Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
File: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: h/Lxk4FxrFkB7JYtU4tgduZgScWCYIr0DVE2In9k2Gw=
Subject key identifier: 82:62:D6:42:EC:B0:53:6F:8F:29:AC:FB:2A:B5:10:C9:FE:E7:6B:9F
Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Certificate serial: 75E00B5EE72EEDCA451E66BFB4C72A142704CA61
Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
Signing time: Wed 22 Apr 2026 08:01:10 +0000
ROA not before: Wed 22 Apr 2026 07:56:10 +0000
ROA not after: Wed 21 Apr 2027 08:01:10 +0000
asID: 131111
IP address blocks: 103.159.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e0:0b:5e:e7:2e:ed:ca:45:1e:66:bf:b4:c7:2a:14:27:04:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Validity
Not Before: Apr 22 07:56:10 2026 GMT
Not After : Apr 21 08:01:10 2027 GMT
Subject: CN=8262D642ECB0536F8F29ACFB2AB510C9FEE76B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:ab:e4:8d:54:c6:a8:d5:7d:c3:9c:7b:b8:
cd:d2:88:77:1e:1a:b7:a9:7f:a2:7e:ac:cd:8a:65:
cf:fd:ba:c6:66:a0:9f:6d:29:35:c4:8f:51:32:62:
f6:4a:4a:7f:45:46:35:17:32:c0:86:71:fd:fa:d8:
5a:a0:e6:e2:e8:0e:1b:2d:65:50:48:9d:23:cd:f5:
04:b7:be:57:dc:35:dd:d3:00:c6:f8:dc:4c:f3:2d:
f8:ef:03:f4:88:66:fa:83:01:6a:c0:ae:f9:e0:8e:
0e:9b:37:b0:66:d5:e0:26:0e:7c:c0:63:23:1d:6b:
9c:3f:f5:fb:20:31:00:51:a5:e9:ac:2e:2d:b7:6d:
05:8d:d7:00:35:32:e7:59:f0:84:7b:bd:b9:8d:07:
d4:57:c0:7e:63:18:14:58:2c:1d:27:55:9b:18:ff:
3b:82:f1:8a:33:8d:b4:55:d7:c7:4c:15:a0:b7:e2:
78:c9:a5:28:56:9c:cc:74:20:7f:c0:a8:42:de:c4:
9e:10:27:fe:28:93:94:78:c4:4f:2a:20:0a:e4:d4:
7e:df:12:f2:45:12:7e:9a:c1:23:70:ed:76:64:bc:
1c:d7:27:ce:5f:83:c4:3d:37:b4:2d:3e:ae:0a:16:
71:fa:83:ca:1d:f7:ef:33:23:4a:85:ad:f6:da:e0:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:62:D6:42:EC:B0:53:6F:8F:29:AC:FB:2A:B5:10:C9:FE:E7:6B:9F
X509v3 Authority Key Identifier:
keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.202.0/23
Signature Algorithm: sha256WithRSAEncryption
95:7c:78:2b:54:64:b6:73:76:4c:d9:ee:3d:be:2c:9c:00:00:
8e:b2:39:58:6e:85:4f:6d:50:33:b9:b8:6b:e6:bd:89:63:e5:
2b:05:cb:81:b4:08:ac:32:9d:4f:37:46:81:8e:bb:ba:bb:3f:
e2:5f:87:db:60:b0:31:4f:3b:27:7a:48:a7:58:fd:6d:62:ae:
cd:9a:87:dc:ca:50:5a:8b:ad:a4:f0:34:87:62:21:24:9c:a6:
27:8e:1d:ab:3c:c8:e7:ae:b3:f1:65:55:1b:36:05:62:7c:d7:
a9:1e:07:ba:e4:07:53:6a:97:20:d3:94:ac:21:8d:a0:79:4f:
36:aa:8f:bf:4a:ae:57:1f:90:3f:32:26:86:17:da:4d:cd:7b:
63:2f:c3:e4:e1:b7:89:75:9f:e8:f6:f8:1a:7b:55:09:f0:5f:
67:92:d4:ed:af:6f:c2:ac:4f:e0:de:a2:63:ba:bd:b0:14:74:
5a:8e:28:95:59:9d:2a:ff:5f:7e:02:d0:c3:cb:05:aa:f5:ee:
58:32:d5:5a:c3:f5:e9:ed:a7:2b:73:94:a0:cf:f1:c3:40:21:
5c:be:d3:59:bc:9c:d0:bd:3a:e5:71:b8:2e:ed:84:bb:df:fb:
46:4a:57:40:82:41:d5:66:e4:40:74:d5:bc:18:8a:d9:91:06:
24:81:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:45 2026 by rpki-client