Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa
File: 3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (raw, json)
Hash identifier: arkN7nr3GSnNhfoQvNj/VoLGcisVnxxbTX8fEDx7owY=
Subject key identifier: 31:0B:D0:AF:8D:C2:E6:47:8A:86:04:53:72:E2:35:DD:52:0F:5F:60
Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial: 5F14381CFB75B49F4F237AD3AF6527E3D1B6FEC5
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa
Signing time: Mon 20 Apr 2026 18:43:50 +0000
ROA not before: Mon 20 Apr 2026 18:38:50 +0000
ROA not after: Mon 19 Apr 2027 18:43:50 +0000
asID: 149966
IP address blocks: 103.191.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:14:38:1c:fb:75:b4:9f:4f:23:7a:d3:af:65:27:e3:d1:b6:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Validity
Not Before: Apr 20 18:38:50 2026 GMT
Not After : Apr 19 18:43:50 2027 GMT
Subject: CN=310BD0AF8DC2E6478A86045372E235DD520F5F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:01:34:77:08:0a:d6:e8:ea:6c:b0:51:e9:
e5:52:dd:25:93:3f:0a:ad:33:30:b9:6e:b3:af:d4:
e5:4e:ba:ea:c0:4d:c9:9a:be:01:22:96:01:cf:70:
93:39:d2:b1:d1:65:b4:57:dd:38:8a:8e:6b:97:0f:
6e:89:3d:52:b3:0f:59:5f:c2:4d:74:9c:df:3f:42:
45:57:06:ef:53:0a:6d:5f:be:5c:dc:92:ee:39:41:
c9:ee:16:f8:da:ab:a9:9c:f8:e2:7c:ea:33:ce:3d:
a2:b0:ef:bc:ee:db:64:97:9f:6c:77:6a:60:fa:6c:
aa:17:23:17:db:bb:88:04:ec:d1:f8:45:6e:cb:91:
34:b2:ca:c5:31:cf:86:59:17:51:50:76:78:ba:66:
4f:eb:1a:f8:f1:ba:c2:b6:5f:86:5f:c2:f1:6b:48:
48:72:b2:ef:10:05:31:80:8f:76:18:1e:92:92:76:
c5:10:3a:54:70:f8:4f:b0:9b:5c:04:84:ff:38:a6:
fe:0a:4e:b0:0b:eb:7e:50:42:de:8c:51:0b:7c:0d:
7f:5a:00:49:cb:61:a3:55:0d:a9:61:85:9c:82:25:
8f:34:e2:4f:e4:80:7b:0d:86:b5:f7:56:b2:32:08:
ce:07:0a:70:3f:69:71:4a:54:ed:0a:b0:88:f7:d3:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:D0:AF:8D:C2:E6:47:8A:86:04:53:72:E2:35:DD:52:0F:5F:60
X509v3 Authority Key Identifier:
keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:17:82:5a:d8:a7:2b:ed:52:b8:93:cd:46:77:8b:f5:95:be:
59:49:77:22:1e:c0:a1:a9:58:cb:5a:0b:51:c4:02:18:a2:5e:
ef:7c:9f:dc:be:18:50:fb:09:da:24:f8:86:03:c1:76:5a:29:
c3:d5:69:c3:89:01:08:97:aa:e1:96:f9:b8:33:bd:2c:fc:18:
3e:77:66:c3:28:ca:c9:33:09:03:df:d3:c6:b3:3e:43:31:d0:
40:25:88:c1:f8:bc:73:7c:f6:0a:18:71:93:ab:01:9f:67:e3:
03:8a:fc:e9:b8:38:84:83:12:e2:7c:8b:9f:55:7d:c1:59:d8:
68:34:bc:c2:07:a9:be:24:b0:5f:74:d1:ae:00:42:61:5f:b9:
16:d2:94:bc:f8:b4:f4:1c:dc:3f:12:d6:f8:c5:9e:d1:80:ea:
77:4d:d2:16:96:e4:a3:86:39:46:c2:81:08:9a:fa:60:f3:c1:
58:c0:32:9b:3d:12:a8:a7:bc:08:0a:2a:d5:66:41:0e:2e:9e:
46:2c:48:e3:6b:68:aa:49:d1:0f:1b:93:73:e3:72:7e:fc:ca:
cd:47:48:7a:a7:28:11:57:f8:3e:ad:bd:3f:49:a6:5f:76:57:
f9:4c:53:90:a6:0b:a1:c3:3f:2b:69:18:3b:17:b9:d8:7e:4e:
04:de:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:56:51 2026 by rpki-client