Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149734.roa
File: AS149734.roa (raw, json)
Hash identifier: EMWTRQzv65lgohTH8/4QhYftJL75wK5n+1wtHDlr/WU=
Subject key identifier: 9C:E9:82:14:3F:DF:66:38:0E:55:5A:66:E6:ED:9B:EF:46:DD:01:DC
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 776A73B5340C78A2FE570FFD75D9FD5D974366C7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149734.roa
Signing time: Tue 28 Apr 2026 13:25:23 +0000
ROA not before: Tue 28 Apr 2026 13:20:23 +0000
ROA not after: Tue 27 Apr 2027 13:25:23 +0000
asID: 149734
IP address blocks: 103.188.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6a:73:b5:34:0c:78:a2:fe:57:0f:fd:75:d9:fd:5d:97:43:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 28 13:20:23 2026 GMT
Not After : Apr 27 13:25:23 2027 GMT
Subject: CN=9CE982143FDF66380E555A66E6ED9BEF46DD01DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:cf:82:a3:a4:71:7c:cd:e6:17:bf:60:35:
98:a1:af:5a:50:04:fd:22:d8:0b:eb:19:f3:70:1e:
5e:e8:4a:49:a6:6b:67:ac:bf:c1:08:59:71:72:fa:
dc:37:36:b3:36:85:7e:00:0e:46:52:26:50:2e:1c:
6a:09:73:a2:b5:8c:47:02:a7:fb:e3:2d:21:9b:06:
82:e1:bb:9d:2c:77:d1:0d:10:90:13:33:a7:4d:ea:
ba:3a:34:62:fd:e4:14:75:e5:97:4d:6b:cd:41:cb:
59:c6:e7:06:2b:8b:2a:b9:3f:8f:1b:2f:bf:7e:f7:
c1:1a:32:13:44:ea:39:75:98:b6:00:20:75:7c:47:
53:a6:c7:3f:cb:d8:6d:14:4e:af:ec:a9:84:74:29:
2a:b5:1f:f8:fd:9d:49:22:5a:6a:43:81:11:be:e2:
6f:4b:b0:56:35:8c:ff:04:06:86:10:88:83:5b:0d:
fd:4f:f0:73:50:14:6e:e9:9b:5e:20:d2:f6:4d:4d:
4e:33:0a:66:4d:d5:8d:5f:cc:c2:1b:4d:0e:a3:4b:
0b:6b:31:bf:84:fe:4c:b3:dd:e7:35:cb:44:b4:8d:
2a:93:75:af:62:19:42:6f:22:dc:31:5d:f1:a8:84:
58:9f:44:a6:7f:d3:e1:ff:5d:4c:c1:60:f2:1d:f5:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:82:14:3F:DF:66:38:0E:55:5A:66:E6:ED:9B:EF:46:DD:01:DC
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.176.0/23
Signature Algorithm: sha256WithRSAEncryption
86:00:c8:ba:19:cd:93:34:42:ac:00:1e:b1:d2:1f:84:a7:78:
46:a4:69:50:5a:1a:69:62:39:a5:45:42:93:43:3d:f0:39:60:
94:cc:e7:3e:8f:91:be:38:78:c3:da:b4:23:b1:19:50:52:22:
9e:10:49:9a:85:9c:c2:26:8f:e0:9c:1c:79:f3:61:4e:c6:e4:
c0:e9:07:fb:b2:f6:3c:41:d6:94:ba:98:86:4a:f0:c8:00:26:
12:dd:80:dc:09:9c:90:c9:bd:06:cd:2f:32:16:16:b3:54:44:
cb:47:af:72:28:18:ca:5b:cd:56:de:22:cc:f1:7a:1f:6a:59:
7d:ca:ac:8d:ac:07:00:40:a7:a0:18:f8:4a:da:5c:6b:3c:75:
16:4b:58:9a:77:2e:23:72:dc:8b:80:06:35:c5:3b:88:b5:9d:
95:87:3a:50:a7:d3:ee:98:24:a5:ea:51:a2:2a:22:b8:9d:51:
2e:4b:4b:9b:b3:08:bd:c7:4a:a4:5a:f7:b5:05:de:8e:a4:04:
a7:a9:33:64:f3:41:b6:0a:16:fd:56:b7:ff:dd:15:ba:52:57:
ee:c6:c7:bd:7e:06:7f:8f:07:15:32:00:65:fd:20:f0:03:55:
a6:f6:0b:b5:ba:28:8c:3e:fd:b8:da:12:d1:a5:52:84:1d:e4:
5b:c3:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:22 2026 by rpki-client