Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150558.roa
File: AS150558.roa (raw, json)
Hash identifier: Azkm9uSpZY3t6tVlkOxtauQjkwv1u/ccvF+EBsf3TXc=
Subject key identifier: E8:99:DC:C7:3B:7A:A7:06:1E:5E:AC:C7:01:C3:46:C9:7D:3B:14:D3
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 09B24076794C930F1C540A75B5485E30F246CD73
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150558.roa
Signing time: Thu 23 Apr 2026 09:09:39 +0000
ROA not before: Thu 23 Apr 2026 09:04:39 +0000
ROA not after: Thu 22 Apr 2027 09:09:39 +0000
asID: 150558
IP address blocks: 103.86.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b2:40:76:79:4c:93:0f:1c:54:0a:75:b5:48:5e:30:f2:46:cd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 23 09:04:39 2026 GMT
Not After : Apr 22 09:09:39 2027 GMT
Subject: CN=E899DCC73B7AA7061E5EACC701C346C97D3B14D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:04:fd:7c:87:5b:54:d5:20:7e:bc:fd:9b:
9d:eb:df:b7:31:2d:eb:d4:db:2b:e6:58:a5:9e:fd:
fb:a5:47:95:78:96:c7:a5:22:b0:6f:49:63:99:83:
7b:f1:69:fa:b2:71:4a:90:18:5f:59:29:ef:c5:bd:
b3:f0:d2:46:29:38:1b:68:3d:99:43:17:53:48:18:
1c:df:d4:17:d0:ab:7a:bc:22:33:30:61:51:8c:0f:
46:1a:8b:c3:e0:5c:5c:fb:da:6e:a2:9e:f8:6f:c2:
29:08:c0:5b:16:46:e5:36:b8:72:e6:98:9d:cb:f7:
5e:42:65:4a:b9:33:90:ad:33:ea:d8:dc:e9:f9:11:
6d:a5:b3:c2:2c:22:ab:26:c8:0f:51:8d:d0:cc:54:
6f:ef:76:10:b5:a4:cd:c4:07:12:80:62:8a:7a:79:
29:2c:02:bb:28:db:58:0d:ae:ce:34:46:7d:63:c7:
1d:99:19:18:18:13:99:62:f3:02:98:64:56:b2:7b:
97:18:0a:c8:39:4d:ea:e2:1a:1f:fd:c7:00:bd:2d:
96:36:ef:9c:04:db:7a:b8:57:37:c8:73:64:58:15:
84:8f:2f:2e:1d:02:1b:89:db:39:f6:66:07:4f:d0:
d2:de:a1:05:13:71:53:df:ef:40:f0:2a:97:4a:02:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:DC:C7:3B:7A:A7:06:1E:5E:AC:C7:01:C3:46:C9:7D:3B:14:D3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150558.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.118.0/23
Signature Algorithm: sha256WithRSAEncryption
74:6c:99:55:e5:44:7e:02:46:b0:1d:4d:5d:ae:7f:b4:fb:b8:
1a:e6:12:fd:6d:1e:02:ce:dd:b7:e3:09:cb:80:4a:ba:01:b3:
11:5c:1d:4b:51:d1:57:3b:d0:b0:ce:e6:b7:dd:ec:6c:17:20:
58:27:bd:18:9e:cb:68:dd:b8:0c:59:c6:29:d1:a8:d3:a7:43:
08:f2:1f:5f:5d:7e:bf:7d:85:ef:eb:8d:da:c0:ba:da:38:0b:
75:81:25:bd:01:40:02:ad:e2:ea:0d:76:b8:02:fc:3f:0b:34:
5f:e1:1e:5d:ed:47:d7:56:e7:87:2f:6a:ed:80:80:88:32:0c:
a2:d7:c8:10:70:34:93:55:fd:31:e1:ae:74:b9:4a:0b:ee:cf:
be:7a:7e:a0:89:bd:1b:cf:7b:47:24:d7:19:a8:51:27:29:a0:
d7:06:35:4c:c4:26:e8:31:61:39:3e:c2:2f:aa:3b:77:88:1d:
e9:83:0e:f8:92:66:76:74:05:72:75:fa:9e:9c:c6:f0:cb:d0:
73:79:4a:f9:69:a0:c4:7c:f0:e5:a0:c3:65:16:5d:01:69:cf:
fd:ef:6b:1a:b4:af:14:7c:d6:c1:b5:fa:0e:99:43:4f:89:2f:
d5:9a:26:14:fd:e4:f1:2f:d3:55:ea:86:4c:72:12:f5:dc:6c:
43:30:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:31 2026 by rpki-client