Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149754.roa
File: AS149754.roa (raw, json)
Hash identifier: QtyKuzdDPiCYNz53cUQkKOJanAzHuwRPlpXL5JDAlPs=
Subject key identifier: AA:16:9B:77:43:6F:AB:1B:1E:45:DC:F7:1D:0F:64:A6:D3:E1:89:46
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 35FDE9D3F78AF2E0F51575265C2AB315AD1D8173
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149754.roa
Signing time: Wed 29 Apr 2026 10:00:00 +0000
ROA not before: Wed 29 Apr 2026 09:55:00 +0000
ROA not after: Wed 28 Apr 2027 10:00:00 +0000
asID: 149754
IP address blocks: 103.246.168.0/24 maxlen: 24
2001:df1:9fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:fd:e9:d3:f7:8a:f2:e0:f5:15:75:26:5c:2a:b3:15:ad:1d:81:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 29 09:55:00 2026 GMT
Not After : Apr 28 10:00:00 2027 GMT
Subject: CN=AA169B77436FAB1B1E45DCF71D0F64A6D3E18946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:35:a4:e4:f5:ea:2a:27:f9:0a:b5:00:b9:
5d:e9:8f:0e:c8:36:ca:8c:e0:38:a0:97:2b:79:a8:
06:bb:5f:80:3d:fb:2f:a9:79:07:ae:7e:04:81:3c:
ed:de:c8:4e:1f:66:41:87:68:cd:f1:10:d0:ea:82:
df:6f:ea:be:6f:ea:20:44:b4:03:7b:26:9d:50:54:
b5:fd:52:dd:c2:5b:78:03:0b:f8:33:ff:33:74:d7:
6e:b8:16:12:47:37:b2:d1:cd:32:7f:b9:91:6a:67:
b5:46:a3:a0:46:19:e2:51:2b:95:b9:33:1b:7a:3c:
b0:5b:94:31:20:3b:a3:2b:6f:de:0f:64:ec:cb:ca:
0f:92:28:08:61:e0:42:1b:ef:a3:5b:bd:7a:f9:b3:
dc:25:18:7c:c9:9a:59:e0:d5:5f:88:aa:9a:24:4c:
7b:ef:9c:af:f5:64:f2:03:d4:8b:56:2c:8a:e1:89:
45:7f:cf:10:6f:4c:4d:7c:29:61:86:c3:98:4d:e7:
03:9d:85:e8:71:f2:32:44:76:4a:3a:95:ce:51:77:
5d:e8:fa:ec:79:ab:fb:ae:f6:3d:19:5c:2b:33:89:
e3:95:4d:e0:94:11:91:d6:7d:d0:70:be:64:a9:2e:
e7:2c:6e:40:e5:ba:a3:dc:63:4c:16:58:3c:07:84:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:16:9B:77:43:6F:AB:1B:1E:45:DC:F7:1D:0F:64:A6:D3:E1:89:46
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.168.0/24
IPv6:
2001:df1:9fc0::/48
Signature Algorithm: sha256WithRSAEncryption
68:dd:1f:03:a0:91:2c:22:6d:80:36:44:1c:8f:dc:ed:54:6a:
e6:e8:6b:8b:28:58:ac:0f:de:f0:5f:ca:e1:53:7d:a7:c6:dd:
d7:fe:29:cd:0b:b8:93:8c:07:55:1b:98:b9:4e:17:b3:3e:9c:
96:bc:e6:9d:8b:ed:fb:43:97:e1:54:a5:2b:f6:06:e9:7d:30:
08:7d:24:eb:86:1a:cb:fb:54:a5:a0:e0:fe:2d:26:55:0c:ec:
91:4a:e1:5d:74:bf:c8:13:03:d8:50:c6:13:87:3d:91:39:30:
b3:89:a4:ac:c5:a7:03:53:f6:72:66:6a:e1:68:03:fe:2f:c9:
d3:18:09:53:b7:43:c3:94:a7:f9:72:8c:96:3a:6a:c2:e4:b8:
44:4c:cd:0a:8a:bc:31:32:2d:3d:3c:3b:90:6a:d7:a0:5e:bf:
bf:23:e7:73:6f:0e:79:17:99:df:5a:fd:56:97:6d:c7:91:c3:
77:56:c1:1f:23:17:78:6e:51:59:cb:dd:9e:8e:ad:e8:b1:43:
a5:1d:fb:c6:65:fa:f2:7b:8b:78:f5:7a:d6:ea:33:9d:10:6d:
dc:ea:79:d4:e2:f2:5d:12:12:e8:7d:e8:7a:a1:e8:45:66:4b:
16:d1:e1:96:37:b6:b4:81:5e:42:95:7e:d6:c1:eb:e1:8b:e5:
e3:91:f9:3e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUNf3p0/eK8uD1FXUmXCqzFa0dgXMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyOTA5NTUwMFoX
DTI3MDQyODEwMDAwMFowMzExMC8GA1UEAxMoQUExNjlCNzc0MzZGQUIxQjFFNDVE
Q0Y3MUQwRjY0QTZEM0UxODk0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMVCNaTk9eoqJ/kKtQC5XemPDsg2yozgOKCXK3moBrtfgD37L6l5B65+BIE8
7d7ITh9mQYdozfEQ0OqC32/qvm/qIES0A3smnVBUtf1S3cJbeAML+DP/M3TXbrgW
Ekc3stHNMn+5kWpntUajoEYZ4lErlbkzG3o8sFuUMSA7oytv3g9k7MvKD5IoCGHg
Qhvvo1u9evmz3CUYfMmaWeDVX4iqmiRMe++cr/Vk8gPUi1YsiuGJRX/PEG9MTXwp
YYbDmE3nA52F6HHyMkR2SjqVzlF3Xej67Hmr+672PRlcKzOJ45VN4JQRkdZ90HC+
ZKku5yxuQOW6o9xjTBZYPAeEzpECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSqFpt3
Q2+rGx5F3PcdD2Sm0+GJRjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTc1NC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAGf2qDAPBAIAAjAJAwcAIAEN8Z/AMA0GCSqGSIb3DQEBCwUAA4IB
AQBo3R8DoJEsIm2ANkQcj9ztVGrm6GuLKFisD97wX8rhU32nxt3X/inNC7iTjAdV
G5i5ThezPpyWvOadi+37Q5fhVKUr9gbpfTAIfSTrhhrL+1SloOD+LSZVDOyRSuFd
dL/IEwPYUMYThz2ROTCziaSsxacDU/ZyZmrhaAP+L8nTGAlTt0PDlKf5coyWOmrC
5LhETM0KirwxMi09PDuQategXr+/I+dzbw55F5nfWv1Wl23HkcN3VsEfIxd4blFZ
y92ejq3osUOlHfvGZfrye4t49XrW6jOdEG3c6nnU4vJdEhLofeh6oehFZksW0eGW
N7a0gV5ClX7Wwevhi+Xjkfk+
-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:26 2026 by rpki-client