Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS4622.roa
File: AS4622.roa (raw, json)
Hash identifier: yxLvz2teDKmBKONaJ2FQEvvU2BMfE7u159bNbNJzxZg=
Subject key identifier: B6:F6:5C:31:8F:1D:2B:C4:AE:EF:B6:FE:A3:48:08:1E:D2:11:C5:68
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 38367B8B34C855959D139E73F32F8412B35DCAAF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS4622.roa
Signing time: Mon 27 Apr 2026 04:29:22 +0000
ROA not before: Mon 27 Apr 2026 04:24:22 +0000
ROA not after: Mon 26 Apr 2027 04:29:22 +0000
asID: 4622
IP address blocks: 203.119.13.0/24 maxlen: 24
203.119.52.0/22 maxlen: 24
2001:dc6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:36:7b:8b:34:c8:55:95:9d:13:9e:73:f3:2f:84:12:b3:5d:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 04:24:22 2026 GMT
Not After : Apr 26 04:29:22 2027 GMT
Subject: CN=B6F65C318F1D2BC4AEEFB6FEA348081ED211C568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:2d:a7:fd:a5:cd:5f:44:19:c5:cc:09:a1:
c8:8b:41:a1:46:ca:64:aa:08:73:4a:9a:1c:83:d2:
41:10:0d:f2:09:5c:2f:1a:9e:94:52:1e:8c:8c:33:
71:fc:58:03:85:bc:59:93:12:f6:e0:f1:32:31:67:
bf:0c:b9:4a:a1:88:79:fd:a1:6c:68:b3:9c:31:f4:
bb:55:28:b6:82:b4:50:de:1a:81:18:be:4c:58:f5:
25:0c:c9:c4:74:8f:d4:aa:2a:1c:15:2d:06:9c:ab:
ba:d6:b9:fd:60:3a:03:b0:99:f3:a2:4a:fd:34:3a:
a3:87:4c:0b:39:d1:0d:c6:0e:ad:a9:c4:06:af:28:
8c:e6:09:d2:95:b6:ea:c6:56:7c:aa:5b:22:4b:67:
2d:01:2c:43:7a:20:81:dc:bd:e8:25:b5:76:e2:22:
63:12:68:65:a4:25:f4:ad:b0:74:91:12:65:eb:22:
31:7a:76:29:51:cd:f6:ab:a0:bb:d7:76:03:9b:a3:
4d:9a:8b:42:29:c5:eb:7f:4c:14:2e:32:c9:2c:15:
40:98:da:be:c6:60:57:43:72:38:28:48:0f:d1:e4:
cc:e0:cc:dc:66:3c:f9:f5:77:e0:41:1e:05:07:fa:
35:f5:59:de:fd:82:d8:48:85:37:02:2b:96:8d:1e:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F6:5C:31:8F:1D:2B:C4:AE:EF:B6:FE:A3:48:08:1E:D2:11:C5:68
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS4622.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.119.13.0/24
203.119.52.0/22
IPv6:
2001:dc6::/48
Signature Algorithm: sha256WithRSAEncryption
43:2e:d6:65:b4:55:2c:54:4c:f8:9c:57:0a:3c:cf:ab:8b:60:
9d:c7:5d:49:a3:c8:2f:6e:90:01:a7:57:73:fb:0f:15:5b:ab:
74:3e:ee:02:0a:db:df:a4:2a:31:b1:7a:7c:8a:8a:e3:7f:08:
b9:2a:1b:e1:79:72:ce:d6:71:59:f8:80:40:e9:4b:cc:30:60:
7a:ee:85:d9:e6:4a:76:a9:a8:f9:42:14:22:2a:c7:e0:a7:a1:
2d:26:b5:5d:3f:1c:49:94:ce:57:bd:6f:7f:b1:97:05:77:26:
68:80:ea:02:05:da:7a:09:d0:57:1d:b4:1c:82:c3:58:1d:1d:
08:59:9c:92:32:b2:fb:0e:b8:ce:b1:16:9c:73:bc:76:e8:8b:
9e:5b:c0:c9:99:b9:0c:4b:81:b8:c7:36:15:61:e0:ca:ca:05:
72:93:cc:c5:5c:44:23:c2:75:5a:85:e6:21:db:19:51:21:f0:
65:00:08:02:e9:4a:2f:0d:63:e7:82:53:78:f9:90:c7:da:ce:
2a:31:bf:2e:7b:52:f3:88:2d:98:80:d3:64:e6:49:7b:be:a7:
e5:7a:55:6d:01:4e:bc:0a:9a:eb:81:c2:1b:30:31:3b:8c:4b:
34:b5:72:b9:66:e2:eb:e0:4c:cb:01:09:42:a2:79:a5:09:65:
51:a1:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:25 2026 by rpki-client