Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154400.roa
File: AS154400.roa (raw, json)
Hash identifier: 3QfryeRPldVPBcgKdmMOOQ+gG26r8G/8VmBguH2ZeZc=
Subject key identifier: 78:37:E7:2F:97:2E:F2:EA:AD:12:57:0C:EC:1C:1D:69:5A:2C:72:67
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 58E3DE4B6147A49C264201FBD49BFE6AF4E123F6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154400.roa
Signing time: Mon 27 Apr 2026 06:43:05 +0000
ROA not before: Mon 27 Apr 2026 06:38:05 +0000
ROA not after: Mon 26 Apr 2027 06:43:05 +0000
asID: 154400
IP address blocks: 163.128.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e3:de:4b:61:47:a4:9c:26:42:01:fb:d4:9b:fe:6a:f4:e1:23:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 06:38:05 2026 GMT
Not After : Apr 26 06:43:05 2027 GMT
Subject: CN=7837E72F972EF2EAAD12570CEC1C1D695A2C7267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:76:de:e0:7e:83:78:81:2d:64:7d:77:00:
21:bd:fd:86:38:28:23:ff:6c:1d:99:46:40:55:13:
4a:98:0b:fa:dc:45:48:00:7a:67:04:1b:99:6e:a2:
6b:e2:ba:2b:9a:61:50:d6:db:87:c3:7b:72:c4:f5:
21:32:a8:ca:1b:e4:ec:39:88:17:bb:6d:06:e6:a8:
19:d6:42:12:0b:85:ef:5a:5c:00:c2:35:17:0f:18:
35:55:d0:5b:81:78:13:da:f2:ac:1d:98:34:07:1e:
77:4e:13:54:f0:d3:1c:56:6f:85:4d:89:c5:f4:f6:
27:a3:97:30:0d:b7:5e:92:50:f4:cd:4a:d0:f3:8d:
d6:d1:ee:81:3b:43:86:d2:75:7c:ab:ae:a5:94:d9:
6e:5e:29:17:2d:a4:9e:fd:70:5c:ba:2b:63:86:03:
a9:3f:81:be:3e:8a:56:b6:0a:82:81:4d:f1:36:ed:
16:4f:82:1e:a1:31:93:15:50:86:c1:2a:30:92:ba:
ed:75:91:16:24:8e:e5:51:91:26:19:33:37:28:28:
75:58:35:73:b8:e6:cf:25:82:e7:cf:56:eb:17:95:
33:ac:dc:44:08:2f:f4:aa:27:10:62:f4:b3:d7:58:
d0:0c:06:ca:e2:e0:24:af:a7:68:0a:b3:84:10:b1:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:E7:2F:97:2E:F2:EA:AD:12:57:0C:EC:1C:1D:69:5A:2C:72:67
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.191.0/24
Signature Algorithm: sha256WithRSAEncryption
06:23:c6:1e:55:4e:e3:e7:d4:14:aa:10:28:f6:c3:8e:44:c6:
f6:e8:67:25:6e:3e:8c:57:c5:ae:ee:f4:b5:95:e8:20:53:d1:
81:7b:a6:23:f6:ca:f2:06:58:ea:60:19:f6:29:e3:b5:b3:7d:
48:28:6c:62:a2:59:ce:a5:7c:2b:d4:29:a2:ab:3b:11:0e:eb:
59:ab:ea:0c:65:3c:52:8c:0b:33:a7:44:d6:4e:34:d3:61:aa:
a8:ec:82:92:a9:b0:29:69:f8:01:e5:b2:8e:10:50:d3:3f:2c:
25:42:27:16:f2:9f:56:a6:52:ed:d5:33:9f:87:ea:06:b6:84:
7f:bd:68:84:fb:94:21:85:b0:c9:fd:3d:88:63:a7:d0:0a:6d:
13:e5:c1:b8:92:e4:da:d9:d0:05:21:b1:4d:b0:92:c0:8b:0e:
8c:40:80:59:5b:aa:de:b2:33:9f:1b:c6:0d:71:37:fd:f7:d5:
29:9e:e5:43:12:b8:2b:02:19:a6:34:68:99:6a:2d:f4:c7:77:
64:f7:48:13:e5:3f:4a:ea:34:06:f4:14:85:e1:0f:92:26:df:
04:0b:46:31:af:a9:a0:ce:eb:7c:a6:18:30:cd:7f:74:5d:8b:
cd:cd:fd:e5:ba:69:0d:47:0d:03:de:f0:8f:3e:62:65:92:9d:
b8:10:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:22 2026 by rpki-client