Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139233.roa
File:                     AS139233.roa (raw, json)
Hash identifier:          UZujMrPV9FPlr+k6mvTL/GxCy3kaULQiZNeyGlaAyWA=
Subject key identifier:   08:E4:1E:6C:55:05:63:35:F2:57:93:EE:F4:A4:58:AF:04:45:7A:CA
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       403337D57E978E9CA92CB4F761406CE3954ED33E
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139233.roa
Signing time:             Mon 27 Apr 2026 02:51:39 +0000
ROA not before:           Mon 27 Apr 2026 02:46:39 +0000
ROA not after:            Mon 26 Apr 2027 02:51:39 +0000
asID:                     139233
IP address blocks:        162.4.30.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:33:37:d5:7e:97:8e:9c:a9:2c:b4:f7:61:40:6c:e3:95:4e:d3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Apr 27 02:46:39 2026 GMT
            Not After : Apr 26 02:51:39 2027 GMT
        Subject: CN=08E41E6C55056335F25793EEF4A458AF04457ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:e0:c7:bd:bd:7a:d0:71:0c:5d:67:8d:32:
                    f4:f2:fb:d4:c9:d4:4f:d0:73:37:00:cd:ed:3b:0b:
                    32:b0:9e:15:b9:c3:36:c0:59:7b:71:d4:45:54:3f:
                    7e:39:ae:a4:e3:b3:41:eb:e5:2e:35:6b:be:bd:2b:
                    a9:42:e4:e1:2f:76:a1:6c:6d:2a:d9:3f:23:ca:b4:
                    23:b8:46:c2:3d:1b:69:e7:26:c8:50:ce:04:4b:6f:
                    80:ed:73:4d:bd:99:43:5b:46:d9:da:0f:60:a9:a5:
                    95:20:73:84:56:7a:86:b0:3b:c4:35:b9:5f:a2:b9:
                    f0:f2:4c:82:fe:72:58:51:97:6c:ef:92:47:13:14:
                    06:62:2a:f5:42:a0:f4:6c:db:a7:90:10:93:ed:1f:
                    b1:c6:cb:27:c7:92:c4:5c:01:d9:45:df:02:99:58:
                    19:33:cb:41:ff:fb:9b:fe:a6:5c:7b:00:18:00:9d:
                    d1:16:eb:aa:b6:77:66:3f:4d:36:33:65:d1:7c:72:
                    ef:eb:5c:85:b2:60:6d:07:8c:00:d9:c1:be:60:8c:
                    76:11:81:8d:6b:7f:74:0e:20:36:c6:98:ea:3f:25:
                    e2:29:f6:e9:35:3e:64:41:ab:6a:fa:08:2c:c3:93:
                    63:a5:f5:a1:f3:37:4d:fb:3c:2a:df:af:38:a9:03:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E4:1E:6C:55:05:63:35:F2:57:93:EE:F4:A4:58:AF:04:45:7A:CA
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:5a:ea:27:5f:5b:21:65:ed:cc:ca:43:6c:84:2d:19:06:
         f4:3e:ad:ac:f1:1b:74:f4:59:e3:51:7e:e6:2c:58:27:84:d2:
         29:ab:67:e6:61:c1:6a:b7:56:80:ff:89:c2:3d:ee:01:36:ae:
         bb:ff:a6:ee:ed:70:9b:59:c7:0a:c2:52:da:dc:c3:46:ef:e0:
         76:e0:73:21:d9:83:e5:50:c9:db:0f:21:81:17:11:db:09:e5:
         70:24:ea:e2:f2:a0:bd:b8:e6:fe:a4:e5:57:9d:2f:94:7c:f3:
         eb:d4:32:78:ae:43:d0:98:ba:90:22:f6:5a:2c:78:4b:2e:fe:
         d8:88:a7:cc:68:0d:ac:35:41:af:e6:80:b8:48:13:0a:b3:75:
         34:7a:f8:12:c4:20:e6:71:40:78:59:1f:ed:8b:a3:59:bb:ba:
         f0:28:f9:9e:8e:53:17:8e:66:14:7a:f6:54:17:8c:7a:dc:15:
         88:11:19:65:74:04:8f:d7:4e:4b:8e:29:87:ca:45:f7:a1:42:
         f6:4e:a5:e3:ee:5d:0b:7d:45:0f:ed:38:3e:63:c9:7c:10:9f:
         f5:8c:a2:eb:fa:29:36:f0:4d:35:7f:20:6e:b7:98:23:76:ee:
         fd:5b:7f:aa:62:28:6c:90:89:e2:84:59:e8:5f:e3:67:79:fa:
         51:cc:9a:28
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUQDM31X6XjpypLLT3YUBs45VO0z4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQyNzAyNDYzOVoX
DTI3MDQyNjAyNTEzOVowMzExMC8GA1UEAxMoMDhFNDFFNkM1NTA1NjMzNUYyNTc5
M0VFRjRBNDU4QUYwNDQ1N0FDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANso4Me9vXrQcQxdZ40y9PL71MnUT9BzNwDN7TsLMrCeFbnDNsBZe3HURVQ/
fjmupOOzQevlLjVrvr0rqULk4S92oWxtKtk/I8q0I7hGwj0baecmyFDOBEtvgO1z
Tb2ZQ1tG2doPYKmllSBzhFZ6hrA7xDW5X6K58PJMgv5yWFGXbO+SRxMUBmIq9UKg
9Gzbp5AQk+0fscbLJ8eSxFwB2UXfAplYGTPLQf/7m/6mXHsAGACd0RbrqrZ3Zj9N
NjNl0Xxy7+tchbJgbQeMANnBvmCMdhGBjWt/dA4gNsaY6j8l4in26TU+ZEGravoI
LMOTY6X1ofM3Tfs8Kt+vOKkDTTMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQI5B5s
VQVjNfJXk+70pFivBEV6yjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzOTIzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaIEHjANBgkqhkiG9w0BAQsFAAOCAQEAPqpa6idfWyFl7czKQ2yE
LRkG9D6trPEbdPRZ41F+5ixYJ4TSKatn5mHBardWgP+Jwj3uATauu/+m7u1wm1nH
CsJS2tzDRu/gduBzIdmD5VDJ2w8hgRcR2wnlcCTq4vKgvbjm/qTlV50vlHzz69Qy
eK5D0Ji6kCL2Wix4Sy7+2IinzGgNrDVBr+aAuEgTCrN1NHr4EsQg5nFAeFkf7Yuj
Wbu68Cj5no5TF45mFHr2VBeMetwViBEZZXQEj9dOS44ph8pF96FC9k6l4+5dC31F
D+04PmPJfBCf9Yyi6/opNvBNNX8gbreYI3bu/Vt/qmIobJCJ4oRZ6F/jZ3n6Ucya
KA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 02:52:26 2026 by rpki-client