Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa
File: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (raw, json)
Hash identifier: EkcP4yt7Y7RR88+yPmsnwone2vyYnErU4qElOxX2Bj4=
Subject key identifier: 0E:05:1F:CF:A6:91:90:52:8C:5A:DB:C6:8E:B7:D5:0B:F6:85:3A:28
Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668
Certificate serial: 0780C805E5BC32FA4BB3B65EE73A1AB7D780248E
Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa
Signing time: Thu 23 Apr 2026 05:01:39 +0000
ROA not before: Thu 23 Apr 2026 04:56:39 +0000
ROA not after: Thu 22 Apr 2027 05:01:39 +0000
asID: 149688
IP address blocks: 103.185.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:80:c8:05:e5:bc:32:fa:4b:b3:b6:5e:e7:3a:1a:b7:d7:80:24:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668
Validity
Not Before: Apr 23 04:56:39 2026 GMT
Not After : Apr 22 05:01:39 2027 GMT
Subject: CN=0E051FCFA69190528C5ADBC68EB7D50BF6853A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:ca:b2:90:9d:6d:61:a2:ba:35:8f:2a:2c:
08:da:a9:86:ca:6e:1f:30:6b:ad:63:be:d2:93:98:
b9:4d:1e:1a:fb:d8:62:ee:03:06:6e:b2:e7:b8:1f:
86:85:96:78:d3:9e:25:60:bc:8b:ff:ae:e0:a6:20:
1a:ed:ee:5e:1c:d3:9f:b0:9f:98:a1:21:78:93:fe:
53:ca:5f:31:89:9e:2c:a4:be:8f:ff:db:e3:fb:23:
1d:e7:cc:be:3d:04:0a:bb:6d:d1:64:8c:81:c5:68:
c3:cc:10:04:d8:c6:1e:6e:10:f7:0f:17:ec:ee:dc:
74:70:c4:2e:a3:b1:d1:dd:eb:57:0c:b6:7c:b3:4e:
89:20:cc:ef:36:41:2b:ae:b3:de:4f:0e:b0:96:7f:
dd:15:37:a8:8d:5a:37:71:cc:1e:1f:34:11:1e:38:
54:ed:58:e4:12:4c:22:8f:38:e1:6c:9b:eb:3f:2b:
c4:9f:7e:5f:5b:5d:3a:4e:e8:0e:56:b2:ca:23:73:
67:f3:94:32:98:db:bd:3c:6d:17:a7:8b:22:5e:69:
05:d0:f4:67:ff:99:2c:80:25:ca:16:cd:33:96:32:
a7:7a:86:a8:97:50:ec:c5:ad:56:8d:0f:75:db:74:
95:93:18:f6:77:0a:68:e2:bb:06:68:4f:bf:07:07:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:05:1F:CF:A6:91:90:52:8C:5A:DB:C6:8E:B7:D5:0B:F6:85:3A:28
X509v3 Authority Key Identifier:
keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.254.0/23
Signature Algorithm: sha256WithRSAEncryption
f3:ff:78:ef:f5:16:f1:0b:ae:19:8c:18:0f:31:8e:b4:2e:ca:
2a:3b:31:6c:37:62:cd:43:56:49:3b:ce:02:99:9c:80:ac:bc:
22:3a:2d:14:30:82:a7:33:8f:6b:44:50:48:5b:2e:d6:56:c8:
7f:0a:29:45:58:57:f0:99:d4:50:74:e9:7e:f6:c1:68:31:de:
76:44:54:a8:6a:48:13:b9:5a:54:2e:9d:97:11:56:80:92:18:
71:12:54:16:1b:d3:a7:0a:45:18:81:7e:f3:27:ab:05:ee:a5:
fe:7c:e1:55:95:60:45:54:34:61:76:ac:c9:09:31:44:64:60:
99:ed:02:97:4f:66:49:f0:40:64:0b:60:ef:c0:67:be:f6:15:
76:60:4e:be:6b:e1:81:48:89:e1:2e:d0:5e:f6:f9:a9:11:35:
a4:ef:8c:c7:76:04:2e:ab:02:ad:c2:e3:bc:84:7e:4b:d1:db:
05:90:aa:38:f7:eb:62:35:de:38:e0:e4:95:24:e1:dd:66:a0:
bb:f7:e6:63:35:d5:5f:de:cf:85:8e:d3:71:10:0a:b7:2d:17:
b9:df:24:59:28:2f:05:60:fc:18:f3:40:21:fb:ba:b3:74:b1:
93:1f:2b:a0:7c:34:8a:ac:48:ef:de:1d:7c:f0:88:dc:12:04:
12:8e:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:55:40 2026 by rpki-client