Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151517.roa
File: AS151517.roa (raw, json)
Hash identifier: N5YDsWa8pN+vDPf2Ef6H/+y0cQzxHjOa5BRkQTWAxiY=
Subject key identifier: BD:30:A3:C7:11:CA:D8:E4:7B:67:15:3A:7E:97:67:14:01:8E:4A:B9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 65D96B1B11306E50957523F3B41BFD56094231EE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151517.roa
Signing time: Fri 24 Apr 2026 04:00:00 +0000
ROA not before: Fri 24 Apr 2026 03:55:00 +0000
ROA not after: Fri 23 Apr 2027 04:00:00 +0000
asID: 151517
IP address blocks: 103.235.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d9:6b:1b:11:30:6e:50:95:75:23:f3:b4:1b:fd:56:09:42:31:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 24 03:55:00 2026 GMT
Not After : Apr 23 04:00:00 2027 GMT
Subject: CN=BD30A3C711CAD8E47B67153A7E976714018E4AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:83:e8:26:67:6c:25:cc:6d:36:10:7d:66:
9d:49:21:8f:6b:60:53:ae:90:c5:a7:30:23:49:13:
4d:31:a5:82:4b:01:c7:db:74:03:04:3f:36:cf:30:
44:f0:7a:4b:02:1d:ef:b1:0e:d3:c0:e9:6e:ea:8f:
ff:92:c8:24:34:04:2f:96:bd:2a:2c:ab:d0:d6:33:
9b:37:b0:8e:13:50:64:c8:64:cf:f4:75:18:c1:37:
14:ad:a6:99:5a:96:2f:2e:a8:70:30:1b:43:dc:f0:
76:3a:d1:de:8a:a2:36:db:95:76:08:91:be:b3:8a:
84:f4:66:fd:9c:c1:6b:6d:5d:f4:b4:bc:e8:8d:2d:
bc:35:43:d6:e3:ff:e0:d4:59:99:9e:84:6c:05:4e:
10:10:d9:1a:ff:18:d3:a4:bf:7a:9c:a6:35:65:e0:
26:9a:c2:1e:47:69:60:9d:a6:58:d2:a2:87:0b:4f:
0b:ab:bd:81:7a:8f:3e:f2:69:e7:53:6b:2e:a7:f8:
76:42:72:f6:fe:70:31:ee:8d:7d:e5:06:b3:4e:0e:
b9:9d:d9:ba:4f:a9:95:47:43:74:ea:4b:ef:ce:42:
28:ac:a5:97:bd:b4:44:40:ea:0a:b5:93:c2:41:da:
cd:ff:3c:0d:68:92:63:d1:3d:1a:43:35:13:03:54:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:A3:C7:11:CA:D8:E4:7B:67:15:3A:7E:97:67:14:01:8E:4A:B9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.181.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a1:2e:e5:0d:1d:b5:27:ad:a5:73:91:4a:2a:b4:c8:ab:e5:
80:9c:58:c2:ae:19:51:9f:89:58:8d:92:23:7c:84:62:89:1f:
8b:03:c8:98:f6:27:41:de:d3:23:84:4d:48:e2:3c:e0:d7:76:
6d:d1:21:79:a4:8b:1b:50:f8:a2:d5:be:d9:b7:eb:e7:5f:97:
b6:fd:7e:85:d4:a1:0a:81:18:87:ab:9e:8a:32:3e:d0:66:62:
81:da:33:69:83:94:cd:d2:9f:61:86:e5:18:7f:f9:bc:d8:bb:
ee:a3:47:92:ce:d7:6c:77:16:55:f3:04:59:c9:36:ae:10:b5:
78:d9:ac:e0:38:31:7f:8c:b5:9e:49:78:2c:b7:a3:16:df:0f:
b9:4f:8d:8b:b6:c7:be:5f:03:c9:ca:76:21:06:d0:f4:b4:8c:
2d:90:41:c3:e8:30:54:51:8c:63:1d:b4:83:74:d5:7f:ba:ae:
b8:be:17:83:70:f6:82:30:af:88:92:45:38:52:6a:10:f3:d6:
58:da:81:2b:20:ca:65:a6:64:1d:d8:f3:12:43:e5:5d:18:e5:
6e:6f:39:e8:a8:cf:2a:35:36:cf:e2:e8:69:41:53:3d:d2:09:
7f:98:37:50:17:a2:e8:96:02:48:2a:7a:35:bf:b3:2c:62:08:
e4:54:ab:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:37 2026 by rpki-client