Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa
File: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (raw, json)
Hash identifier: 7eW6TzQ3QnJlGRXSaiD9XXYKqnmmJkFKhfHyNjfVzUg=
Subject key identifier: CB:35:8C:FF:91:05:32:CB:A8:3D:75:71:B0:55:B9:8A:A2:1F:82:89
Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Certificate serial: 402302AFB5D5F20D9E010DA91AC12FA5B338D711
Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa
Signing time: Tue 28 Apr 2026 15:00:00 +0000
ROA not before: Tue 28 Apr 2026 14:55:00 +0000
ROA not after: Tue 27 Apr 2027 15:00:00 +0000
asID: 141146
IP address blocks: 103.158.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:23:02:af:b5:d5:f2:0d:9e:01:0d:a9:1a:c1:2f:a5:b3:38:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Validity
Not Before: Apr 28 14:55:00 2026 GMT
Not After : Apr 27 15:00:00 2027 GMT
Subject: CN=CB358CFF910532CBA83D7571B055B98AA21F8289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:59:6b:da:19:35:07:77:03:8a:1d:1d:7e:4e:
e9:7f:5c:fc:33:c4:ff:88:52:0f:e9:43:9f:f7:44:
30:bf:06:6a:be:4e:75:65:51:73:4b:c4:c2:9e:47:
fb:0b:0c:65:64:e8:a0:f5:99:ff:03:09:8d:77:3c:
d0:cd:39:78:31:6f:8e:d8:6c:65:a9:62:49:56:3e:
39:99:9e:7b:20:8e:3b:c6:12:8c:30:67:06:f0:d1:
7b:09:31:d3:b8:0d:5d:19:31:0c:f0:e4:46:e3:15:
73:6b:1c:8a:55:49:98:4b:59:eb:d7:66:de:55:99:
d3:b0:ad:0d:1f:bc:7a:02:dc:54:03:5d:bf:f6:cc:
95:33:c1:84:b1:0c:f0:ce:b7:32:92:fe:64:8f:89:
ce:04:b4:27:ca:98:da:d8:ae:1e:e5:4e:00:c3:85:
ff:e8:67:27:11:a9:9f:78:d6:35:e2:55:11:c5:74:
05:d1:ca:a2:0d:41:89:14:c5:99:26:b2:f9:3d:fb:
4f:ad:b6:f2:e3:d6:a8:10:26:32:55:a7:50:e3:84:
87:b4:d1:21:48:26:4f:17:54:54:98:f8:70:a7:3c:
d4:ce:2f:59:78:83:33:6e:fa:6f:15:c4:59:91:bc:
55:e1:67:63:61:0e:8d:7b:f7:11:3b:87:de:3e:fb:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:35:8C:FF:91:05:32:CB:A8:3D:75:71:B0:55:B9:8A:A2:1F:82:89
X509v3 Authority Key Identifier:
keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.209.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a4:e4:86:9d:44:3e:89:64:b6:f8:86:01:63:7b:56:88:76:
a5:8b:fd:76:58:23:81:71:15:53:af:de:b2:a4:a7:62:fc:35:
e2:4e:78:20:d4:af:b1:cf:73:cc:db:d9:47:cb:a3:f1:6d:5d:
4d:45:f1:d9:e8:34:a5:23:44:64:e5:6c:64:79:8f:2e:5d:5d:
c3:54:67:9f:be:f4:3f:60:e2:0e:84:88:d0:e3:78:0b:1b:f7:
c5:0a:3f:40:4c:dc:a4:48:51:ad:5f:48:9f:4a:00:5b:6b:96:
5a:8a:cf:2d:ae:46:7f:57:ea:e5:c9:7f:02:3c:ab:11:c7:cf:
ee:64:32:b9:a1:87:7d:2c:9f:a8:d3:b2:8f:c2:0a:ac:37:10:
cb:40:32:71:4a:d7:9f:b0:93:55:8f:db:47:f1:20:76:68:ac:
3a:2a:3f:0f:d6:a0:03:bf:23:1d:70:7b:21:9f:4a:aa:35:db:
d0:0d:0e:a0:79:a2:7b:32:b2:ac:49:5b:72:11:ca:b7:7c:c1:
f8:b7:da:bb:ab:d8:63:ca:c0:d4:58:30:f8:99:21:9d:44:85:
42:fd:32:6e:2e:9f:0a:12:77:4b:a9:32:37:df:23:16:1a:47:
5c:75:bd:35:8f:9f:c0:09:05:3a:8a:b9:cc:ee:b9:09:e0:15:
7c:71:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:18 2026 by rpki-client