Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154205.roa
File: AS154205.roa (raw, json)
Hash identifier: Yy80y7LBVYMHYBe2IalE6YX7SUiz72IDHF0uBA9KNN8=
Subject key identifier: C6:75:53:32:EF:84:96:27:86:EA:16:0D:D4:D0:9D:9F:7D:A5:88:67
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1F25E693BC461404EA25F2A6A8805D82B353B04F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154205.roa
Signing time: Mon 27 Apr 2026 03:56:03 +0000
ROA not before: Mon 27 Apr 2026 03:51:03 +0000
ROA not after: Mon 26 Apr 2027 03:56:03 +0000
asID: 154205
IP address blocks: 203.17.189.0/24 maxlen: 24
2001:df6:8c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:25:e6:93:bc:46:14:04:ea:25:f2:a6:a8:80:5d:82:b3:53:b0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 03:51:03 2026 GMT
Not After : Apr 26 03:56:03 2027 GMT
Subject: CN=C6755332EF84962786EA160DD4D09D9F7DA58867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:30:86:d0:6e:b1:bc:c1:b2:7e:74:bf:1e:
36:da:70:28:5b:82:c6:56:24:fb:1f:c6:0f:83:05:
ae:f7:c5:07:24:95:5a:0a:17:b6:a4:3f:c0:7b:11:
30:c8:fb:fe:86:7c:3b:ab:c8:cd:f4:15:05:ca:29:
0f:9d:ea:65:53:fb:cd:5d:33:7d:8e:f0:4d:db:a2:
2c:e6:10:c8:60:77:cd:fc:20:2f:0d:1d:73:c7:69:
95:6b:84:9f:d9:6a:56:e1:9b:96:d1:36:27:10:27:
45:8a:5a:77:ce:7f:a0:fa:b8:99:a3:76:2f:f0:34:
93:29:61:35:1e:64:05:99:de:87:3a:f6:7f:2a:6c:
a5:15:ec:84:89:7d:1c:76:77:8f:53:1d:92:ab:80:
2f:de:09:69:84:b1:72:e2:be:ac:35:f5:76:2b:4d:
25:a7:8f:71:e2:a1:42:f9:cd:72:9b:8d:0f:f2:bd:
4b:c6:60:98:80:61:cc:bb:be:b9:41:bd:49:01:2f:
85:29:82:51:09:45:cc:96:aa:21:43:bc:b6:8b:c5:
f3:cb:80:90:86:c7:42:7b:1c:65:fd:eb:75:5a:77:
45:ec:6b:1a:e8:2c:35:5c:f4:61:9a:40:62:0f:7d:
1a:a6:b5:02:df:ff:b1:63:0c:d5:f6:5e:30:5b:b9:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:75:53:32:EF:84:96:27:86:EA:16:0D:D4:D0:9D:9F:7D:A5:88:67
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154205.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.17.189.0/24
IPv6:
2001:df6:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
54:09:92:0c:e5:a4:f4:c0:aa:4f:73:ef:40:37:11:17:3c:0d:
70:91:99:46:e2:fb:8c:70:ea:e0:b8:07:83:e5:7e:fe:a5:46:
72:9a:73:fa:e7:3e:70:09:8f:81:5a:87:96:b1:1f:87:2d:d4:
9c:7b:62:bf:0b:44:6d:48:80:28:ee:83:eb:a1:55:57:9a:2d:
fd:af:b6:24:6e:77:10:c8:15:fc:18:d5:16:ac:d7:78:dd:19:
86:a0:1b:e7:42:2d:32:2c:e2:89:13:b7:7c:eb:4e:1a:e1:51:
22:c9:85:f7:ba:ac:15:4b:8d:0a:a2:d3:f0:02:c1:7a:df:5a:
02:f0:9d:2c:50:26:71:9f:1d:a2:4a:56:47:7a:00:0e:33:2f:
e4:9d:69:ba:d0:d8:71:b0:c7:0a:51:64:b8:4d:c2:ec:30:b0:
7e:2e:ea:27:f2:e5:44:95:c3:f3:22:66:eb:b3:e3:34:3a:e3:
d0:f7:43:0c:d7:c0:a9:48:9b:46:38:d6:fd:ec:44:be:c0:60:
66:67:cb:c7:73:c5:75:83:47:5a:11:e0:ad:f2:dd:6d:e6:ca:
5e:db:bd:db:e7:98:1c:87:af:2d:35:b8:d6:fc:e5:ae:9a:dc:
29:f4:57:d7:a1:e2:37:cd:68:63:58:52:e3:f5:9c:ee:2f:05:
de:54:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:23 2026 by rpki-client