Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154628.roa
File:                     AS154628.roa (raw, json)
Hash identifier:          3pJJ7XcjPZt56jaVxz43WwUnsow9K9+MKgAqV2L7SQ0=
Subject key identifier:   A5:D7:AD:02:C5:CC:00:10:C8:51:99:15:97:57:E4:E3:78:89:78:6A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       61AE5A71E82DF40C78AB5698860CA9834DCE55DD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154628.roa
Signing time:             Mon 27 Apr 2026 04:36:54 +0000
ROA not before:           Mon 27 Apr 2026 04:31:54 +0000
ROA not after:            Mon 26 Apr 2027 04:36:54 +0000
asID:                     154628
IP address blocks:        163.128.183.0/24 maxlen: 24
                          2001:df6:e440::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ae:5a:71:e8:2d:f4:0c:78:ab:56:98:86:0c:a9:83:4d:ce:55:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 04:31:54 2026 GMT
            Not After : Apr 26 04:36:54 2027 GMT
        Subject: CN=A5D7AD02C5CC0010C85199159757E4E37889786A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:46:bb:d1:5e:a3:19:67:b7:1a:82:5c:83:
                    bd:70:ed:27:f9:87:1a:12:b6:c7:bf:05:a1:5e:ec:
                    27:ce:5b:cd:f9:a3:bd:15:04:a6:eb:42:46:1c:03:
                    13:86:39:02:c2:c8:c4:7c:f1:ad:44:5c:77:65:48:
                    24:70:f8:83:1c:14:4e:ec:cc:70:bd:9a:31:78:9c:
                    d4:cf:29:1e:31:bb:9a:76:1d:f2:05:af:71:dc:79:
                    e3:fb:60:ac:c8:2a:20:a9:0d:3d:db:06:53:6f:e4:
                    21:ef:c5:b8:7a:98:c3:43:ea:4a:ad:4d:fd:74:0e:
                    f8:eb:ab:35:83:f8:74:82:32:4d:3e:c2:59:da:57:
                    2b:10:f6:56:c4:4c:7f:b5:a2:86:2f:58:b5:c6:27:
                    d3:f9:da:86:31:23:2e:99:ef:f5:df:3b:be:7d:ea:
                    3b:5b:95:3a:b3:fc:39:e9:12:b8:8a:99:fa:a7:db:
                    7a:66:84:25:e8:2a:9b:fb:aa:12:76:f9:94:ac:e4:
                    cd:15:00:57:0f:b7:16:ed:f2:cf:ba:f1:0b:a7:18:
                    3c:a6:88:ed:f7:24:93:34:29:3a:d3:35:bb:3a:04:
                    ef:e0:ce:16:4e:e8:76:5f:36:03:8e:ad:47:b3:07:
                    30:f8:39:4a:c6:9e:fd:55:08:bf:6e:b8:3e:d7:df:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D7:AD:02:C5:CC:00:10:C8:51:99:15:97:57:E4:E3:78:89:78:6A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154628.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.183.0/24
                IPv6:
                  2001:df6:e440::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:a6:c6:f2:31:c3:6b:c6:ce:2b:bd:49:2b:1b:27:4b:2e:
         91:3c:d6:e8:28:15:5b:c8:db:2f:6a:d7:7f:65:2f:80:a6:87:
         a4:32:b5:6c:17:0a:b9:8f:df:ad:4a:8c:79:e2:9c:85:3f:49:
         59:6f:e9:db:40:cc:2b:a3:90:35:a9:fd:4a:68:01:42:da:94:
         d8:82:ad:49:ff:d5:aa:8b:f6:bf:d4:ba:99:84:3b:05:c4:84:
         84:e5:a9:06:59:ba:aa:f8:ec:9a:b8:1f:ad:9a:d7:89:87:6f:
         4b:cf:c0:d8:66:1a:81:73:c0:ad:b8:cf:be:ba:94:c9:c4:da:
         6d:df:21:81:af:89:20:54:d0:ea:7b:7f:d7:7e:62:3b:6a:f4:
         2d:4f:4f:01:11:49:ee:5a:e7:af:4a:4b:25:10:23:b0:b3:61:
         81:cf:dc:0f:3f:ad:3f:ed:ed:8e:83:7a:c7:cb:5c:40:94:a2:
         7b:d1:f5:17:72:47:45:dc:93:a1:b0:45:38:41:de:f4:93:c1:
         41:83:af:21:d5:fc:f5:0f:63:7f:40:96:a3:96:a2:88:bd:a8:
         12:21:51:e9:70:3d:10:e8:c1:33:36:22:47:c8:11:fc:cf:50:
         93:51:4d:d9:64:22:ed:98:ea:f8:4e:a0:18:b4:18:11:29:f4:
         8d:63:3e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:28 2026 by rpki-client