b:b4:f8:97:1b:4d:c6:48:e9:5d:3c:87:91:81:
ff:ee:f7:69:46:5a:a6:27:86:93:f0:95:67:04:45:
38:9b:c1:7f:f5:13:c9:ca:e3:b3:df:69:de:ad:c1:
77:c5:6b:d9:98:d4:49:27:4d:46:33:e9:96:82:0a:
d7:ee:0a:7b:8e:07:2d:e1:7b:10:4e:59:e0:18:99:
41:c3:fc:88:09:96:8c:c8:08:17:bb:52:2e:3f:b4:
a9:e3:df:5f:72:33:15:57:ba:c4:6d:a3:27:88:fc:
cf:7e:b7:5f:6d:34:56:20:c9:50:a5:3a:17:c6:65:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:81:60:55:75:18:15:C9:4E:DF:74:43:FB:F8:6B:CB:FF:5A:3C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153858.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.227.176.0/24
IPv6:
2001:df5:7640::/48
Signature Algorithm: sha256WithRSAEncryption
17:bc:9f:98:3d:01:aa:9a:45:c6:43:0c:82:1d:96:2a:c5:13:
06:44:79:f3:7a:6d:2b:75:77:cb:50:81:a9:d8:5e:cc:ea:0d:
66:92:77:35:b6:6a:d2:df:a6:c2:37:93:e3:1c:03:87:45:04:
94:ae:d1:b2:8b:31:69:7a:b0:bf:c9:62:56:08:ff:fe:28:68:
44:f5:71:91:d7:d9:a6:9c:23:d9:7b:b7:b1:60:94:3a:bd:34:
9f:29:14:12:5a:8f:23:2a:40:55:6c:f5:32:cf:21:fa:03:83:
f4:9a:e1:ee:86:43:46:ac:5c:e8:91:fd:a7:76:50:9c:2c:19:
24:79:95:93:d6:24:d5:7d:51:a8:ce:fc:71:b2:c3:db:7a:ab:
c7:15:83:82:55:05:e7:0a:5e:e5:c2:c0:d8:a5:8d:d2:f7:66:
62:4d:12:06:99:66:9f:4a:95:1c:78:8a:c4:54:78:1c:41:3c:
0a:04:03:cb:28:d1:d1:3d:6d:46:3f:b2:5d:4f:cb:38:22:32:
0d:c6:5a:42:a6:2c:0a:c0:08:c1:4f:c2:d6:cf:68:aa:86:d4:
9f:b5:60:e9:31:dc:4b:50:4c:79:20:36:a0:57:0c:99:63:e8:
8d:ea:b3:eb:40:18:81:85:57:8f:d1:0f:46:67:eb:b9:f8:79:
71:ff:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:27 2026 by rpki-client