Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153888.roa
File: AS153888.roa (raw, json)
Hash identifier: HL6EeD1nrmQyZKemUSLTf5jiIrom2uzEHEOmHAFEmgY=
Subject key identifier: 8C:A7:5E:A1:61:D5:C4:FF:94:2C:D5:A2:71:00:54:43:AB:FD:70:1B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: EBAB0C9156E2C5B8456E29BFBBCA5E7C4ACC89
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153888.roa
Signing time: Fri 17 Apr 2026 08:00:00 +0000
ROA not before: Fri 17 Apr 2026 07:55:00 +0000
ROA not after: Fri 16 Apr 2027 08:00:00 +0000
asID: 153888
IP address blocks: 163.227.168.0/23 maxlen: 24
2001:df5:7540::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
eb:ab:0c:91:56:e2:c5:b8:45:6e:29:bf:bb:ca:5e:7c:4a:cc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 17 07:55:00 2026 GMT
Not After : Apr 16 08:00:00 2027 GMT
Subject: CN=8CA75EA161D5C4FF942CD5A271005443ABFD701B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:95:b3:7d:18:a7:84:28:ee:72:4b:90:f5:
e5:06:6e:6b:1e:4b:68:50:46:00:88:11:c2:9c:48:
d0:9d:85:52:60:32:f3:32:c2:57:aa:e0:ab:0a:6b:
02:08:87:dd:70:9b:d4:8c:6e:cd:a6:b2:3e:cf:93:
8b:0a:f3:23:d3:c7:dd:90:35:d9:2f:41:92:9e:da:
1c:e8:0e:bd:15:13:5d:de:6b:16:45:9a:6b:7c:c8:
1f:38:fe:74:5d:e6:a1:db:96:57:68:60:e7:5f:0b:
a0:59:24:8d:64:d6:a2:e2:de:a0:22:94:85:33:ed:
21:49:f6:b0:10:ba:4a:5c:94:48:bf:ba:80:41:f2:
44:44:34:2b:4f:0e:1e:3c:93:e3:68:23:ee:05:3c:
0c:e7:69:83:01:8d:19:c8:d6:40:49:e6:b7:47:52:
1c:7a:5a:5d:be:91:62:49:3d:30:15:5f:a6:b6:34:
50:a5:d8:f3:63:f6:52:48:c0:1d:89:cf:2d:2a:90:
86:f7:05:ec:0e:f5:15:56:22:7b:79:1c:cb:85:05:
72:64:17:66:bf:92:bb:6f:ea:2c:33:49:8e:9b:89:
41:c7:25:53:60:87:3f:49:a5:49:50:20:f4:1a:43:
f0:0b:d4:ec:c3:ab:00:b9:51:be:e5:fe:b6:f3:1f:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:5E:A1:61:D5:C4:FF:94:2C:D5:A2:71:00:54:43:AB:FD:70:1B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.227.168.0/23
IPv6:
2001:df5:7540::/48
Signature Algorithm: sha256WithRSAEncryption
53:c8:d1:78:ec:15:63:55:46:8f:3f:0d:9e:7c:40:79:a9:34:
57:6f:7e:0c:d6:dc:dd:5c:4f:57:dc:38:36:61:57:4d:53:b2:
6e:64:24:26:bc:d7:e9:42:7e:f3:c3:6d:53:4e:dd:4f:19:84:
54:69:30:9d:c8:85:ef:73:0a:0a:13:e2:17:f4:6f:e2:65:cf:
0e:4b:e3:a8:02:ec:69:48:7e:15:fc:cf:54:96:27:ca:78:4e:
80:40:33:6c:70:98:f5:17:04:0e:1d:57:68:bc:21:d0:14:36:
f5:db:ef:c9:40:47:87:b0:bd:b1:ee:7f:59:4a:a7:fd:f9:2c:
66:6c:ac:1c:59:0c:d2:5a:ea:8a:09:41:98:46:9a:f3:fb:81:
2b:bc:0e:40:47:17:0a:4e:4f:21:f0:d0:b8:e3:8d:03:66:58:
d7:3f:98:ac:54:a5:42:05:b3:ab:a2:1a:c3:ac:74:bc:b8:3a:
3b:7f:9b:18:5a:4b:59:14:1e:bb:31:c3:87:04:b0:42:8c:fb:
68:c7:61:65:bc:68:70:9b:0f:4f:9e:d8:57:1e:65:9f:8a:cd:
d2:fa:34:52:d4:a9:33:8d:30:42:92:fe:f0:75:71:64:c0:35:
12:e8:be:91:0f:9d:1a:8e:a6:8a:fe:ce:89:ac:81:f4:25:8d:
2f:f0:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:34 2026 by rpki-client