Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150191.roa
File: AS150191.roa (raw, json)
Hash identifier: Y18JGxRo4Wxwr4GzogLl7RCCHTQwajwt84QtkwDVQmo=
Subject key identifier: 51:0E:81:0F:03:AA:96:0D:76:D7:A5:E9:A2:F0:F1:E9:61:DB:81:1F
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 4281B3F4386687FE8C6391F34852B31B7D20BBBE
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150191.roa
Signing time: Tue 02 Jun 2026 07:25:57 +0000
ROA not before: Tue 02 Jun 2026 07:20:57 +0000
ROA not after: Tue 01 Jun 2027 07:25:57 +0000
asID: 150191
IP address blocks: 103.44.19.0/24 maxlen: 24
103.119.236.0/23 maxlen: 24
103.152.21.0/24 maxlen: 24
103.255.109.0/24 maxlen: 24
2001:df2:5dc0::/48 maxlen: 48
2001:df2:fe40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:81:b3:f4:38:66:87:fe:8c:63:91:f3:48:52:b3:1b:7d:20:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 2 07:20:57 2026 GMT
Not After : Jun 1 07:25:57 2027 GMT
Subject: CN=510E810F03AA960D76D7A5E9A2F0F1E961DB811F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:df:b4:46:5f:30:d2:dd:58:0f:14:f6:e1:
cd:a3:04:d3:b4:ba:ec:40:96:e1:70:6b:89:65:bc:
5c:7e:e6:38:52:23:5a:f1:e9:79:3d:00:78:a5:8f:
80:3f:c5:87:c0:03:d2:55:3b:ac:e8:f4:36:98:eb:
1f:73:8a:29:9a:b0:a3:7c:4d:24:21:eb:bd:cf:eb:
1b:5e:3b:64:43:c1:ce:0b:e3:94:22:4c:4e:dd:ad:
8c:21:b6:27:92:ff:92:9c:22:26:d5:20:e4:61:44:
56:40:15:8b:20:48:78:12:24:e4:6a:75:73:17:e7:
33:7e:0c:13:1f:7e:c7:c4:c8:4b:75:c7:91:a0:84:
cb:84:dd:3a:8e:4d:b4:a8:95:7d:2c:59:d2:03:81:
c9:dc:4f:d9:ef:af:ac:8e:00:62:3f:90:4a:62:46:
e1:68:b0:90:97:1b:e6:be:7a:06:a4:a5:fa:2d:d6:
65:0f:25:dc:07:c7:6d:a9:05:64:0b:ac:b5:06:2d:
f5:61:8a:a7:3e:5b:3c:26:78:6b:7e:7b:5c:27:d0:
c6:f6:2d:b9:ab:ed:f0:f4:1b:1c:4c:09:37:3c:33:
86:9b:be:9b:b2:7f:fb:d5:b3:07:ac:ce:f6:a9:e7:
6a:cd:36:5d:23:73:01:9e:ba:bd:77:b8:f5:be:b8:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0E:81:0F:03:AA:96:0D:76:D7:A5:E9:A2:F0:F1:E9:61:DB:81:1F
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.19.0/24
103.119.236.0/23
103.152.21.0/24
103.255.109.0/24
IPv6:
2001:df2:5dc0::/48
2001:df2:fe40::/48
Signature Algorithm: sha256WithRSAEncryption
3d:a5:15:60:ca:ad:c3:2b:7b:49:d7:4b:f7:9e:1c:f0:eb:1e:
14:ba:a1:b7:1a:55:ae:3f:80:10:aa:cc:52:35:29:1e:41:8f:
cf:b2:71:a4:2e:77:01:d0:3a:b6:69:28:4f:a0:19:c1:9e:2d:
5a:71:8f:70:c4:61:8e:ac:f4:17:8f:24:16:c9:25:7d:a7:2a:
42:65:f3:52:a2:d0:4d:fc:f8:72:23:e8:15:8e:6b:14:d2:5f:
18:37:e7:35:19:1a:14:8f:bf:f1:68:27:9e:8a:ab:c8:75:b2:
7c:54:80:f8:ad:7d:c2:91:1d:21:23:ff:83:32:11:cb:dc:6d:
f8:85:07:7b:f9:e2:4d:79:d7:2d:61:7e:0c:7c:e4:8b:63:a0:
da:c2:86:cd:fd:34:74:59:dd:71:78:74:e3:38:7e:36:d5:5b:
c0:3a:d7:75:07:95:4e:18:4d:69:8d:ff:e7:7e:fe:ba:dd:5a:
f2:b9:6e:e7:7d:01:95:76:c0:cb:fe:95:93:33:06:66:4c:4a:
b5:26:7c:79:90:ac:c2:4f:1a:ac:94:b6:20:ed:94:07:fc:8c:
af:d7:ff:a6:4b:7c:a8:58:ec:76:b7:c4:d5:b9:eb:86:4b:00:
63:65:f9:01:89:9b:da:22:6d:08:59:ca:1e:1b:f2:d5:df:17:
b3:9f:31:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:24:26 2026 by rpki-client