Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154536.roa
File:                     AS154536.roa (raw, json)
Hash identifier:          UtAn4UdCA9cOWaSvYnuNB6HstD07eeJuFaf20upk4Lo=
Subject key identifier:   92:02:33:AF:75:FE:49:26:E1:5C:89:F9:DA:35:4B:34:14:AF:92:C6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B3F5632D2A4A43FA1923FCB9DCDB9E4F6233F91
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154536.roa
Signing time:             Wed 29 Apr 2026 08:30:21 +0000
ROA not before:           Wed 29 Apr 2026 08:25:21 +0000
ROA not after:            Wed 28 Apr 2027 08:30:21 +0000
asID:                     154536
IP address blocks:        163.128.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3f:56:32:d2:a4:a4:3f:a1:92:3f:cb:9d:cd:b9:e4:f6:23:3f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 29 08:25:21 2026 GMT
            Not After : Apr 28 08:30:21 2027 GMT
        Subject: CN=920233AF75FE4926E15C89F9DA354B3414AF92C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:1b:3a:b2:e9:3b:8a:ac:02:6c:ff:af:79:
                    7d:25:5b:d4:0d:31:9c:a6:a0:cc:51:d1:94:9d:85:
                    10:71:ba:73:3e:7b:09:ac:3e:6e:3d:9c:c9:47:22:
                    60:6d:3b:eb:04:b5:9c:c9:5c:3c:0e:a8:f9:4f:6a:
                    0f:32:41:de:56:13:85:be:22:e6:31:36:69:2b:56:
                    82:21:d3:b4:df:0c:3f:a8:cc:d5:c7:2c:ff:34:80:
                    0b:66:82:a3:d1:d6:ce:4b:9b:cd:59:8f:3e:03:1f:
                    dc:6a:be:da:50:d8:c9:9a:62:d0:72:81:a0:d2:af:
                    ae:1a:5a:a2:dd:f8:af:6b:9f:39:b0:8f:e5:ea:a9:
                    b0:d9:ab:60:cc:4b:aa:3e:5c:c7:cd:97:0a:08:b2:
                    f5:0e:d1:45:56:1d:8e:c9:94:e0:93:87:a4:c4:b8:
                    02:38:1a:ee:6e:f6:97:2d:29:00:28:93:e9:87:8e:
                    84:ac:cf:c8:57:ee:8b:cf:91:c0:26:12:31:87:e8:
                    ff:63:46:34:e7:e7:f4:59:71:72:94:59:20:1a:fe:
                    e6:11:7c:74:ac:0f:b5:56:ba:fb:32:64:5e:96:19:
                    91:93:7c:1c:55:b0:ef:17:0e:8e:de:04:74:f9:62:
                    69:5d:a1:b5:f9:60:9a:9c:5f:3b:b2:46:a8:13:8e:
                    f5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:02:33:AF:75:FE:49:26:E1:5C:89:F9:DA:35:4B:34:14:AF:92:C6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:28:b5:a8:b7:13:40:88:00:72:c2:fd:bc:de:8f:2a:20:
         e3:e0:6c:1d:f1:ac:d5:5b:1c:e2:59:17:1e:ce:cb:d9:f6:f2:
         81:33:f9:11:1d:b0:17:fb:f8:28:9f:28:76:66:24:e0:ad:4c:
         fd:60:53:ee:71:d9:64:51:9c:57:26:5c:3e:ff:e7:d9:9b:cf:
         03:c2:e9:7b:38:53:ba:9d:f3:0c:63:18:ba:89:8e:da:fd:c9:
         fc:fd:78:6d:e9:37:52:5c:8d:93:23:ea:a9:ca:6d:9d:2b:57:
         ed:2c:f0:da:3b:50:5d:64:0c:f2:7e:9d:be:94:0c:82:1a:2a:
         3f:b2:22:42:42:03:53:a8:85:3b:9c:06:9d:67:c9:29:c8:cc:
         37:de:74:f2:21:4c:53:85:be:7d:4f:dc:76:09:f6:eb:5d:ef:
         7a:cc:98:bb:57:0d:59:27:a6:03:37:8b:74:ca:71:3c:a5:39:
         20:09:0b:4e:83:2d:6f:e0:35:fb:b1:0a:62:ae:a8:ff:4e:20:
         65:ef:54:03:9b:67:a7:7e:be:09:3f:75:42:b3:a6:c1:24:76:
         e9:a8:07:6b:e7:86:7f:21:a6:e3:99:95:fa:e7:56:84:ce:15:
         fd:10:ee:6a:eb:d8:17:b1:a1:1b:76:ef:50:bb:ac:dc:78:5b:
         8b:90:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:31 2026 by rpki-client