Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149327.roa
File: AS149327.roa (raw, json)
Hash identifier: 3qIs/qJez+8cYgjaWcNDMldgAVi2rUDBziBogOZ54zU=
Subject key identifier: 38:48:1A:BD:68:4D:2A:71:C0:61:68:0F:6F:8E:EF:70:E9:B4:17:04
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 66CBA11A29977EFA60F00AF759A6D90C8CFC1698
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149327.roa
Signing time: Tue 21 Apr 2026 14:00:00 +0000
ROA not before: Tue 21 Apr 2026 13:55:00 +0000
ROA not after: Tue 20 Apr 2027 14:00:00 +0000
asID: 149327
IP address blocks: 103.174.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cb:a1:1a:29:97:7e:fa:60:f0:0a:f7:59:a6:d9:0c:8c:fc:16:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 21 13:55:00 2026 GMT
Not After : Apr 20 14:00:00 2027 GMT
Subject: CN=38481ABD684D2A71C061680F6F8EEF70E9B41704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:9d:ac:12:8b:65:a1:63:3d:e7:ad:c3:7f:
ff:35:bf:a4:ff:aa:be:98:61:90:f2:af:44:40:1b:
f7:16:b5:31:ad:74:fb:5a:a4:a0:c2:3b:99:61:91:
6d:17:b2:3e:41:85:97:72:3d:30:da:dc:56:6c:84:
70:71:65:f1:5a:7b:5c:db:b5:a5:97:05:a1:30:97:
27:62:99:41:b6:51:49:09:5c:6f:e8:b7:5f:e4:9e:
65:ce:99:61:c5:f5:1e:94:e8:46:53:30:78:f3:cd:
c0:5f:94:d5:6e:d3:a4:f9:64:bf:14:6f:32:a2:f3:
70:72:7f:a9:17:17:03:6b:dd:1a:cc:96:b2:a9:2d:
71:12:5f:13:be:8f:61:66:74:95:19:8d:b5:d7:40:
80:e7:80:2d:0b:e1:30:de:57:7c:30:c4:28:e9:8a:
9b:db:08:48:6f:07:04:27:a5:44:25:a3:38:9d:3f:
b6:b3:93:b0:f9:be:b5:91:b6:f7:4d:16:68:d7:56:
5b:ac:74:98:62:b2:e6:b6:be:fb:9c:ad:5a:39:02:
77:3d:cd:e2:cd:95:40:6f:6c:61:2d:fe:67:92:8d:
51:61:03:76:00:26:39:91:5a:88:34:dc:31:67:ff:
56:99:c0:38:8b:e1:eb:8d:f0:78:2a:ba:17:0d:c1:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:1A:BD:68:4D:2A:71:C0:61:68:0F:6F:8E:EF:70:E9:B4:17:04
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149327.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.208.0/23
Signature Algorithm: sha256WithRSAEncryption
95:92:03:b6:db:d9:2a:8c:ce:5f:26:c8:96:3a:83:ec:80:90:
df:6d:30:88:9d:2d:90:9c:d0:4b:a3:58:91:fc:e4:54:41:87:
f9:94:0c:fd:d9:7f:a4:61:22:b4:19:5a:bf:1e:21:89:14:82:
79:b6:93:28:c4:6f:96:7b:19:ec:1c:2a:85:f5:5e:c4:98:4b:
c3:18:7b:48:60:1a:e5:e2:6d:97:8d:44:db:bc:d4:97:9a:1d:
6e:13:c2:92:14:6d:06:4b:2e:2f:0d:3c:7b:62:27:1f:36:22:
bc:fa:18:7a:b7:69:7b:ee:6b:b1:10:2f:5a:f9:7f:f8:fd:6b:
f5:51:ee:d5:46:6f:a2:73:5d:a3:3e:5a:b9:6c:bb:a9:ee:d8:
e1:4b:d8:d3:8c:65:a2:10:ca:39:c1:45:23:44:61:72:7c:4c:
db:90:35:9b:02:3d:20:0b:56:4c:61:79:3f:60:61:9f:ff:9a:
7e:a3:48:33:90:7c:4f:9c:82:7b:ca:05:f6:94:c5:9f:5f:27:
32:ff:bd:1a:1f:35:c4:a4:5e:d6:73:ec:6a:0e:64:f0:9a:00:
5a:ed:46:01:b4:c5:06:f0:ae:55:e3:26:b6:c7:cb:c0:82:5f:
0b:3b:0a:a5:bf:0b:b9:0c:e6:46:65:13:e5:a2:42:e9:fa:f4:
d2:fa:99:1b
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUZsuhGimXfvpg8Ar3WabZDIz8FpgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyMTEzNTUwMFoX
DTI3MDQyMDE0MDAwMFowMzExMC8GA1UEAxMoMzg0ODFBQkQ2ODREMkE3MUMwNjE2
ODBGNkY4RUVGNzBFOUI0MTcwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALynnawSi2WhYz3nrcN//zW/pP+qvphhkPKvREAb9xa1Ma10+1qkoMI7mWGR
bReyPkGFl3I9MNrcVmyEcHFl8Vp7XNu1pZcFoTCXJ2KZQbZRSQlcb+i3X+SeZc6Z
YcX1HpToRlMwePPNwF+U1W7TpPlkvxRvMqLzcHJ/qRcXA2vdGsyWsqktcRJfE76P
YWZ0lRmNtddAgOeALQvhMN5XfDDEKOmKm9sISG8HBCelRCWjOJ0/trOTsPm+tZG2
900WaNdWW6x0mGKy5ra++5ytWjkCdz3N4s2VQG9sYS3+Z5KNUWEDdgAmOZFaiDTc
MWf/VpnAOIvh643weCq6Fw3B5+8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ4SBq9
aE0qccBhaA9vju9w6bQXBDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTMyNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeu0DANBgkqhkiG9w0BAQsFAAOCAQEAlZIDttvZKozOXybIljqD
7ICQ320wiJ0tkJzQS6NYkfzkVEGH+ZQM/dl/pGEitBlavx4hiRSCebaTKMRvlnsZ
7BwqhfVexJhLwxh7SGAa5eJtl41E27zUl5odbhPCkhRtBksuLw08e2InHzYivPoY
erdpe+5rsRAvWvl/+P1r9VHu1UZvonNdoz5auWy7qe7Y4UvY04xlohDKOcFFI0Rh
cnxM25A1mwI9IAtWTGF5P2Bhn/+afqNIM5B8T5yCe8oF9pTFn18nMv+9Gh81xKRe
1nPsag5k8JoAWu1GAbTFBvCuVeMmtsfLwIJfCzsKpb8LuQzmRmUT5aJC6fr00vqZ
Gw==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:51 2026 by rpki-client