Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151507.roa
File:                     AS151507.roa (raw, json)
Hash identifier:          4loSdycd3VjdByo1sUv1clqP3ZIxwXaTrIUFm7Yh9hc=
Subject key identifier:   11:5D:B0:45:59:4B:91:A3:63:9E:58:17:77:EA:4C:E9:0C:84:F3:FB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6BF515CEC9C672E89F18537F5D56034946D33B88
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151507.roa
Signing time:             Mon 27 Apr 2026 07:00:00 +0000
ROA not before:           Mon 27 Apr 2026 06:55:00 +0000
ROA not after:            Mon 26 Apr 2027 07:00:00 +0000
asID:                     151507
IP address blocks:        103.234.28.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f5:15:ce:c9:c6:72:e8:9f:18:53:7f:5d:56:03:49:46:d3:3b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 06:55:00 2026 GMT
            Not After : Apr 26 07:00:00 2027 GMT
        Subject: CN=115DB045594B91A3639E581777EA4CE90C84F3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b8:3a:bd:f4:be:43:bc:e3:4a:c6:f6:55:3c:
                    fd:0b:ea:f2:fb:dc:a5:cd:ba:b8:3a:25:94:d3:ff:
                    42:53:04:49:ab:3c:6d:73:f8:a9:20:21:9b:79:42:
                    57:c7:9f:d7:3d:fc:55:68:c1:11:71:31:0b:2b:9b:
                    8f:82:bd:7b:a5:78:b4:3b:b0:96:3e:21:73:af:52:
                    12:9e:f6:8e:7f:7e:cf:81:f8:60:b3:11:03:10:ec:
                    67:02:19:93:3d:fc:38:23:f3:e5:21:ba:64:ea:2b:
                    3e:d7:25:59:70:63:b5:bf:33:1d:b1:01:f4:32:65:
                    08:6c:f3:33:89:71:19:8e:26:b2:ac:8c:71:45:5b:
                    e7:91:24:3a:01:4e:82:3c:ac:6a:d1:24:b5:0c:1f:
                    dd:67:3e:60:bd:2d:fc:15:9d:c0:17:e6:15:67:06:
                    0d:63:fb:dd:ec:ce:08:8c:7d:a2:d5:ab:cb:ac:b4:
                    b3:47:93:7a:ce:78:7a:bf:01:3c:0e:91:1e:2c:c6:
                    73:a8:7b:1d:40:03:89:57:a3:c1:f4:63:9d:a7:12:
                    e7:15:d1:70:e4:2b:89:2f:a4:cb:47:eb:09:d5:5c:
                    fb:dc:57:9c:91:03:2c:68:35:da:35:8e:f5:ef:92:
                    99:fa:6d:62:65:67:a3:0d:67:e7:62:e4:81:70:41:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5D:B0:45:59:4B:91:A3:63:9E:58:17:77:EA:4C:E9:0C:84:F3:FB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151507.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:80:da:19:8f:6f:1c:32:6a:c6:8a:79:39:a4:91:01:aa:
         35:41:f6:b7:e7:71:74:ea:e5:91:66:4d:a1:d1:d2:37:0d:e9:
         9e:d5:45:76:42:47:1d:a8:ac:bf:70:17:42:3e:e7:29:21:80:
         8a:06:a4:af:d3:aa:81:56:44:f6:64:b7:2c:6f:25:92:95:d4:
         7e:60:0f:6e:e8:41:ca:95:85:cb:10:be:01:6f:1a:63:12:96:
         ae:e5:df:a2:63:20:97:5a:5f:b1:b1:86:ab:5b:a4:fd:1f:b4:
         d1:96:09:13:8c:0e:35:b0:6d:15:27:ef:d3:b0:6a:6c:c9:e5:
         bb:ca:23:50:34:19:c5:0a:58:df:f5:f0:11:ef:0d:ae:a2:74:
         3a:d9:03:1a:9f:58:f7:da:a9:aa:cf:d4:b7:9f:24:fd:0c:c6:
         99:25:20:de:0b:cc:4a:8f:c2:ae:b5:f7:87:58:d8:45:fc:7b:
         ae:2b:7a:14:ac:d2:22:a5:25:82:83:de:f4:a4:f1:fc:7f:7e:
         89:05:36:b5:5b:10:63:98:3c:ec:6c:5e:79:8d:20:2d:8b:18:
         71:6c:cd:05:d0:e4:8a:ee:a9:82:f8:b9:84:05:31:6f:0c:72:
         68:8e:fe:52:b8:c8:70:92:cf:8f:49:cd:3a:4d:6c:d9:3d:56:
         ed:23:ee:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:28:30 2026 by rpki-client