Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/3130332e36302e39302e302f32342d3234203d3e20313531353730.roa
File: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (raw, json)
Hash identifier: bMyGJW6OaGfThavWrQg+Vbkb2QXzMAx/beFwgmr/p4s=
Subject key identifier: 6E:2E:5B:2A:A0:12:D5:27:DD:0C:07:37:BC:A1:B4:E5:10:F7:47:A8
Certificate issuer: /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93
Certificate serial: 60F49DA7471D6F10010EEDF94D5DA8E07ABB675A
Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/3130332e36302e39302e302f32342d3234203d3e20313531353730.roa
Signing time: Sat 18 Apr 2026 23:00:02 +0000
ROA not before: Sat 18 Apr 2026 22:55:02 +0000
ROA not after: Sat 17 Apr 2027 23:00:02 +0000
asID: 151570
IP address blocks: 103.60.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f4:9d:a7:47:1d:6f:10:01:0e:ed:f9:4d:5d:a8:e0:7a:bb:67:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93
Validity
Not Before: Apr 18 22:55:02 2026 GMT
Not After : Apr 17 23:00:02 2027 GMT
Subject: CN=6E2E5B2AA012D527DD0C0737BCA1B4E510F747A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:33:56:c4:1d:6f:0c:f8:ab:93:f8:29:32:
54:0c:35:16:b9:b6:dc:a5:6c:f5:47:e5:17:d3:5b:
08:9e:35:29:fd:9d:50:19:8a:d2:70:8c:e5:5c:14:
5d:79:1b:28:3f:9d:03:60:1c:c3:e6:8d:a1:1a:fc:
16:3a:6b:69:da:7a:20:22:db:e4:f2:2e:77:c8:bb:
17:35:03:19:cf:ff:81:9c:fc:86:32:c7:f7:b1:58:
8c:0e:a4:c2:d6:19:0a:39:89:db:a8:8d:90:27:d8:
d6:ea:8c:21:15:cf:dd:a6:6e:0d:b6:ac:1a:e3:46:
3d:01:a3:67:9e:96:bd:89:b3:0f:1f:77:a3:d2:3f:
bf:a6:bc:3c:f9:2a:f7:82:bc:89:95:46:62:a4:5e:
31:32:15:4d:2a:1c:66:eb:89:ff:25:7e:3d:0d:bb:
bf:94:4a:6d:7e:cb:a0:a0:dc:df:23:df:96:6b:a4:
e1:be:30:ed:ee:9c:ca:de:63:17:d8:da:8e:7a:a0:
16:11:e2:14:e6:6a:71:2d:20:38:0a:b7:91:d6:1b:
d4:39:5c:bc:af:8e:6c:e4:c9:1d:d5:0a:42:e2:0a:
00:73:1b:d8:63:89:24:38:5b:d1:d4:71:16:83:46:
06:27:f4:1a:29:4b:f0:54:b9:e2:c7:d8:99:92:61:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2E:5B:2A:A0:12:D5:27:DD:0C:07:37:BC:A1:B4:E5:10:F7:47:A8
X509v3 Authority Key Identifier:
keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/3130332e36302e39302e302f32342d3234203d3e20313531353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3d:ad:c8:b9:da:25:cf:16:a4:b9:b1:09:7b:07:2d:33:cd:
52:da:e5:66:b1:75:6a:9c:70:fa:7f:ff:0b:d1:6f:8b:18:f8:
7d:10:45:60:bb:19:4f:9f:1d:52:bd:94:11:d3:fb:6d:85:49:
29:b9:c9:9d:27:a1:cb:e5:cb:4e:68:66:cc:68:2f:15:89:4c:
0a:0a:29:32:ee:a4:de:79:22:fa:37:87:76:29:0a:c9:68:97:
11:77:b7:2b:19:43:fb:b7:99:79:a0:b0:f2:77:f4:f1:30:52:
2d:49:ef:3d:82:01:6c:55:96:14:60:7e:11:0e:46:11:7b:25:
11:d9:a7:87:ea:ce:b2:17:c5:67:26:37:d4:93:f3:64:d5:77:
b4:1c:6c:fb:74:ed:09:1c:59:f1:5a:4c:1b:e6:7b:ab:bd:c5:
d0:20:f0:29:07:90:7b:a4:86:49:c0:19:1b:f0:09:b6:54:4c:
4a:62:21:0e:aa:ba:1c:fe:a8:06:66:0e:81:fd:85:46:b7:ba:
7f:85:ef:2c:63:39:38:69:49:5b:22:63:76:d2:37:34:b4:62:
45:4b:72:13:79:e4:f0:4f:a4:75:c6:d5:72:49:9a:71:0e:8c:
87:ba:0f:69:90:a3:73:0b:4a:c9:b4:2b:7c:3a:aa:42:31:d3:
b4:05:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:17 2026 by rpki-client