Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133392e302f32342d3234203d3e20313533383538.roa
File: 3130332e3131322e3133392e302f32342d3234203d3e20313533383538.roa (raw, json)
Hash identifier: X64q8UQagBR3hHno/WKZA0KBqxLttOrBahJ22rf8510=
Subject key identifier: 3B:F4:8A:22:34:4B:9D:76:AC:D8:45:AB:EB:9E:99:7B:6C:9F:9D:DA
Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial: 7634F898FEE8F90B3CF450BCB052CC0CAA97467F
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133392e302f32342d3234203d3e20313533383538.roa
Signing time: Mon 20 Apr 2026 05:26:01 +0000
ROA not before: Mon 20 Apr 2026 05:21:01 +0000
ROA not after: Mon 19 Apr 2027 05:26:01 +0000
asID: 153858
IP address blocks: 103.112.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:34:f8:98:fe:e8:f9:0b:3c:f4:50:bc:b0:52:cc:0c:aa:97:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Validity
Not Before: Apr 20 05:21:01 2026 GMT
Not After : Apr 19 05:26:01 2027 GMT
Subject: CN=3BF48A22344B9D76ACD845ABEB9E997B6C9F9DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:47:cc:a4:65:ca:7e:47:18:98:e4:d6:43:
a0:0c:9a:c8:79:17:3f:17:6c:a8:be:59:98:5e:1b:
1e:52:72:e2:d7:65:d0:df:f6:96:cc:4d:21:2b:f2:
5d:02:18:d9:68:3e:13:bd:22:f6:de:a8:80:4d:e5:
e8:55:5e:db:68:43:c2:f6:c6:9a:aa:b4:13:ac:0b:
ff:d7:3e:2a:8a:c9:5b:49:3b:18:ca:6d:38:cb:c3:
d7:16:bc:5c:b4:a3:dc:fa:c4:4f:17:fa:7d:f3:0e:
2c:21:ed:4f:6d:78:4e:a5:96:50:76:2f:1b:a9:1f:
14:b1:35:7d:00:db:d3:f8:f7:b7:29:42:82:44:c9:
bf:81:93:c8:4c:86:67:55:5f:62:8a:26:3f:e1:2d:
ed:a3:74:9d:c5:ab:c6:ed:06:52:eb:0a:b5:7b:ee:
44:20:a7:47:d7:e8:f6:cb:5d:f2:18:60:f9:88:8c:
cb:87:73:32:ba:b1:ea:d8:28:1f:fc:62:63:6e:52:
4d:08:65:c5:1a:9c:02:db:70:16:59:73:2d:c9:ce:
e7:16:38:9e:89:db:27:b1:bc:17:0f:a9:ce:86:ab:
1f:d3:b8:df:98:03:f7:f5:ed:64:12:e0:74:89:b9:
5c:37:63:7d:36:71:4d:b4:ba:53:b7:7f:bd:90:fc:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:8A:22:34:4B:9D:76:AC:D8:45:AB:EB:9E:99:7B:6C:9F:9D:DA
X509v3 Authority Key Identifier:
keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133392e302f32342d3234203d3e20313533383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.139.0/24
Signature Algorithm: sha256WithRSAEncryption
01:64:96:22:92:0f:d3:88:93:6a:4b:6e:9c:96:a7:d7:01:53:
55:27:a9:d5:ec:85:bc:60:90:8f:a6:db:78:ae:54:01:89:37:
2d:b5:c8:e8:8a:d9:4d:06:15:12:72:09:60:69:77:0c:01:53:
a7:2b:1d:fa:ad:d1:27:26:38:d5:d8:02:10:37:dd:2d:bd:58:
5b:bf:1b:22:19:a0:4f:a6:28:ea:1c:6c:70:37:c7:3d:ae:10:
19:a7:bf:6f:24:2d:7d:44:70:81:24:1a:d0:02:09:5e:57:b5:
55:07:19:48:08:ca:2e:9b:ca:0a:82:eb:31:d1:23:ee:23:6b:
04:ac:9d:4e:1c:bc:4d:fa:d0:9a:cd:59:10:64:55:10:5b:66:
cf:82:d9:a0:4e:6c:99:67:8f:9a:ad:a5:36:bf:62:41:9c:5f:
98:dc:9d:f2:5b:f6:1b:7a:03:ba:d2:ca:69:0b:8b:bf:a2:46:
dd:45:df:90:b0:09:e4:4c:d4:89:d5:aa:d4:ad:15:6f:a2:2c:
71:28:fd:29:96:95:e5:3b:16:3e:02:96:c4:92:b3:b3:22:20:
92:17:4f:6b:a4:20:2f:9e:73:b3:02:41:9d:69:2b:6b:41:9e:
e5:28:5b:4c:cd:0c:38:26:cc:2c:98:23:0e:6b:ce:a4:92:8d:
c3:bd:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:43:19 2026 by rpki-client