Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153968.roa
File: AS153968.roa (raw, json)
Hash identifier: aYbpFfy+VgvrwCYz0lOuYdH+QpqdCujfnUdYANw/TD0=
Subject key identifier: C5:97:21:50:03:31:A4:B6:E2:89:8E:63:D4:C6:D3:02:B4:9E:0D:44
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6C4CA236ABEA71C6921F237CA8957F792827BBCC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153968.roa
Signing time: Mon 27 Apr 2026 09:17:03 +0000
ROA not before: Mon 27 Apr 2026 09:12:03 +0000
ROA not after: Mon 26 Apr 2027 09:17:03 +0000
asID: 153968
IP address blocks: 2001:df5:b4c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:4c:a2:36:ab:ea:71:c6:92:1f:23:7c:a8:95:7f:79:28:27:bb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 09:12:03 2026 GMT
Not After : Apr 26 09:17:03 2027 GMT
Subject: CN=C59721500331A4B6E2898E63D4C6D302B49E0D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:12:08:8e:9b:58:40:7a:08:4b:fc:fd:fd:dc:
1b:f8:3a:ea:3e:d3:87:b6:b0:fb:b1:c0:f7:0c:96:
01:d6:ff:94:2f:fe:50:20:fd:fa:b3:33:bc:f2:af:
c4:d1:e9:ea:ac:e5:2c:ba:8d:29:c2:af:2c:1d:6b:
56:00:48:7a:cc:97:74:ad:76:e7:c3:cf:4f:00:98:
7e:43:a3:83:56:ea:41:98:8b:0a:61:1e:2f:b2:ce:
27:29:60:d8:4e:a0:61:19:a6:ea:cc:f7:a0:41:39:
df:e4:bd:9f:1b:fe:76:9a:67:16:22:be:a9:ad:66:
f0:a3:cb:ab:81:01:4e:dd:45:81:90:6d:46:f8:82:
7c:5d:5f:bc:87:07:d0:00:26:c5:53:60:2b:e4:e1:
b8:8a:5e:49:06:d8:03:07:97:d5:3f:b6:df:51:9f:
ec:6e:ae:cb:59:79:89:4d:aa:04:14:21:52:6a:27:
72:2e:bc:34:fb:ad:bc:92:32:65:1f:3c:42:b6:e8:
b1:3e:7a:2f:2a:82:8a:3b:22:1a:7a:9e:9b:24:c8:
6d:a4:0e:8c:cd:d0:3a:dc:ff:9e:70:37:62:2a:5a:
11:00:f8:c7:b0:49:2b:e0:da:74:33:c4:2a:aa:f3:
03:cf:b2:dd:c5:4a:a2:ec:0b:fa:d6:c8:67:fa:98:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:21:50:03:31:A4:B6:E2:89:8E:63:D4:C6:D3:02:B4:9E:0D:44
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:b4c0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:92:05:ec:1c:28:3a:21:73:2f:30:cd:29:21:c6:74:b2:a0:
fd:e8:b8:61:47:43:59:fa:b2:1f:78:2f:2e:88:e7:8c:8b:11:
24:cf:3d:2f:37:ce:00:19:ea:a0:ed:0a:39:07:b1:d9:be:b2:
f0:c2:b8:97:8c:75:5a:e5:f7:97:31:dc:32:e4:2b:b7:af:b3:
a4:71:02:71:f0:bb:40:94:df:62:88:0f:32:70:dc:15:a0:35:
34:27:52:d4:d0:0c:d3:3d:74:96:57:21:5f:8b:63:37:09:c2:
ed:6c:6d:52:6e:e7:a2:08:41:6d:5b:a6:84:35:1e:d3:a0:c0:
ec:f5:dc:16:40:c8:a6:f7:0e:0d:ad:df:35:47:d1:d8:24:cc:
25:c6:30:59:9d:b8:b6:b0:62:f2:b3:e4:a2:7f:ee:0e:e7:d7:
99:93:3b:83:ba:07:b8:ce:aa:ac:5e:6c:81:4f:90:f8:1c:16:
b2:81:cb:07:ef:13:c4:77:a7:6e:11:01:f5:51:c0:8b:77:2c:
d4:af:6d:8f:49:75:9d:1b:59:84:4d:07:39:47:76:ac:f2:5b:
00:64:8e:ba:15:35:23:d1:ed:d6:de:43:db:3a:38:c0:9a:06:
6a:72:f2:f3:c5:43:54:61:4b:64:6a:70:f6:44:34:c7:48:78:
e5:c7:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:30 2026 by rpki-client