Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150191.roa
File: AS150191.roa (raw, json)
Hash identifier: uwbErbjSP1YEtZ3G8HG8ZYReymmthzjW89YwopN/AZo=
Subject key identifier: B6:0A:B1:49:07:4E:0D:5D:AE:12:32:33:F9:14:35:86:4E:84:BF:6F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5BD0E61A3B9FD62DF5765D03DA0B3C7ED6444628
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150191.roa
Signing time: Tue 21 Apr 2026 07:00:00 +0000
ROA not before: Tue 21 Apr 2026 06:55:00 +0000
ROA not after: Tue 20 Apr 2027 07:00:00 +0000
asID: 150191
IP address blocks: 103.152.21.0/24 maxlen: 24
2001:df2:5dc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d0:e6:1a:3b:9f:d6:2d:f5:76:5d:03:da:0b:3c:7e:d6:44:46:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 21 06:55:00 2026 GMT
Not After : Apr 20 07:00:00 2027 GMT
Subject: CN=B60AB149074E0D5DAE123233F91435864E84BF6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:96:1e:48:60:2f:30:32:6c:50:9c:db:bb:
c2:d7:92:25:67:7b:f9:04:4a:05:98:2e:84:65:d1:
cc:a7:11:be:f6:08:e8:f3:1a:3c:0a:9f:79:5d:ae:
ff:79:b9:b3:ed:fd:88:25:b8:b7:ef:73:a4:aa:3d:
0b:53:d2:e5:9e:82:d3:88:82:58:4c:2c:b8:b5:7f:
c1:f3:06:ba:f9:87:ba:25:38:05:06:1c:bf:f1:3d:
9f:51:d3:be:1c:17:47:df:be:0c:a5:2c:0f:8b:3e:
76:6e:00:09:22:20:84:fd:25:f2:3b:10:19:bf:b3:
5b:7d:94:d7:3e:2f:c9:58:65:9e:e7:9f:ce:15:c9:
97:f7:2c:f5:49:72:bb:0e:15:c2:14:24:50:c5:80:
7c:1d:bb:15:c2:ce:d5:92:37:11:a4:ac:5c:d6:4d:
85:0c:6f:d9:c4:0e:13:62:5c:58:44:21:fe:75:5f:
0e:8e:e1:d9:2d:b3:0e:32:8d:bf:0c:3a:73:71:a1:
07:6c:a9:6b:df:0e:21:76:da:09:d8:25:69:32:aa:
34:82:ee:18:4d:e2:43:c3:c1:41:57:46:72:f1:35:
81:c8:3c:fa:a8:65:ae:ef:10:a2:88:72:dd:1a:d7:
4b:88:d0:d8:d1:4b:48:aa:e2:e2:9e:e8:9b:65:f7:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0A:B1:49:07:4E:0D:5D:AE:12:32:33:F9:14:35:86:4E:84:BF:6F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.21.0/24
IPv6:
2001:df2:5dc0::/48
Signature Algorithm: sha256WithRSAEncryption
50:a8:00:5e:5e:26:b7:e0:9d:20:93:01:a0:e3:90:fd:89:6a:
df:84:52:8d:64:30:16:8f:28:09:94:9e:e1:58:11:46:31:12:
b7:46:de:8f:b4:a1:32:21:b5:64:62:fe:e1:e3:94:b6:08:bf:
f7:4c:97:9e:25:22:f4:c5:40:e7:2b:a4:6b:c0:60:da:80:40:
a9:07:98:42:7f:62:b3:5a:7d:5e:28:1d:23:fc:97:69:f6:20:
77:c3:4d:7b:a1:90:4f:5d:8f:4f:ff:e4:51:80:4f:4e:9a:8f:
7f:56:89:a7:b0:2e:98:b5:55:aa:95:50:94:cd:f8:38:4b:a8:
33:91:16:8d:8e:66:91:4f:6a:54:02:ac:5c:2a:2b:2b:e7:f1:
68:72:e0:ac:ea:58:33:f4:96:e1:fb:bb:96:9e:84:83:2a:d6:
a4:c7:52:ff:c0:3f:c7:18:73:53:46:e1:63:08:5e:83:79:c0:
97:30:81:e4:0f:ea:e1:80:26:19:42:16:3b:b6:be:8e:b2:1c:
2b:2f:0e:f9:2f:12:42:3b:43:fe:e4:5b:c0:77:c4:99:48:aa:
8d:e8:e8:c2:1c:74:2b:08:5e:a0:f8:d8:f8:67:4a:82:95:e0:
1c:57:1d:0b:cb:f0:66:af:d2:3f:79:80:07:11:0f:63:e9:95:
14:53:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:43 2026 by rpki-client