Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142427.roa
File:                     AS142427.roa (raw, json)
Hash identifier:          jEkIA3Qr6l4tYYHA/Lt2Oxj2HQdaf5O+7pPN0eLTjzU=
Subject key identifier:   65:2C:AA:C1:2F:A6:82:11:79:52:52:F2:57:78:C2:AC:E6:C0:83:2A
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       07950E34048FB84717BF62DE6B937BDA6F5F72FC
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142427.roa
Signing time:             Mon 27 Apr 2026 03:27:35 +0000
ROA not before:           Mon 27 Apr 2026 03:22:35 +0000
ROA not after:            Mon 26 Apr 2027 03:27:35 +0000
asID:                     142427
IP address blocks:        162.4.36.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:95:0e:34:04:8f:b8:47:17:bf:62:de:6b:93:7b:da:6f:5f:72:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Apr 27 03:22:35 2026 GMT
            Not After : Apr 26 03:27:35 2027 GMT
        Subject: CN=652CAAC12FA68211795252F25778C2ACE6C0832A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:b0:bf:20:76:d5:d1:db:de:1e:2d:16:63:
                    25:f5:84:ee:66:11:38:92:e1:e9:81:3d:f9:f9:bb:
                    d9:9f:5e:6b:28:3f:8e:e5:37:22:3e:00:70:3e:20:
                    3c:8f:fa:eb:da:91:3c:7a:d4:18:bf:03:83:bd:85:
                    07:87:8b:10:75:19:c2:fc:9a:8f:d8:1f:6e:08:62:
                    fd:26:83:a6:84:05:89:69:bb:23:2f:d8:84:07:df:
                    d3:46:c6:42:92:3a:b0:82:12:5c:21:20:52:ff:b7:
                    a3:c2:32:1d:a8:23:8b:fd:95:1d:b5:75:ff:1c:1e:
                    85:43:93:51:21:07:3a:6d:70:e4:10:5c:ff:0d:6b:
                    8e:02:37:4d:3c:ec:25:2d:91:d0:c5:84:e5:82:32:
                    87:e7:89:5c:2f:26:6b:90:9e:4c:a9:c4:13:7d:d8:
                    91:72:c1:03:d9:cd:0d:2e:73:59:94:18:02:a2:67:
                    6c:3a:45:5c:97:1b:56:c9:34:07:95:75:eb:49:63:
                    fa:55:05:6b:cd:13:a2:30:6a:81:55:c8:76:17:8d:
                    56:82:f3:fa:27:51:29:06:f7:6d:fb:a9:24:21:84:
                    06:bd:60:c3:dd:2b:de:bf:a9:59:e4:bc:af:16:6f:
                    82:a3:b3:01:9e:c1:73:aa:b6:6f:17:9f:60:26:9a:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2C:AA:C1:2F:A6:82:11:79:52:52:F2:57:78:C2:AC:E6:C0:83:2A
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:e5:d2:c4:80:ef:3a:ed:28:2a:94:38:c6:dc:0a:f0:de:
         60:f8:b3:21:7e:ed:3f:b5:f3:75:a0:ee:d6:a7:68:39:29:61:
         a5:a5:8a:2f:9b:8c:13:30:fe:e2:26:46:5f:98:d6:93:63:38:
         cc:08:63:48:4f:1e:9c:ee:79:85:5a:c2:f0:a6:df:20:df:2f:
         29:9e:1e:b5:d2:3a:ca:d9:28:a4:95:6d:20:b1:5e:da:bb:42:
         6d:42:20:c8:12:21:6b:9f:1b:78:1b:26:8a:39:fd:ed:32:49:
         5e:7f:17:01:ce:4a:73:31:5d:79:8b:23:76:9e:97:ff:bd:32:
         eb:c5:ab:53:4a:b4:46:ae:47:ef:63:bb:1c:98:c2:df:38:b9:
         fe:18:b2:c3:27:d0:0b:7a:5f:ee:96:bc:96:71:b3:3e:e5:a9:
         87:e3:0d:ba:87:03:74:d7:9b:7f:ec:83:09:73:22:47:91:99:
         76:5a:0b:a6:0f:5d:f6:5e:5e:e4:33:39:ea:48:f2:eb:63:fc:
         fb:9d:a5:08:ed:f1:44:cf:7f:1e:83:f7:0e:ef:83:ae:0c:a8:
         aa:1e:a9:95:00:62:ef:de:bd:3b:20:de:e2:dc:aa:bb:94:84:
         69:59:e1:fc:4b:a7:31:d4:01:c0:1a:6f:9e:b8:aa:1a:9c:00:
         ad:f1:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 02:52:26 2026 by rpki-client