Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150186.roa
File:                     AS150186.roa (raw, json)
Hash identifier:          8vF8HQcGbOJPtPH/7HDnDtRbnE509POvhznZJOE0MaQ=
Subject key identifier:   1D:56:E6:28:63:BD:EC:5C:A0:6F:98:43:06:36:E2:42:A9:4A:15:06
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       145CCF6C9A74D6A9C66CE5CE209B54A49E9DEC8F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150186.roa
Signing time:             Fri 21 Mar 2025 05:00:00 +0000
ROA not before:           Fri 21 Mar 2025 04:55:00 +0000
ROA not after:            Fri 20 Mar 2026 05:00:00 +0000
asID:                     150186
IP address blocks:        103.146.144.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5c:cf:6c:9a:74:d6:a9:c6:6c:e5:ce:20:9b:54:a4:9e:9d:ec:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Mar 21 04:55:00 2025 GMT
            Not After : Mar 20 05:00:00 2026 GMT
        Subject: CN=1D56E62863BDEC5CA06F98430636E242A94A1506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:1c:a4:40:bc:ef:92:8a:13:3e:28:7f:24:
                    d3:34:f3:e8:bb:19:4e:f5:cd:fc:56:3f:fc:de:2e:
                    35:28:64:08:00:76:ea:8e:13:10:0d:6c:f8:f0:48:
                    36:39:c0:8a:fd:0f:8b:a9:81:d3:31:4a:b2:77:80:
                    23:f7:8b:c5:02:53:55:fa:23:34:38:d8:db:c1:40:
                    06:03:20:de:ba:31:b8:64:24:b5:0d:56:20:74:ff:
                    12:39:cd:63:91:15:e9:36:ff:d5:f3:0a:da:27:db:
                    74:93:68:3b:21:5c:42:fc:13:6f:c3:1e:02:6b:1d:
                    20:77:78:7e:0c:55:2b:b2:a6:69:d7:32:ae:dc:20:
                    2e:85:f7:9f:2c:41:f8:46:28:f8:b6:4a:10:fa:a0:
                    ec:04:d6:ee:30:58:ba:e6:2d:48:36:09:2d:d3:2a:
                    1a:6a:ba:a3:b4:09:4e:68:1d:21:2c:b4:55:8f:ef:
                    26:66:47:48:d2:53:2c:2f:a6:e9:20:90:e6:8f:9e:
                    af:0b:8d:97:dd:11:6f:43:fc:83:56:b3:ca:f6:38:
                    2c:f9:84:f9:a1:93:23:20:50:15:dc:5d:c2:26:32:
                    ba:e9:c1:c1:37:f7:0b:b1:49:61:b9:54:4b:ab:ea:
                    06:ce:1e:63:c5:1c:bb:4f:2f:c4:be:2e:c2:36:a3:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:56:E6:28:63:BD:EC:5C:A0:6F:98:43:06:36:E2:42:A9:4A:15:06
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:86:42:c6:f1:71:30:66:1d:13:5b:38:c2:fa:e6:bf:20:9b:
         a6:e3:c5:76:c0:2f:b3:63:9c:4b:37:50:3c:63:f4:82:03:6a:
         3c:fa:6e:a8:cb:54:cb:37:a4:34:19:c2:ca:93:c1:c0:06:c2:
         58:8d:f2:67:d2:08:9d:c2:f0:ee:87:2f:51:48:20:71:39:c2:
         2a:60:f4:8d:ad:57:93:75:f9:1e:73:d1:c6:23:ad:cf:1f:a1:
         30:3e:dd:e3:b0:e5:be:c5:b8:75:d3:42:c3:a5:e0:39:69:68:
         a6:c5:03:59:37:00:26:b3:52:83:f7:7b:d9:dc:b5:93:d1:89:
         4e:88:e3:46:35:cf:e2:c1:41:06:fa:96:59:80:45:0b:fd:8a:
         37:45:a3:f3:dd:b1:6f:fa:62:e4:d2:85:71:8b:89:41:ad:61:
         6f:fd:0b:22:af:50:6a:e4:a0:a4:30:2d:9c:13:d8:47:16:e4:
         9c:7c:a0:16:a0:f2:99:5b:b6:3a:b0:57:0d:18:23:d0:2a:60:
         96:40:97:20:d7:08:d7:9a:41:30:66:c8:13:e8:fc:fe:1f:97:
         a0:fb:7b:71:f9:b1:65:05:dd:a9:06:e2:b1:a1:96:52:fe:e2:
         0d:88:35:a5:d2:dc:b8:9b:d2:b6:ee:67:b4:fd:80:6e:e9:4a:
         33:e6:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:06 2025 by rpki-client