Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154616.roa
File:                     AS154616.roa (raw, json)
Hash identifier:          AcM49u0cxeYob2afO1h73vCuHXI4vKrWP538Gidj/3I=
Subject key identifier:   11:F5:56:F1:54:C4:CD:35:53:26:26:12:43:C1:1C:68:B5:EF:1A:3A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       51464C8815EF3682CE5ACD06ABD3B016AB7C1944
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154616.roa
Signing time:             Tue 28 Apr 2026 10:25:52 +0000
ROA not before:           Tue 28 Apr 2026 10:20:52 +0000
ROA not after:            Tue 27 Apr 2027 10:25:52 +0000
asID:                     154616
IP address blocks:        163.128.212.0/23 maxlen: 24
                          2001:df6:eac0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:46:4c:88:15:ef:36:82:ce:5a:cd:06:ab:d3:b0:16:ab:7c:19:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 10:20:52 2026 GMT
            Not After : Apr 27 10:25:52 2027 GMT
        Subject: CN=11F556F154C4CD355326261243C11C68B5EF1A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:46:ec:5e:bc:9d:d2:07:98:04:53:18:21:
                    4d:a1:45:21:fa:7d:a2:fc:78:84:b1:39:c6:2a:0a:
                    81:4e:1f:35:b8:20:c3:0b:fc:92:43:4f:5d:5a:32:
                    0c:53:a0:f0:51:2f:1d:0f:d5:ef:11:4d:fe:dd:7d:
                    69:fe:56:57:d9:3b:da:69:62:05:80:30:67:67:4c:
                    b1:fb:3b:e2:7a:64:dc:51:42:27:9f:eb:4d:6a:16:
                    6c:45:1e:73:ee:a9:cf:9d:62:72:b6:07:e1:07:d3:
                    c9:90:12:6d:69:a9:5c:f8:89:16:fd:8f:70:8c:03:
                    17:16:c3:32:9c:d5:b1:7f:76:e2:b6:10:af:9d:d2:
                    f5:b1:54:b2:66:72:48:8b:ce:c9:cb:95:c3:b8:ea:
                    f7:bf:8e:3b:90:31:b8:d8:72:73:99:24:bd:b8:d4:
                    8b:c4:79:fc:16:df:77:13:a3:33:b7:60:83:69:cc:
                    bc:82:5d:71:45:65:5f:07:bb:0c:e9:f6:38:ad:37:
                    3e:3e:a2:4f:96:c4:c8:ff:df:7d:33:c4:41:f8:68:
                    a4:9e:ab:e7:55:2c:00:30:20:b6:18:18:1f:80:bf:
                    47:a7:24:b0:00:12:e0:a6:f6:6f:46:9e:aa:99:82:
                    ef:c8:10:7a:b8:f0:ea:ca:e2:6c:25:c8:9a:80:ed:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:56:F1:54:C4:CD:35:53:26:26:12:43:C1:1C:68:B5:EF:1A:3A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154616.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.212.0/23
                IPv6:
                  2001:df6:eac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:5a:53:bc:43:1d:5e:c2:bf:5c:c9:e3:35:4b:19:6a:49:6d:
         55:92:5d:19:aa:5a:e2:c6:17:af:d2:36:45:ed:35:13:f6:4d:
         1a:ba:4a:16:61:08:89:bc:7a:6f:eb:af:42:7a:8d:5f:02:59:
         41:54:1c:a3:96:35:0c:b7:1a:e7:29:11:5d:2e:d7:2b:c2:6c:
         2f:11:28:4f:a4:fe:f2:7e:96:19:2e:29:fb:c1:43:fb:bd:ce:
         6c:89:d6:38:db:26:5c:cb:7c:dc:67:83:d4:b5:ad:1e:29:72:
         2f:0f:ee:81:6c:d3:8e:16:19:cc:0d:e2:4f:bd:56:9c:ff:fc:
         a0:ee:8b:b8:8e:48:af:7c:d4:b0:c6:72:c5:b5:31:1b:ac:21:
         3a:80:fa:fe:89:94:10:cb:e5:45:b2:53:66:8c:b3:f5:50:fa:
         a8:5a:ac:f6:54:9c:0f:e2:11:0c:91:86:07:5b:25:50:56:8f:
         9f:94:3e:b0:75:57:dc:46:0e:8e:e7:9f:8e:46:ac:26:10:20:
         77:45:61:82:61:3c:d2:8e:fb:b9:72:5e:96:5e:b4:df:0b:73:
         23:7a:2b:02:47:8d:45:b9:9d:17:fa:ed:56:0e:38:b0:9e:17:
         4a:44:aa:1a:8d:85:75:92:da:73:85:2b:42:68:cd:84:83:13:
         57:44:d2:0b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUUUZMiBXvNoLOWs0Gq9OwFqt8GUQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyODEwMjA1MloX
DTI3MDQyNzEwMjU1MlowMzExMC8GA1UEAxMoMTFGNTU2RjE1NEM0Q0QzNTUzMjYy
NjEyNDNDMTFDNjhCNUVGMUEzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM7vRuxevJ3SB5gEUxghTaFFIfp9ovx4hLE5xioKgU4fNbggwwv8kkNPXVoy
DFOg8FEvHQ/V7xFN/t19af5WV9k72mliBYAwZ2dMsfs74npk3FFCJ5/rTWoWbEUe
c+6pz51icrYH4QfTyZASbWmpXPiJFv2PcIwDFxbDMpzVsX924rYQr53S9bFUsmZy
SIvOycuVw7jq97+OO5AxuNhyc5kkvbjUi8R5/BbfdxOjM7dgg2nMvIJdcUVlXwe7
DOn2OK03Pj6iT5bEyP/ffTPEQfhopJ6r51UsADAgthgYH4C/R6cksAAS4Kb2b0ae
qpmC78gQerjw6sribCXImoDthNkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQR9Vbx
VMTNNVMmJhJDwRxote8aOjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDYxNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAaOA1DAPBAIAAjAJAwcAIAEN9urAMA0GCSqGSIb3DQEBCwUAA4IB
AQCVWlO8Qx1ewr9cyeM1SxlqSW1Vkl0Zqlrixhev0jZF7TUT9k0aukoWYQiJvHpv
669Ceo1fAllBVByjljUMtxrnKRFdLtcrwmwvEShPpP7yfpYZLin7wUP7vc5sidY4
2yZcy3zcZ4PUta0eKXIvD+6BbNOOFhnMDeJPvVac//yg7ou4jkivfNSwxnLFtTEb
rCE6gPr+iZQQy+VFslNmjLP1UPqoWqz2VJwP4hEMkYYHWyVQVo+flD6wdVfcRg6O
55+ORqwmECB3RWGCYTzSjvu5cl6WXrTfC3MjeisCR41FuZ0X+u1WDjiwnhdKRKoa
jYV1ktpzhStCaM2EgxNXRNIL
-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:23 2026 by rpki-client