Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS131769.roa
File: AS131769.roa (raw, json)
Hash identifier: fgZiQpYEHpUCC22nLWVHjFrKFMsP3llRHK7fzR6+htA=
Subject key identifier: 5D:F8:E5:E6:B6:3A:C6:2F:87:EA:15:46:4F:C1:08:DB:CD:8C:FD:78
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 2D42FA531437CC4E62B7ABF6DEDA34065B4AF0DD
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS131769.roa
Signing time: Mon 27 Apr 2026 08:00:00 +0000
ROA not before: Mon 27 Apr 2026 07:55:00 +0000
ROA not after: Mon 26 Apr 2027 08:00:00 +0000
asID: 131769
IP address blocks: 160.22.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:42:fa:53:14:37:cc:4e:62:b7:ab:f6:de:da:34:06:5b:4a:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Apr 27 07:55:00 2026 GMT
Not After : Apr 26 08:00:00 2027 GMT
Subject: CN=5DF8E5E6B63AC62F87EA15464FC108DBCD8CFD78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:f0:3d:c3:42:25:9b:87:04:32:40:84:bf:
78:20:7d:05:36:be:ba:ea:8f:f8:be:b8:04:fa:f0:
79:da:06:86:c1:94:bd:ed:d2:f9:bb:ee:f4:28:76:
b3:03:7e:5a:3b:0a:ef:fd:04:e0:0d:96:2e:02:47:
95:94:5c:aa:f4:38:0d:bf:d5:3f:21:04:83:fb:6a:
f4:2d:9b:a6:95:21:90:2d:61:84:52:d5:db:da:84:
cd:8a:19:2b:07:17:88:fc:20:7b:01:0e:ae:b6:ae:
bf:f7:7b:0a:2f:63:89:7b:f1:2e:42:e0:ca:47:bb:
27:9f:5b:ff:f3:06:31:2e:24:55:e1:60:0a:a9:fb:
e7:35:d9:3b:c5:b7:7e:4d:3e:0b:50:b1:6d:e4:84:
c5:30:db:08:5b:76:ec:4f:d6:ec:44:0a:21:be:f4:
a4:9d:b5:98:88:e8:1d:4b:c6:63:44:29:f5:2f:66:
78:22:4f:8e:15:63:b2:a7:9f:93:db:cb:64:f3:51:
4f:3d:72:85:57:a4:90:0a:ea:37:0f:f7:38:e2:62:
20:07:a1:4f:0b:27:b6:7b:b2:fe:53:6d:62:ef:38:
3c:2f:d3:d9:68:be:a0:8e:e5:45:55:7a:9f:b5:a5:
12:b9:0a:b1:94:f6:94:c3:d1:bd:07:4d:fd:b5:56:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F8:E5:E6:B6:3A:C6:2F:87:EA:15:46:4F:C1:08:DB:CD:8C:FD:78
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS131769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7d:26:c2:a0:46:6a:f7:47:e4:41:bd:6e:70:11:e6:ca:bf:
f6:7d:17:01:b1:95:97:4e:65:94:bc:8e:c6:e0:ba:26:9c:43:
08:d0:3a:8f:9a:ca:b7:25:e8:1c:ef:61:b3:6a:ea:a4:e0:98:
db:bd:23:a3:fe:b0:6d:82:ee:60:d0:28:5a:b1:5e:ab:f4:dd:
6d:f0:60:e4:68:51:50:c0:55:ed:c6:8c:4a:b3:9c:18:b1:85:
dc:a1:a2:ad:81:b6:61:bd:99:16:2e:59:fa:13:3c:60:48:4c:
98:3c:9b:b7:cc:13:e5:4f:29:b7:2d:d5:07:1e:40:04:ef:8c:
c2:ac:d7:03:74:8d:03:7b:c6:f1:09:20:30:73:4f:d5:22:f3:
7f:2a:d2:53:f1:85:7b:6c:cc:16:b3:5a:ec:df:23:55:43:c0:
fd:61:84:62:0d:df:9d:ca:a9:ad:ff:09:1a:3a:d4:1a:db:c6:
d3:3c:8c:dc:a0:9c:0a:1b:71:4a:5e:ea:51:88:31:e6:8d:07:
43:bd:a5:30:6c:44:dd:6b:a0:e1:86:04:c4:9e:a2:49:47:d5:
e6:e1:76:df:79:b2:a7:8e:54:40:73:f0:07:c6:79:4d:86:fb:
3d:6f:ac:b4:bf:06:14:74:a4:d1:6d:55:27:05:22:51:f0:77:
5d:89:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 02:57:00 2026 by rpki-client