Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149920.roa
File: AS149920.roa (raw, json)
Hash identifier: 4C2C72nZCBr1I0ycYBBFis6OBPgylR4FUePGQermdbs=
Subject key identifier: 06:4D:DF:39:0D:C1:16:19:32:28:41:C0:19:31:00:C0:E9:36:66:F3
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 32BD5AF9D07E3EA96613A26304A0BAC2DC07AE3A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149920.roa
Signing time: Fri 24 Apr 2026 07:00:00 +0000
ROA not before: Fri 24 Apr 2026 06:55:00 +0000
ROA not after: Fri 23 Apr 2027 07:00:00 +0000
asID: 149920
IP address blocks: 103.161.1.0/24 maxlen: 24
2001:df1:3940::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:bd:5a:f9:d0:7e:3e:a9:66:13:a2:63:04:a0:ba:c2:dc:07:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 24 06:55:00 2026 GMT
Not After : Apr 23 07:00:00 2027 GMT
Subject: CN=064DDF390DC11619322841C0193100C0E93666F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:62:2e:9c:a1:20:42:90:44:bd:fa:95:f6:
de:e3:65:ff:5c:f6:20:10:de:97:73:09:a5:26:f2:
b3:93:34:b1:13:b1:4e:a5:99:5b:04:cc:ba:bd:95:
c5:70:82:1b:89:11:0f:70:2f:a0:f4:f7:dc:23:77:
69:88:f6:77:59:96:44:b2:d7:b1:ee:61:c7:15:f7:
b5:cb:59:e0:7b:45:64:dd:d6:b2:fa:e8:d1:01:78:
c6:0d:0a:c1:d0:4f:fe:87:b0:92:08:6c:55:67:a5:
a8:46:58:be:f4:3b:39:5e:45:21:c2:3c:a5:44:59:
2f:4b:05:cf:9e:8b:4f:f8:7c:1e:ed:26:93:4c:ad:
00:24:c9:97:ec:eb:97:28:90:0b:71:32:05:98:52:
83:db:e8:66:b3:6f:5e:92:f9:10:bf:df:ad:5e:96:
c6:3a:a0:a4:bd:3a:d4:b1:b3:d6:4b:71:b8:e9:6c:
56:ca:1f:01:48:26:4c:d4:b3:db:d9:fa:dd:37:59:
6e:22:16:fe:d5:33:33:cf:35:39:61:fa:fe:20:4f:
bf:06:7b:e5:13:1d:fa:8a:03:9a:b2:2e:a6:05:41:
b7:7d:e1:d4:3a:cd:32:6d:78:18:77:79:68:f4:76:
a7:6d:59:a9:46:09:8a:31:64:20:8e:c1:56:49:02:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4D:DF:39:0D:C1:16:19:32:28:41:C0:19:31:00:C0:E9:36:66:F3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149920.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.1.0/24
IPv6:
2001:df1:3940::/48
Signature Algorithm: sha256WithRSAEncryption
53:fc:f4:f1:98:49:78:fd:ce:7d:2d:b2:34:ec:e5:0e:ab:de:
20:5c:d2:b2:d6:66:43:5b:8b:e7:10:80:8a:c0:61:e0:e4:14:
2a:d1:4a:7d:5e:2a:00:45:b1:9a:76:a3:6c:f2:1f:e7:61:18:
99:40:71:ea:d4:37:21:0b:9f:2b:fe:4b:b0:79:20:14:0e:b6:
7e:8d:f0:08:5c:1d:a2:01:ed:a1:1a:5f:8b:78:f1:40:70:01:
ce:59:7a:7b:05:f8:87:87:03:04:98:0d:6a:68:88:ad:a5:c2:
58:c3:21:11:6a:45:5a:68:11:d7:d7:06:af:d7:e7:53:04:80:
87:bc:c4:c7:62:b6:cd:b4:c1:f0:27:94:8c:2c:1c:da:1a:78:
40:55:0f:f5:da:c3:61:81:9b:92:d8:a9:38:74:ad:21:6c:27:
d2:9a:b9:ce:87:34:6f:22:91:7b:24:30:d3:5d:0c:cc:fd:38:
c8:3e:bf:4e:14:df:fd:73:52:77:fd:16:a0:6c:7c:a2:e9:79:
c4:ef:4f:71:37:f3:26:29:fc:aa:72:30:6b:19:cf:b0:d2:06:
4f:3d:56:0d:82:b3:5a:68:3f:a8:e8:66:fa:7d:28:97:57:3e:
28:27:d2:88:ae:b8:5d:a5:21:61:25:f7:2b:eb:41:40:d6:cb:
53:69:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:47 2026 by rpki-client