Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa
File: AS136052.roa (raw, json)
Hash identifier: 31hYRouFyDiCmwFWQbhUZ1OqEkgVlyAJoPo/y+6zdNU=
Subject key identifier: E6:57:36:EF:35:19:E1:CB:63:1A:45:21:FE:2C:29:51:F0:02:F8:28
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 533AC6AF5A3FCF80C14ECFCACD377E5D363BF020
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa
Signing time: Tue 28 Apr 2026 07:41:01 +0000
ROA not before: Tue 28 Apr 2026 07:36:01 +0000
ROA not after: Tue 27 Apr 2027 07:41:01 +0000
asID: 136052
IP address blocks: 157.10.160.0/23 maxlen: 24
157.20.96.0/23 maxlen: 24
157.20.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:3a:c6:af:5a:3f:cf:80:c1:4e:cf:ca:cd:37:7e:5d:36:3b:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Apr 28 07:36:01 2026 GMT
Not After : Apr 27 07:41:01 2027 GMT
Subject: CN=E65736EF3519E1CB631A4521FE2C2951F002F828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:9c:08:e4:60:e2:5f:36:99:fa:29:39:41:
ce:2c:db:e8:46:eb:c1:8f:dc:1c:b1:39:9f:57:64:
6c:93:d6:18:d3:a9:67:d4:06:24:5e:1d:26:b6:70:
fc:10:07:13:bd:33:ef:58:57:db:e7:2e:cc:da:87:
d2:26:f9:53:47:6b:d3:07:cf:52:12:92:ad:4e:26:
41:8e:22:d8:a4:79:ea:0b:b9:ef:f4:a1:bf:7c:97:
5f:be:82:8c:d6:d8:ac:00:ed:16:97:1e:51:ae:a1:
68:24:c3:81:32:7f:ea:8a:06:22:2c:b2:52:56:c7:
b3:d4:39:59:7b:67:e4:ab:0d:02:73:08:82:26:ab:
90:6a:80:50:18:2d:a0:65:25:2a:b2:db:45:b5:5d:
9c:cd:33:5d:ca:b6:8d:84:64:0e:c5:12:49:56:75:
7f:77:1c:e9:48:67:67:0d:f5:43:9c:6b:5c:1b:13:
03:d1:44:73:8f:1a:ae:36:f6:e2:13:ea:6b:a9:e9:
3a:3c:95:f0:c8:29:e7:01:93:1c:44:13:62:e3:19:
6a:db:fe:d0:a1:2d:80:75:d8:fe:2d:72:23:cf:d3:
13:ca:7b:5f:bd:d5:8b:c6:ae:9d:ba:6f:41:d6:f8:
3a:d5:99:fe:fa:ec:02:5d:cd:10:9f:c9:77:9e:e5:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:36:EF:35:19:E1:CB:63:1A:45:21:FE:2C:29:51:F0:02:F8:28
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS136052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.160.0/23
157.20.96.0/23
157.20.154.0/23
Signature Algorithm: sha256WithRSAEncryption
75:e5:43:b9:84:2e:07:fa:d6:10:87:95:41:f8:7f:de:b7:3c:
c3:9f:1c:11:27:07:4a:a7:de:88:b6:3c:dd:9f:50:fd:2f:e1:
db:00:1a:d4:d9:0b:1c:fd:da:2b:cc:52:41:d8:a8:4f:6a:ee:
7a:37:35:26:1f:73:97:31:99:35:aa:eb:df:8f:c1:a3:a5:0c:
0d:a2:74:82:25:fd:f1:2b:7d:e5:85:c3:8f:79:81:84:14:00:
21:d3:d7:1c:82:30:0b:66:46:c9:c3:53:e4:07:f8:db:f0:fd:
3e:19:2f:ef:5f:4b:b0:16:3c:99:49:93:20:7f:9f:26:ca:14:
75:68:1c:e3:0e:3e:eb:24:0f:b6:13:6c:5a:7d:99:98:b9:39:
0b:f2:d7:6e:78:97:13:15:13:a4:94:a2:13:9e:dd:b8:6f:a6:
92:78:17:c7:40:25:c3:fb:a7:6d:f9:e2:33:21:04:f1:32:69:
92:56:1c:a5:6d:03:f9:04:27:cb:0c:16:1c:62:39:fb:ba:74:
f5:be:04:d5:1e:4b:10:be:73:dc:4a:ea:fe:10:04:99:6f:fd:
78:3d:1f:b8:81:af:db:90:cb:f7:fe:41:c6:9e:ef:b9:1a:fb:
48:79:14:7e:e2:78:aa:3e:5f:42:ae:48:42:9d:9c:ba:4f:e6:
93:44:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 02:56:54 2026 by rpki-client