Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa
File: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (raw, json)
Hash identifier: w6WMJFZZI/lG0Bz9BgUHPCbvptZyZlx914JFruS0/Bw=
Subject key identifier: 3F:26:30:36:70:69:4A:08:61:5B:CE:19:6A:E9:03:14:7A:48:82:71
Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial: 082479AD39F3F07D0EE3446CCC4EEE545EDF6D27
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa
Signing time: Mon 20 Apr 2026 18:44:22 +0000
ROA not before: Mon 20 Apr 2026 18:39:22 +0000
ROA not after: Mon 19 Apr 2027 18:44:22 +0000
asID: 149966
IP address blocks: 103.191.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:24:79:ad:39:f3:f0:7d:0e:e3:44:6c:cc:4e:ee:54:5e:df:6d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Validity
Not Before: Apr 20 18:39:22 2026 GMT
Not After : Apr 19 18:44:22 2027 GMT
Subject: CN=3F26303670694A08615BCE196AE903147A488271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:89:38:c6:d4:bf:71:c4:2b:36:dc:98:a3:
f7:f2:82:81:14:3c:33:e4:b9:5c:15:fc:06:96:31:
3e:3b:fa:ee:55:9e:ad:f3:58:16:17:e7:91:bc:33:
ee:ea:93:d9:90:46:66:7d:1d:62:e8:93:f0:42:3b:
d4:d4:0a:52:14:e8:c1:b8:db:e3:9a:b8:8e:d2:5f:
77:99:b9:e4:55:64:9d:ef:be:a7:af:8d:f4:85:7e:
4f:f5:f2:93:f0:ad:a6:c0:08:d6:80:87:a5:71:2e:
67:5b:96:ae:35:1f:b0:9d:eb:a3:aa:a1:d1:08:27:
0b:6e:6e:47:e1:e1:e4:ec:66:29:b8:22:3c:8d:48:
2e:1d:19:62:30:26:30:fb:cc:92:6d:80:24:bd:6f:
78:8b:af:76:86:4c:7f:7a:2f:50:11:2e:54:ef:5c:
4c:45:6e:a2:b2:b8:06:2a:3f:1f:92:d9:ac:cd:d5:
68:fb:61:2e:e3:58:60:e8:f6:24:76:13:67:90:6d:
45:eb:f6:ef:8a:7d:3f:3e:2d:6b:78:91:16:00:20:
04:ae:b4:12:02:39:be:08:20:63:c8:d3:f8:95:2b:
5e:52:fa:95:1f:cc:e3:f3:e4:c3:e9:79:d6:74:0d:
25:73:f4:46:0f:3d:48:6d:20:35:16:23:d9:4e:f0:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:26:30:36:70:69:4A:08:61:5B:CE:19:6A:E9:03:14:7A:48:82:71
X509v3 Authority Key Identifier:
keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.152.0/23
Signature Algorithm: sha256WithRSAEncryption
82:44:e6:85:6a:74:7e:29:99:05:b7:9b:2c:76:d3:90:67:b3:
cb:fe:5d:80:aa:44:8a:c4:d8:e2:7c:f8:7d:c0:5c:4e:16:8d:
bf:75:bf:8a:08:00:cd:bf:e9:a2:28:be:45:2e:66:09:d8:62:
eb:8f:08:a3:8e:8f:30:fb:b3:6b:c6:60:01:e6:3e:f4:18:d1:
0b:1a:c3:a1:1d:ad:91:d8:37:6e:a5:f1:9a:09:73:7e:1b:2e:
09:45:a4:e8:b9:a9:5f:d4:63:8c:34:71:62:d8:b6:1a:9f:fe:
27:c3:b6:40:43:67:78:6a:fd:33:4a:c9:5a:15:e2:3e:e6:08:
a8:83:c0:ce:07:32:70:fc:b3:c8:e1:13:b9:1a:cf:64:38:29:
54:d7:88:bf:13:16:45:bf:35:3e:b1:16:df:54:04:4a:be:50:
ca:fb:54:f9:19:4b:ae:fc:3b:e6:12:52:dd:9d:2d:23:96:3e:
95:a5:3a:a6:43:8a:4c:93:9d:e2:04:58:80:fe:1a:56:c7:d1:
9b:44:37:65:41:59:13:2b:11:2c:6a:03:0c:d3:de:92:99:4d:
dd:7f:23:7a:04:b2:a3:97:8b:25:94:34:0b:6c:cd:41:99:4e:
3f:a5:12:92:e9:95:c4:f5:d7:0b:6c:c4:8d:b9:d3:26:24:95:
de:4c:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:48 2026 by rpki-client