Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154734.roa
File: AS154734.roa (raw, json)
Hash identifier: ve3K9KAUhDmJgpeyocOZ0C4crn9Xkx+15Xf4JrMO+CU=
Subject key identifier: 1C:77:5A:A9:87:54:25:8B:16:12:0B:6D:6C:05:55:E7:E4:DF:98:45
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 63BD1F57051BF6A042B03F749582F1E528BE8243
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154734.roa
Signing time: Thu 29 Oct 2026 07:08:32 +0000
ROA not before: Thu 29 Oct 2026 07:03:32 +0000
ROA not after: Thu 28 Oct 2027 07:08:32 +0000
asID: 154734
IP address blocks: 2001:df7:29c0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bd:1f:57:05:1b:f6:a0:42:b0:3f:74:95:82:f1:e5:28:be:82:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Oct 29 07:03:32 2026 GMT
Not After : Oct 28 07:08:32 2027 GMT
Subject: CN=1C775AA98754258B16120B6D6C0555E7E4DF9845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:92:a3:aa:59:c4:4e:b2:57:45:83:3b:eb:
08:a8:98:29:a0:60:7e:a1:9e:72:7a:02:d3:e5:22:
15:56:ad:ab:d3:2c:09:de:97:e7:1c:29:3f:b8:89:
48:f8:a0:ea:b0:84:13:4e:45:d6:9a:af:7a:9e:a3:
2b:96:42:b8:da:e9:04:ee:b4:26:0a:99:fd:17:52:
28:03:f6:79:39:8d:ff:5e:f3:12:64:b1:2c:f9:a7:
22:d0:37:8c:38:3d:85:39:f2:8d:e1:7a:ef:02:a9:
63:3f:ef:be:40:dd:bd:e8:87:50:cd:ac:2f:77:c2:
67:b1:32:99:3f:b6:6d:f6:17:b3:d8:48:1c:35:c2:
8c:bb:3f:a9:4f:9b:c0:47:01:d4:f5:a4:21:82:73:
03:8f:18:e9:52:78:9a:60:68:56:93:03:38:e3:4c:
af:48:5a:ae:ce:88:56:6e:b1:2c:8a:f4:95:12:1b:
a8:70:5d:7d:69:6a:68:97:ca:7c:42:69:b2:63:12:
93:86:4b:aa:e9:1d:4a:57:72:ec:5e:68:11:9e:41:
3c:f3:3f:e6:51:bd:af:3a:6f:89:54:02:6b:f9:db:
40:32:92:ad:51:1f:78:ad:4c:1c:f1:52:8f:3c:c8:
98:17:75:b0:83:29:90:21:73:78:f3:e4:1e:93:4a:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:5A:A9:87:54:25:8B:16:12:0B:6D:6C:05:55:E7:E4:DF:98:45
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:29c0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:81:bb:99:2b:37:a3:21:b7:a2:52:e2:b5:4b:22:79:0f:1b:
4f:b3:e5:04:47:a2:8f:71:19:84:ec:d2:7b:b7:62:ce:6b:47:
a2:06:6f:6c:5f:7b:6a:43:78:f0:f1:b1:e2:60:9a:d8:4a:b4:
23:52:26:1c:ea:2c:07:04:5e:95:50:ca:d1:73:a1:8b:28:23:
ef:92:c0:51:fc:b3:cc:f2:0a:f4:08:2a:2a:a5:51:14:85:a4:
cc:bc:eb:0e:b9:bb:82:1e:4f:3b:0f:c3:5a:17:53:d4:af:9d:
4d:78:f8:65:15:89:a7:a8:74:b9:34:63:8b:55:75:a4:d0:ed:
a5:6b:1e:d7:ad:a1:f6:60:77:91:34:e4:81:0a:91:2b:b4:36:
8a:d6:0b:d3:72:a6:8f:3d:29:ce:0d:3d:66:f4:34:72:a9:a8:
c5:69:e7:39:1c:95:1c:03:6e:7d:37:39:74:29:8a:aa:84:9d:
56:0a:75:3e:0b:1a:90:e5:bb:70:27:ad:3d:88:36:4a:2c:29:
6b:6c:42:dd:30:ea:ed:91:c0:a7:41:b9:d5:9b:66:10:e1:3e:
45:58:cf:62:ee:2e:67:5c:c4:f6:03:cc:3e:c9:28:11:b2:9d:
21:36:ad:3f:b3:d5:5d:1a:38:87:7f:e5:91:97:3e:3f:e4:1d:
f0:05:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 10:11:45 2026 by rpki-client