Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa
File: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (raw, json)
Hash identifier: rzNC1sTok8xSRrlVtyM/uA8f0On/vU4OUX9aJFKMYLY=
Subject key identifier: 1C:BE:BA:F9:26:87:3B:58:9C:B0:35:C1:0B:19:41:3A:E9:73:9C:D6
Certificate issuer: /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Certificate serial: 51743D0084DBEC058EBC9798AC4F30F1A04F2722
Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa
Signing time: Fri 24 Apr 2026 03:02:21 +0000
ROA not before: Fri 24 Apr 2026 02:57:21 +0000
ROA not after: Fri 23 Apr 2027 03:02:21 +0000
asID: 151506
IP address blocks: 103.234.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:74:3d:00:84:db:ec:05:8e:bc:97:98:ac:4f:30:f1:a0:4f:27:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Validity
Not Before: Apr 24 02:57:21 2026 GMT
Not After : Apr 23 03:02:21 2027 GMT
Subject: CN=1CBEBAF926873B589CB035C10B19413AE9739CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:b4:3f:a2:f7:7d:75:cc:1c:6c:27:7a:d0:
0a:b7:99:88:a8:ac:f4:ba:12:76:28:68:4a:06:3d:
08:c7:94:cb:45:22:ed:db:5d:64:ad:c9:19:87:fd:
56:0c:e2:f9:fd:7f:5f:b2:43:23:89:9a:aa:2a:cb:
65:ee:e3:31:63:6e:3c:8e:e5:ce:90:6d:be:e1:99:
da:cf:06:59:61:37:97:85:65:0c:02:ea:16:5f:5d:
77:60:0f:50:aa:0d:9d:5c:87:6d:3c:ca:ac:aa:af:
f4:55:be:ad:2a:63:22:a4:66:f0:6a:ad:78:0a:10:
d5:b7:92:ca:ec:9b:33:25:d3:64:8c:6f:b3:d3:74:
cb:1f:30:fa:60:7a:fc:82:5f:ca:23:0f:0c:32:8e:
92:3b:f5:9c:f5:ee:59:89:ba:0d:b1:72:99:9d:14:
76:04:8c:61:54:33:41:b5:4a:b3:eb:4e:ee:20:63:
df:06:2a:a1:e9:c2:ff:5f:cd:bb:8e:04:e6:a1:90:
05:39:f3:60:6c:17:bc:a4:68:43:31:14:99:80:b2:
74:6d:da:5e:2c:92:71:c9:9a:e9:92:b2:28:ef:2f:
e1:25:a3:a7:c0:16:ef:79:33:ec:0c:c1:da:8f:e3:
0b:0f:ae:1b:61:df:da:d1:66:45:7b:ed:ff:38:40:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BE:BA:F9:26:87:3B:58:9C:B0:35:C1:0B:19:41:3A:E9:73:9C:D6
X509v3 Authority Key Identifier:
keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.18.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6c:3a:2c:82:05:44:c6:c6:27:a7:6d:75:78:96:9e:44:0f:
74:22:a3:c0:9e:98:07:1e:a8:74:2d:0d:dd:d0:55:fc:bd:11:
62:13:a2:f7:8d:e3:0a:b4:03:d6:4d:65:72:ec:72:51:4a:87:
18:d7:df:8e:61:03:e8:15:00:ac:db:48:c0:ae:c9:6a:17:e6:
bc:b8:89:5d:98:df:1b:b9:5b:91:7c:dc:90:e0:ea:96:f5:22:
17:20:c0:a6:cc:f6:ed:ae:7d:0d:de:39:0d:3b:d3:a7:30:ec:
76:8b:2b:9f:4c:7b:a2:59:2d:03:b6:b0:f8:7f:62:08:c2:95:
49:5c:e2:be:e7:7f:66:a5:35:32:74:5a:81:51:0f:37:fc:47:
bf:57:bf:dd:c7:9f:74:38:be:dc:b2:a6:e9:07:81:f9:3b:11:
50:21:14:a1:fe:9f:f7:f0:fe:74:cb:b7:98:40:d9:ae:83:29:
73:06:32:af:44:30:f7:21:bd:60:ab:a1:e0:6e:b9:f4:f1:8f:
60:e0:00:d0:95:9c:e7:71:4b:59:0d:06:e6:34:9e:33:a0:bc:
69:93:4c:c3:69:60:88:37:91:d8:54:03:65:82:43:3e:72:70:
db:3b:9d:53:62:88:d2:6b:85:fc:b2:b2:72:bf:22:61:c7:d0:
5f:91:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:00 2026 by rpki-client