Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa
File: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (raw, json)
Hash identifier: wM8ptEx5VzpJAkgomjWfqQCemS5MC3YGyuW+QXx91Cw=
Subject key identifier: 4D:CB:CA:D6:12:94:D2:3B:70:C7:22:9D:35:E4:01:54:44:85:33:DF
Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Certificate serial: 43E9821F7129D596D5752EE4A663160B387BC2BB
Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa
Signing time: Thu 23 Apr 2026 05:02:49 +0000
ROA not before: Thu 23 Apr 2026 04:57:49 +0000
ROA not after: Thu 22 Apr 2027 05:02:49 +0000
asID: 150242
IP address blocks: 103.76.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e9:82:1f:71:29:d5:96:d5:75:2e:e4:a6:63:16:0b:38:7b:c2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Validity
Not Before: Apr 23 04:57:49 2026 GMT
Not After : Apr 22 05:02:49 2027 GMT
Subject: CN=4DCBCAD61294D23B70C7229D35E40154448533DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:02:e7:f0:40:df:4a:16:c8:03:e2:94:ed:
79:a5:bd:b6:68:4a:15:d1:f6:cc:e9:5c:d6:8f:a9:
04:e7:6c:13:95:7e:9d:92:99:4d:76:1a:5b:57:8d:
e6:79:7b:78:bc:3f:aa:98:43:20:de:7a:79:94:cb:
ac:24:04:b3:b8:11:43:88:c9:ab:33:0d:18:36:f9:
f8:12:2e:2a:10:e0:9b:67:6c:95:83:c4:a6:39:2c:
cf:a1:42:f1:f9:24:af:c2:93:2c:7e:9a:83:d2:5f:
05:99:5f:74:5c:94:5b:4e:6c:b7:a9:eb:3a:72:02:
8a:55:2c:78:54:af:6f:88:97:71:5e:e5:40:63:8c:
15:9e:da:ad:89:0c:8d:ad:ac:91:20:fd:80:37:fd:
f2:04:45:5f:53:cc:93:85:6c:12:9f:57:8f:ce:17:
9c:5c:58:df:72:10:db:5e:1a:25:e1:30:93:3e:09:
cc:2e:27:4d:1f:1e:73:d8:c8:f9:91:f2:33:84:87:
7a:1a:90:22:f6:e0:f3:72:ca:b6:d5:4b:9d:27:d3:
c2:15:b9:0f:1a:a5:2e:fa:a9:66:24:6a:df:31:f4:
6c:60:f3:e2:18:5e:cb:d0:95:43:ce:3b:e3:65:6c:
31:b8:a1:e8:d4:0c:a5:02:85:29:ee:d6:f7:16:b3:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:CA:D6:12:94:D2:3B:70:C7:22:9D:35:E4:01:54:44:85:33:DF
X509v3 Authority Key Identifier:
keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.91.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3b:67:03:23:46:16:17:31:eb:29:80:1f:86:d9:47:44:8a:
68:4a:c2:70:a5:5f:e9:82:43:0c:a8:ee:24:63:3a:bc:ac:a5:
e9:62:b1:e9:78:76:2b:ea:19:4d:a0:92:a5:5e:a9:27:eb:bf:
f9:ec:a8:0d:73:c6:e4:44:ab:32:7b:cf:b5:57:23:42:dc:0c:
63:7e:bb:ed:42:00:92:75:76:28:2a:b3:e7:07:68:4b:41:7f:
6a:c6:03:b6:ce:4e:6c:f1:dd:83:ca:e4:94:3e:d7:59:aa:55:
e1:99:4f:61:1e:0f:7e:29:49:b0:04:ea:4e:af:47:5c:18:e1:
49:46:21:c1:c4:10:fc:ed:be:81:86:10:28:4d:f0:09:12:37:
16:0d:64:99:54:3d:5e:a8:43:c9:99:36:f9:82:2e:42:20:d3:
e4:64:62:f0:5b:8b:e8:0c:2d:c6:94:61:63:60:6d:63:6a:1a:
b9:26:39:f7:1d:b5:9a:41:43:30:1a:d0:f4:bb:4a:da:97:77:
5c:4d:de:c9:ca:02:e6:32:6d:38:07:2c:cf:ec:12:d2:6b:b1:
88:22:c8:17:10:1f:7b:75:e2:aa:1d:b4:67:be:7d:b9:90:2e:
bc:68:6f:d4:61:35:ac:22:0c:e0:fb:42:ae:c6:5d:58:df:05:
69:75:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:58 2026 by rpki-client