Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa
File: 3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (raw, json)
Hash identifier: Fy8tJu3uFIKvRFrXT5kKrlRojdmbLDkH0JhyjLjniX8=
Subject key identifier: 0B:3C:11:28:26:98:67:B8:42:73:1E:59:2F:93:D3:3C:C1:F6:DE:54
Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial: 648F3DB5B475E860F6479639C79713C77F7E3AFE
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa
Signing time: Mon 20 Apr 2026 18:44:10 +0000
ROA not before: Mon 20 Apr 2026 18:39:10 +0000
ROA not after: Mon 19 Apr 2027 18:44:10 +0000
asID: 149966
IP address blocks: 103.191.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8f:3d:b5:b4:75:e8:60:f6:47:96:39:c7:97:13:c7:7f:7e:3a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Validity
Not Before: Apr 20 18:39:10 2026 GMT
Not After : Apr 19 18:44:10 2027 GMT
Subject: CN=0B3C1128269867B842731E592F93D33CC1F6DE54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0f:a2:a8:87:fb:08:27:7f:7a:5f:8b:7a:d2:
ec:bf:93:08:b8:70:61:cc:06:4e:26:fb:ad:bb:83:
0a:58:b2:b7:16:ce:f4:ba:f8:1a:24:4e:d3:5e:10:
ef:62:22:c9:b8:56:cc:7f:c8:39:0c:8b:6d:86:45:
ac:5f:c9:bc:70:0a:c8:b6:ef:33:ea:2f:5f:c7:b9:
2b:ea:78:9b:05:1d:10:c1:16:04:0c:97:5e:61:84:
bb:16:8c:51:c9:73:d9:37:74:e9:7e:40:cd:4e:a7:
2f:dc:98:ff:c0:40:7a:a5:e0:24:ba:f8:26:8c:98:
a3:61:f5:26:55:b9:a5:be:2f:eb:46:72:d5:53:8f:
bb:5f:62:0a:25:21:30:c7:82:4d:2f:36:13:1c:b2:
ea:64:42:0b:41:22:8f:f9:7b:f6:3c:97:fe:2f:c5:
ca:63:cc:58:87:58:75:3c:2a:fe:6b:db:8e:58:49:
79:b8:a2:fb:5e:34:b2:de:27:6b:e3:a0:3d:f8:15:
05:17:e9:a0:94:64:97:aa:ce:1a:9c:76:11:80:b3:
88:0c:59:3d:41:71:58:e4:5f:d5:6e:aa:fa:bd:fd:
0e:62:3e:12:b0:f4:23:84:ed:4d:26:a1:43:fd:22:
e3:90:0c:19:3e:aa:93:bf:ba:96:13:4c:13:f4:cd:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3C:11:28:26:98:67:B8:42:73:1E:59:2F:93:D3:3C:C1:F6:DE:54
X509v3 Authority Key Identifier:
keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.152.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e7:d6:e0:64:17:51:5d:77:86:5b:77:42:8b:6c:10:f6:ec:
0e:7f:c6:5a:cc:3d:ca:64:41:e0:b4:b1:cf:f5:f8:55:e6:95:
bd:c3:a6:d6:e2:0b:a3:0a:ad:5c:eb:d7:d6:c1:b3:bb:36:fd:
86:45:5d:65:2b:51:ee:82:5e:2b:52:61:1d:34:0f:28:19:52:
53:1f:a7:b6:07:eb:a5:1b:43:cb:79:e4:7b:fb:99:0b:b2:0b:
8c:7a:89:22:07:2e:d9:61:d4:e0:1f:6b:aa:14:73:e8:fe:b6:
b7:fb:bd:94:75:4e:42:46:1f:c4:95:d4:a1:e4:d3:0c:9c:74:
40:86:d8:b7:67:d4:6b:9c:1c:f9:e7:ca:06:de:e6:ee:69:08:
d1:58:9a:f6:45:49:9a:79:db:1f:4f:3b:60:41:69:4e:40:2f:
23:9e:18:48:57:df:59:bb:85:11:99:54:e4:0b:12:08:ab:76:
ef:67:ed:6d:02:26:01:4b:ca:96:47:dc:67:a8:02:79:3f:64:
60:26:e8:8e:c1:da:71:55:ad:3f:7a:f1:3b:9b:64:c0:c1:72:
7d:82:8c:11:39:4f:bb:5d:9a:1d:68:6c:9f:fe:7d:0a:51:a9:
ef:a8:c1:ba:48:9f:43:d6:48:29:f1:0f:58:98:9b:82:7d:03:
ee:3c:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:56:52 2026 by rpki-client