Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149891.roa
File: AS149891.roa (raw, json)
Hash identifier: EwNMjU8snNJZ2YdElqoQuQHPenbnn2ioypdFj5yDDFg=
Subject key identifier: 55:FF:A2:1E:0A:F6:B4:84:93:B1:D7:37:36:8C:01:C8:60:54:69:8A
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 16A4F7B2409140845A7E5BE337DEA072DB55095D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149891.roa
Signing time: Mon 27 Apr 2026 09:00:00 +0000
ROA not before: Mon 27 Apr 2026 08:55:00 +0000
ROA not after: Mon 26 Apr 2027 09:00:00 +0000
asID: 149891
IP address blocks: 103.190.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a4:f7:b2:40:91:40:84:5a:7e:5b:e3:37:de:a0:72:db:55:09:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 27 08:55:00 2026 GMT
Not After : Apr 26 09:00:00 2027 GMT
Subject: CN=55FFA21E0AF6B48493B1D737368C01C86054698A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:da:84:ca:6c:82:4f:87:06:7e:54:27:1d:
61:c6:91:57:40:df:c6:5d:d3:cb:d9:e7:2c:40:bd:
d9:58:46:c8:7a:88:c4:39:d0:d9:64:d7:22:be:9d:
3e:ea:4f:0d:2a:73:5f:3f:d7:9a:c0:c2:8b:19:17:
58:ca:fe:72:65:db:5e:35:11:4f:04:bc:2b:be:91:
f1:87:93:d3:2c:1b:95:a4:d2:23:4e:52:db:47:09:
a8:d4:01:3d:ee:a2:70:ea:68:31:fb:70:cb:95:9d:
2b:f0:e8:06:20:58:a2:3e:b8:a5:6e:97:c4:4b:33:
77:0d:29:8c:96:0a:ec:56:4c:9d:0d:41:1e:40:7b:
53:2d:59:4e:01:30:5b:e6:2a:8d:f4:9b:33:6b:42:
ea:98:97:3a:d9:91:55:d0:64:01:0e:d2:87:2e:48:
ae:1c:02:9b:b9:97:6d:84:23:23:e3:b1:b9:fc:54:
1c:43:1c:b4:58:8b:d9:a5:81:83:ab:69:83:01:c4:
16:2e:55:79:5c:c1:85:0e:a3:e8:ea:30:cc:73:7f:
d2:58:12:aa:75:cb:31:5c:f9:d4:d6:76:87:83:58:
76:9c:e9:c4:c5:7e:ef:ce:87:f3:74:e8:d3:1e:70:
82:1f:2b:4a:8e:a6:66:e3:18:6a:2c:81:4b:88:3a:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:A2:1E:0A:F6:B4:84:93:B1:D7:37:36:8C:01:C8:60:54:69:8A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149891.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.30.0/23
Signature Algorithm: sha256WithRSAEncryption
01:79:5a:f4:f7:58:bc:c5:35:46:87:dd:7b:99:e6:a1:8e:64:
86:f8:b9:3e:86:6a:39:07:54:f0:47:5f:44:1a:0e:65:f4:70:
e2:91:57:eb:61:ee:c3:2c:25:ad:d0:aa:73:10:67:6e:9e:1c:
34:08:84:f2:a5:d4:a2:23:3e:a7:d1:90:c2:f8:ef:86:97:4f:
ab:9f:94:a3:e1:59:6f:da:8c:a0:b2:10:ee:15:f5:dc:29:0c:
8b:e5:ab:c3:bd:11:8a:9a:0f:98:c9:d8:e0:ae:62:7e:81:7f:
bb:c1:3c:4e:6f:31:cb:ae:57:c8:b3:09:27:84:3a:64:3d:6a:
07:87:c3:75:13:52:3f:cb:e7:b3:9f:5f:ab:ca:0b:3d:28:52:
ad:61:f7:af:a0:6b:04:89:d6:1a:0a:56:eb:96:70:40:16:eb:
98:46:11:d9:d7:82:d5:93:0c:77:5c:73:9b:22:5d:ca:b9:2b:
b2:21:58:08:b8:32:0d:54:8a:44:eb:7c:a2:09:9c:cc:1d:d6:
f9:0a:d7:e9:94:5d:ff:30:df:a8:4a:4c:7d:03:96:2c:19:d5:
ec:b4:f1:60:6e:41:0d:3e:fc:08:5f:2e:6e:af:ce:62:3a:e4:
87:77:14:7b:f4:8c:b9:e7:88:44:05:87:dd:be:10:90:a6:fc:
cd:3f:28:90
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUFqT3skCRQIRaflvjN96gcttVCV0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyNzA4NTUwMFoX
DTI3MDQyNjA5MDAwMFowMzExMC8GA1UEAxMoNTVGRkEyMUUwQUY2QjQ4NDkzQjFE
NzM3MzY4QzAxQzg2MDU0Njk4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALuv2oTKbIJPhwZ+VCcdYcaRV0Dfxl3Ty9nnLEC92VhGyHqIxDnQ2WTXIr6d
PupPDSpzXz/XmsDCixkXWMr+cmXbXjURTwS8K76R8YeT0ywblaTSI05S20cJqNQB
Pe6icOpoMftwy5WdK/DoBiBYoj64pW6XxEszdw0pjJYK7FZMnQ1BHkB7Uy1ZTgEw
W+YqjfSbM2tC6piXOtmRVdBkAQ7Shy5IrhwCm7mXbYQjI+OxufxUHEMctFiL2aWB
g6tpgwHEFi5VeVzBhQ6j6OowzHN/0lgSqnXLMVz51NZ2h4NYdpzpxMV+786H83To
0x5wgh8rSo6mZuMYaiyBS4g6ywcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRV/6Ie
Cva0hJOx1zc2jAHIYFRpijAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTg5MS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWe+HjANBgkqhkiG9w0BAQsFAAOCAQEAAXla9PdYvMU1Rofde5nm
oY5khvi5PoZqOQdU8EdfRBoOZfRw4pFX62HuwywlrdCqcxBnbp4cNAiE8qXUoiM+
p9GQwvjvhpdPq5+Uo+FZb9qMoLIQ7hX13CkMi+Wrw70RipoPmMnY4K5ifoF/u8E8
Tm8xy65XyLMJJ4Q6ZD1qB4fDdRNSP8vns59fq8oLPShSrWH3r6BrBInWGgpW65Zw
QBbrmEYR2deC1ZMMd1xzmyJdyrkrsiFYCLgyDVSKROt8ogmczB3W+QrX6ZRd/zDf
qEpMfQOWLBnV7LTxYG5BDT78CF8ubq/OYjrkh3cUe/SMueeIRAWH3b4QkKb8zT8o
kA==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:00:12 2026 by rpki-client