Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154640.roa
File: AS154640.roa (raw, json)
Hash identifier: EE+sAVnwsn5rWAKxvCvhVJqsQTuTAz548FwA/tmQjrk=
Subject key identifier: BB:35:81:21:2C:B5:DF:EE:AB:FE:AA:F8:07:A9:78:84:FA:8D:53:73
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6638678353B326B970B816AB255C94E0800231A3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154640.roa
Signing time: Tue 21 Apr 2026 04:46:14 +0000
ROA not before: Tue 21 Apr 2026 04:41:14 +0000
ROA not after: Tue 20 Apr 2027 04:46:14 +0000
asID: 154640
IP address blocks: 163.128.240.0/24 maxlen: 24
2001:df6:f040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:38:67:83:53:b3:26:b9:70:b8:16:ab:25:5c:94:e0:80:02:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 21 04:41:14 2026 GMT
Not After : Apr 20 04:46:14 2027 GMT
Subject: CN=BB3581212CB5DFEEABFEAAF807A97884FA8D5373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:dc:1a:75:c7:2a:5c:cf:85:15:6f:7a:60:
b3:c4:46:ac:6b:a8:f3:ec:fd:e8:cd:7d:ad:b9:cd:
91:52:de:79:12:9b:05:6b:ab:5f:46:5f:34:f8:67:
2e:f3:63:36:40:9c:19:b2:a3:0a:43:a8:4a:db:40:
9d:3e:4e:59:62:36:c1:54:4d:cc:c8:ed:f2:54:28:
d0:50:84:e0:d0:fe:14:b0:00:3f:87:5d:62:83:52:
6c:8a:2f:bf:b5:36:75:e0:b8:92:5e:01:42:94:3b:
bc:69:da:44:6b:ed:8e:78:82:dd:01:8b:f2:a0:f9:
05:0d:1c:12:cb:c9:91:dd:08:81:bd:4a:3c:9d:52:
fd:58:fd:dd:c4:9b:55:e0:0d:8e:40:1c:43:ca:23:
d1:a4:b1:33:33:be:1b:bc:8f:3e:c0:4b:c2:f9:3c:
8a:2f:dc:d2:a5:cf:79:3a:01:ac:39:2a:4c:25:94:
58:7d:e5:ee:0f:a3:3b:b9:47:c1:ad:0b:3c:d7:2f:
47:52:4a:ca:ea:1d:fc:1e:2f:b0:3d:ad:29:0a:40:
55:0e:46:ea:6d:95:f0:00:f7:dd:06:3f:61:6e:73:
ac:5d:5f:dd:90:12:fe:30:d2:eb:69:e0:9e:12:14:
cd:ef:51:ec:fd:82:d5:6a:3a:63:d8:01:8b:e0:73:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:81:21:2C:B5:DF:EE:AB:FE:AA:F8:07:A9:78:84:FA:8D:53:73
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.240.0/24
IPv6:
2001:df6:f040::/48
Signature Algorithm: sha256WithRSAEncryption
12:63:e4:f0:06:c7:4a:0d:d3:d4:de:48:da:80:98:c0:17:11:
53:14:b5:79:f1:de:17:30:d6:a1:0a:b4:36:70:1a:35:8d:40:
25:8e:ef:49:b0:87:99:4b:b0:7d:a8:e8:5f:a4:37:46:e1:59:
8d:f0:4d:6d:b6:2f:a0:97:61:0f:b5:6e:49:87:3c:8d:ea:ea:
4e:0c:00:7d:ee:58:30:05:b5:6e:90:02:77:a4:9c:ef:af:99:
70:6a:30:f2:62:28:3b:4c:2c:d7:51:58:5c:ce:e3:91:09:b8:
89:28:6e:cb:79:75:c0:d3:75:a7:b5:72:47:18:a7:5e:87:c9:
c7:dc:6a:16:7a:67:8c:67:eb:e0:e3:06:37:63:75:7d:00:b9:
60:a7:80:7a:33:e7:7f:98:3d:e0:aa:e4:3a:a6:7f:67:0f:af:
29:03:40:a1:b6:5f:08:22:94:e6:cb:4b:73:5c:6c:99:47:08:
c7:61:fd:06:0c:ba:d1:ee:4b:cc:f7:f2:7f:2e:d8:35:8e:e8:
4d:46:d2:e6:b9:bb:8c:73:e9:da:7c:d5:54:4d:7c:83:12:fe:
24:e7:13:5d:bf:21:c7:2a:58:2a:51:3e:10:42:4d:1e:2f:02:
d8:09:92:09:2a:09:89:40:a8:d5:c2:c1:5b:fe:f0:c4:a9:e0:
c6:a9:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:28 2026 by rpki-client