Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa
File: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (raw, json)
Hash identifier: 5MFLyCbezZSy//BSuXyYk6SELQj7wkGyQWhmCVRtrp8=
Subject key identifier: FC:61:2D:D7:D9:2D:EA:50:26:5F:88:68:C8:66:07:4D:E2:7E:76:92
Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Certificate serial: 0E70AF7A4676857D5A62B92E5BB4F614AF7B22
Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa
Signing time: Tue 28 Apr 2026 15:00:00 +0000
ROA not before: Tue 28 Apr 2026 14:55:00 +0000
ROA not after: Tue 27 Apr 2027 15:00:00 +0000
asID: 141146
IP address blocks: 103.158.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:70:af:7a:46:76:85:7d:5a:62:b9:2e:5b:b4:f6:14:af:7b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Validity
Not Before: Apr 28 14:55:00 2026 GMT
Not After : Apr 27 15:00:00 2027 GMT
Subject: CN=FC612DD7D92DEA50265F8868C866074DE27E7692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:54:c6:da:03:aa:49:5c:a0:85:11:8b:2b:
99:5b:25:e2:86:4c:39:1d:f8:e1:34:e3:31:5f:1c:
53:0f:fe:ac:f8:b2:3d:56:57:d4:20:58:a1:d3:bc:
85:52:69:69:b8:24:57:6f:2e:47:cd:48:ac:5c:07:
6c:bd:69:ab:94:6e:d2:fe:8d:1c:ec:0b:54:30:f9:
b6:29:00:42:2f:56:6b:e0:eb:7d:1f:0d:6a:48:a2:
72:20:e9:fc:fc:e2:5a:35:1f:7d:ed:c1:8f:51:46:
e2:27:bf:fe:66:82:4c:aa:ab:ac:1b:6b:ab:89:79:
1d:08:e8:a2:7c:9e:7f:f1:58:f8:7f:44:4e:44:3d:
3f:f9:4b:53:0e:bd:75:16:51:79:12:0a:89:20:ed:
05:17:96:5f:d5:45:13:cc:6d:7d:33:44:50:73:4c:
05:59:31:40:08:4a:2f:86:ef:c7:27:33:e2:8c:6e:
5f:2a:4f:dd:ae:42:ea:e7:91:51:23:e0:2e:68:ea:
95:fb:1c:8d:43:8e:89:1a:89:d5:80:04:3e:0f:92:
4a:91:f7:7a:73:5c:32:fe:4c:e5:6e:f0:92:2c:80:
df:38:c2:1f:01:ab:ee:a3:a4:4c:85:df:bd:15:92:
6a:64:63:e5:a7:a3:0a:90:6b:1b:fa:31:7f:4b:14:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:61:2D:D7:D9:2D:EA:50:26:5F:88:68:C8:66:07:4D:E2:7E:76:92
X509v3 Authority Key Identifier:
keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.208.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:28:3a:76:f1:20:ec:90:ba:bd:60:fe:80:a7:3a:98:34:64:
f1:19:22:ba:ba:60:c8:ef:15:93:98:4d:42:48:c7:91:19:a3:
c8:f6:40:46:ee:7b:3d:db:ae:5a:19:fa:45:11:f0:ec:6f:60:
47:95:44:63:22:3d:38:65:24:54:71:dd:bf:78:91:ff:a4:59:
84:5c:93:29:78:5e:43:6f:c8:9e:3e:c9:8f:2d:ea:9a:01:4b:
96:c8:bd:83:55:3a:2d:5b:f7:c6:26:5d:cf:f0:bf:ef:77:52:
4a:d4:1e:5e:0c:3c:0d:83:43:32:d8:29:fb:34:c6:f8:f9:99:
55:3e:9f:72:7b:b8:f3:65:7a:bd:d8:f7:c8:e5:49:32:70:70:
f1:95:25:c9:e9:89:9a:53:41:29:2a:77:6e:23:44:87:77:c4:
ef:aa:d7:84:51:26:9a:cb:15:6e:48:f9:8e:d0:e6:4d:1a:76:
77:72:40:23:bd:bf:b5:c1:65:ec:04:2a:f9:68:d1:0c:b7:ce:
3b:06:ca:b7:64:8f:83:0a:6d:97:4c:af:c8:32:a4:b3:30:12:
43:f5:16:fb:30:5c:a9:29:98:fd:1a:39:78:32:3b:c6:01:4d:
f0:aa:80:09:73:6c:27:c0:2c:48:68:e3:f5:1c:03:4e:3d:91:
36:9b:13:eb
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgITDnCvekZ2hX1aYrkuW7T2FK97IjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2NEI0NjY1MUQ3QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVF
RjE1REI2MB4XDTI2MDQyODE0NTUwMFoXDTI3MDQyNzE1MDAwMFowMzExMC8GA1UE
AxMoRkM2MTJERDdEOTJERUE1MDI2NUY4ODY4Qzg2NjA3NERFMjdFNzY5MjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALo7VMbaA6pJXKCFEYsrmVsl4oZM
OR344TTjMV8cUw/+rPiyPVZX1CBYodO8hVJpabgkV28uR81IrFwHbL1pq5Ru0v6N
HOwLVDD5tikAQi9Wa+DrfR8NakiiciDp/PziWjUffe3Bj1FG4ie//maCTKqrrBtr
q4l5HQjoonyef/FY+H9ETkQ9P/lLUw69dRZReRIKiSDtBReWX9VFE8xtfTNEUHNM
BVkxQAhKL4bvxycz4oxuXypP3a5C6ueRUSPgLmjqlfscjUOOiRqJ1YAEPg+SSpH3
enNcMv5M5W7wkiyA3zjCHwGr7qOkTIXfvRWSamRj5aejCpBrG/oxf0sUBx8CAwEA
AaOCAjYwggIyMB0GA1UdDgQWBBT8YS3X2S3qUCZfiGjIZgdN4n52kjAfBgNVHSME
GDAWgBRktGZR17DHV+Su3gFpHwYv7vFdtjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBl
NzA1OTI3LWVjNjQtNDRmNS05YzllLWM5YTU1YTUyM2I2NC8wLzY0QjQ2NjUxRDdC
MEM3NTdFNEFFREUwMTY5MUYwNjJGRUVGMTVEQjYuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi82NEI0NjY1MUQ3QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVFRjE1
REI2LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj
OWUtYzlhNTVhNTIzYjY0LzAvMzEzMDMzMmUzMTM1MzgyZTMyMzAzODJlMzAyZjMy
MzQyZDMyMzQyMDNkM2UyMDMxMzQzMTMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGee0DANBgkq
hkiG9w0BAQsFAAOCAQEAxSg6dvEg7JC6vWD+gKc6mDRk8RkiurpgyO8Vk5hNQkjH
kRmjyPZARu57PduuWhn6RRHw7G9gR5VEYyI9OGUkVHHdv3iR/6RZhFyTKXheQ2/I
nj7Jjy3qmgFLlsi9g1U6LVv3xiZdz/C/73dSStQeXgw8DYNDMtgp+zTG+PmZVT6f
cnu482V6vdj3yOVJMnBw8ZUlyemJmlNBKSp3biNEh3fE76rXhFEmmssVbkj5jtDm
TRp2d3JAI72/tcFl7AQq+WjRDLfOOwbKt2SPgwptl0yvyDKkszASQ/UW+zBcqSmY
/Ro5eDI7xgFN8KqACXNsJ8AsSGjj9RwDTj2RNpsT6w==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:18 2026 by rpki-client