Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa
File: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (raw, json)
Hash identifier: GhaGRk7dOcXvh4IGCXMzaxo90dRgrzQ1yaORkH9z79Y=
Subject key identifier: BA:42:4D:07:BD:DB:50:43:29:E6:C5:A3:61:FF:A1:BA:FC:38:99:9B
Certificate issuer: /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Certificate serial: 407EBA935A4363CF1AAF5D58095BDBBB457B2EB4
Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa
Signing time: Fri 24 Apr 2026 03:02:21 +0000
ROA not before: Fri 24 Apr 2026 02:57:21 +0000
ROA not after: Fri 23 Apr 2027 03:02:21 +0000
asID: 151506
IP address blocks: 103.234.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7e:ba:93:5a:43:63:cf:1a:af:5d:58:09:5b:db:bb:45:7b:2e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Validity
Not Before: Apr 24 02:57:21 2026 GMT
Not After : Apr 23 03:02:21 2027 GMT
Subject: CN=BA424D07BDDB504329E6C5A361FFA1BAFC38999B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:59:fd:ed:c4:70:d6:be:7a:d1:89:d7:c9:
27:54:f0:2c:da:1d:ae:fc:d3:1b:a1:ea:c5:b6:90:
6c:1d:19:b0:23:fd:82:98:24:33:63:1c:83:4a:1b:
26:2f:c4:ab:00:ee:08:68:69:14:36:0b:50:b7:b4:
f3:ce:bc:db:5d:30:d4:ed:59:dd:03:dd:2c:15:ca:
0e:00:23:76:31:58:01:61:5f:d1:c3:15:6f:ae:0b:
98:bb:c8:50:ea:ba:96:a3:5a:ea:7e:e7:86:00:68:
7c:5d:d2:69:f8:b7:d2:85:c2:8a:a1:39:1e:4b:84:
d9:85:97:9e:3b:77:5a:ea:cd:1f:a7:8e:f2:69:1f:
db:dc:0a:20:d0:3c:77:79:3a:ee:f9:70:b7:2d:f0:
1d:e3:9a:1b:1b:f8:6d:51:cb:a2:82:61:67:66:3d:
99:8b:6b:22:16:96:94:44:b5:4b:76:15:68:26:08:
f6:8a:de:65:27:ca:09:9d:8b:e1:37:e6:04:15:32:
ed:78:08:ca:11:c2:3f:8a:90:7a:f9:df:0e:2a:5a:
ac:f5:6d:79:f5:d4:8e:35:6a:7c:27:68:2e:ed:10:
15:7c:99:c7:a7:86:59:41:b0:db:db:e9:1b:8a:83:
a7:93:4e:61:ad:f4:e6:14:f1:11:80:12:30:32:22:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:4D:07:BD:DB:50:43:29:E6:C5:A3:61:FF:A1:BA:FC:38:99:9B
X509v3 Authority Key Identifier:
keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.19.0/24
Signature Algorithm: sha256WithRSAEncryption
60:27:1f:05:e0:0d:b5:7e:68:7e:5f:c7:95:73:30:fe:42:05:
52:2a:2b:7d:85:19:d3:36:6f:10:6f:d2:7e:cb:15:1e:b4:9c:
1a:1a:01:0c:7e:cf:5f:3c:99:52:e7:bd:1f:f5:44:28:65:60:
3e:c8:8f:ff:d9:91:b0:f5:e8:9d:03:35:d3:50:cf:de:19:d3:
0b:a9:35:30:8f:52:9b:bd:f7:7a:61:86:ee:f2:d2:eb:28:c2:
20:4f:1a:d5:fa:46:91:bc:df:0c:23:b0:82:73:9f:5e:80:68:
83:ec:22:5f:ce:b3:37:a8:22:57:f1:dd:c7:c0:5c:ba:6c:ae:
6a:a7:dd:f0:83:bf:ec:4a:e3:cf:d2:58:f8:83:ed:9f:69:9b:
90:24:2b:2e:c8:3b:d7:9e:94:db:dc:8c:78:15:a0:98:24:bd:
1b:6e:d5:7c:91:ec:0c:07:52:63:5b:1b:4b:dd:12:9d:3a:e5:
99:14:0e:cd:ce:77:09:88:72:26:67:46:89:bc:69:1c:bf:3b:
8c:64:6a:8b:fe:81:b2:44:6f:ca:6d:17:8a:37:38:e6:44:6d:
ef:23:17:6c:a0:f6:2f:fc:5e:50:78:ab:22:c2:c4:b3:39:85:
93:27:fc:4d:be:f8:25:7f:55:ce:12:a1:55:68:83:ca:f8:57:
d3:54:0f:f1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQH66k1pDY88ar11YCVvbu0V7LrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIzMUY5
NjJBNkMyNjAeFw0yNjA0MjQwMjU3MjFaFw0yNzA0MjMwMzAyMjFaMDMxMTAvBgNV
BAMTKEJBNDI0RDA3QkREQjUwNDMyOUU2QzVBMzYxRkZBMUJBRkMzODk5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfVn97cRw1r560YnXySdU8Cza
Ha780xuh6sW2kGwdGbAj/YKYJDNjHINKGyYvxKsA7ghoaRQ2C1C3tPPOvNtdMNTt
Wd0D3SwVyg4AI3YxWAFhX9HDFW+uC5i7yFDqupajWup+54YAaHxd0mn4t9KFwoqh
OR5LhNmFl547d1rqzR+njvJpH9vcCiDQPHd5Ou75cLct8B3jmhsb+G1Ry6KCYWdm
PZmLayIWlpREtUt2FWgmCPaK3mUnygmdi+E35gQVMu14CMoRwj+KkHr53w4qWqz1
bXn11I41anwnaC7tEBV8mcenhllBsNvb6RuKg6eTTmGt9OYU8RGAEjAyImb7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUukJNB73bUEMp5sWjYf+huvw4mZswHwYDVR0j
BBgwFoAUc2XVsa4wxbZFCv3emLojH5YqbCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODgzMjljYS1lOGY3LTRkM2QtYWNlNC04MDdmOGFhNThhZTAvMC83MzY1RDVCMUFF
MzBDNUI2NDUwQUZEREU5OEJBMjMxRjk2MkE2QzI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIzMUY5NjJB
NkMyNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4ODMyOWNhLWU4ZjctNGQzZC1h
Y2U0LTgwN2Y4YWE1OGFlMC8wLzMxMzAzMzJlMzIzMzM0MmUzMTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+oTMA0GCSqG
SIb3DQEBCwUAA4IBAQBgJx8F4A21fmh+X8eVczD+QgVSKit9hRnTNm8Qb9J+yxUe
tJwaGgEMfs9fPJlS570f9UQoZWA+yI//2ZGw9eidAzXTUM/eGdMLqTUwj1Kbvfd6
YYbu8tLrKMIgTxrV+kaRvN8MI7CCc59egGiD7CJfzrM3qCJX8d3HwFy6bK5qp93w
g7/sSuPP0lj4g+2faZuQJCsuyDvXnpTb3Ix4FaCYJL0bbtV8kewMB1JjWxtL3RKd
OuWZFA7NzncJiHImZ0aJvGkcvzuMZGqL/oGyRG/KbReKNzjmRG3vIxdsoPYv/F5Q
eKsiwsSzOYWTJ/xNvvglf1XOEqFVaIPK+FfTVA/x
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:00 2026 by rpki-client