Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa
File: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (raw, json)
Hash identifier: jY+4J3He/3QtfQ8XfLKD5n5LdTwmbB9v98rS3zSA63c=
Subject key identifier: 14:B6:0A:A7:7B:5F:46:B9:18:39:8D:C3:C2:CF:BE:DB:9D:C7:3D:97
Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
Certificate serial: 25FFA2E51FAF4699D0D395EB2F6A30BCF5B061A3
Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa
Signing time: Mon 20 Apr 2026 07:00:00 +0000
ROA not before: Mon 20 Apr 2026 06:55:00 +0000
ROA not after: Mon 19 Apr 2027 07:00:00 +0000
asID: 149398
IP address blocks: 103.182.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ff:a2:e5:1f:af:46:99:d0:d3:95:eb:2f:6a:30:bc:f5:b0:61:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
Validity
Not Before: Apr 20 06:55:00 2026 GMT
Not After : Apr 19 07:00:00 2027 GMT
Subject: CN=14B60AA77B5F46B918398DC3C2CFBEDB9DC73D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:6f:f3:b1:c8:5f:d6:7d:b6:e5:ef:75:cd:
b6:e8:6b:4b:c4:23:03:46:0c:75:99:97:c5:5c:17:
73:6b:76:2b:ec:44:6b:f6:58:5b:a9:9b:3f:7f:d5:
e4:90:a1:6b:49:99:7e:dc:ee:e5:e7:c7:98:2b:1c:
56:3b:41:51:bc:32:55:9d:06:66:6e:b2:9e:e4:92:
b4:eb:a3:6b:3b:a7:c1:54:5a:c9:29:57:6c:11:0c:
7f:69:c9:64:ab:06:a6:18:82:c9:c2:9c:8a:f1:b2:
60:11:bc:51:e3:40:18:71:2b:4c:8d:6e:5e:80:d1:
d5:57:57:de:b6:77:a1:d9:9e:8f:6f:89:48:82:aa:
1b:a8:e9:af:08:5e:fd:26:b2:d3:e3:a8:33:45:68:
73:f9:e4:d9:2e:73:6b:aa:c3:75:9b:5e:1a:fc:88:
11:5b:1c:ed:15:93:57:22:6f:94:98:a3:4a:b7:d6:
be:ec:bd:f3:48:35:80:72:dd:5d:ee:a5:8f:39:12:
10:52:62:41:b7:1f:c3:36:86:63:4d:5d:63:b3:77:
64:51:7d:54:50:b3:c8:88:29:e2:ed:da:c1:88:d5:
b0:86:69:08:ec:d8:a5:ea:ce:96:b2:ee:7c:b5:8c:
c8:96:3e:a7:96:b2:41:2e:6f:1b:6c:a1:e3:56:c3:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:0A:A7:7B:5F:46:B9:18:39:8D:C3:C2:CF:BE:DB:9D:C7:3D:97
X509v3 Authority Key Identifier:
keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.76.0/24
Signature Algorithm: sha256WithRSAEncryption
16:34:93:74:b8:70:7b:54:cf:a9:7e:1d:8d:66:5e:ba:62:c4:
12:53:c6:94:a6:7b:45:d1:af:c6:2b:ae:39:54:f3:af:9a:e6:
a7:0c:0a:4e:2d:33:8b:e3:d9:d3:2f:04:12:2d:d6:cd:88:c1:
01:bd:b4:48:cd:58:b8:f9:b7:43:b9:65:fa:be:6d:eb:8e:6e:
e0:05:ed:1b:23:6c:1f:da:bc:0e:72:d1:ff:95:ff:a1:8c:d1:
de:09:04:0d:f5:0d:ad:cb:8b:aa:fc:a3:ab:12:9b:03:77:4d:
31:72:67:b3:69:d9:6d:6a:a0:cc:4f:00:84:d8:95:79:dc:8e:
a0:23:0a:a8:0f:65:7d:79:80:8a:7b:dc:fc:83:af:6d:51:cc:
69:2c:0e:46:ca:04:74:73:dc:0e:7b:c5:20:ab:b9:29:df:13:
28:99:ee:3d:af:f3:3e:d7:5f:3d:e5:7a:17:83:5a:a9:a4:a4:
57:fe:96:b0:60:0d:09:86:15:ec:d3:db:cc:46:64:70:58:9f:
82:19:d0:e8:bf:e4:ad:8b:ac:61:39:35:e8:c9:5a:f0:16:5a:
a6:2f:d5:99:cb:dc:3d:84:c6:b7:5b:d3:0f:d4:d8:db:25:9c:
72:7d:b9:22:98:b2:01:27:d9:36:59:bf:33:c8:7d:fc:99:4e:
2f:b8:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:48:32 2026 by rpki-client