Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa
File: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (raw, json)
Hash identifier: BOD3p/q+Iyfa9oQegHSiB5pX5xC01IJqCREx5pNbOVE=
Subject key identifier: 68:81:01:CC:90:40:14:B4:5F:19:E8:0F:11:F2:0F:BC:BD:0D:F5:9A
Certificate issuer: /CN=926C43E6DACC18978406A2C9C57272491FFF9536
Certificate serial: 0ED7BF941C0870528BE116F6A0A2746917BA6939
Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa
Signing time: Thu 23 Apr 2026 10:00:02 +0000
ROA not before: Thu 23 Apr 2026 09:55:02 +0000
ROA not after: Thu 22 Apr 2027 10:00:02 +0000
asID: 141075
IP address blocks: 103.155.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d7:bf:94:1c:08:70:52:8b:e1:16:f6:a0:a2:74:69:17:ba:69:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536
Validity
Not Before: Apr 23 09:55:02 2026 GMT
Not After : Apr 22 10:00:02 2027 GMT
Subject: CN=688101CC904014B45F19E80F11F20FBCBD0DF59A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:be:b5:29:c9:e9:ca:66:32:f1:bb:09:bf:
4c:fd:04:3d:46:9b:b8:4a:64:52:11:88:e9:cc:ef:
1d:9f:f8:31:98:d5:2c:15:23:e6:e5:60:15:96:fa:
5b:5b:59:c4:a1:ee:ba:34:3c:19:c8:ea:31:05:13:
bd:f5:d7:60:05:37:a4:1b:9b:76:12:93:7e:57:fc:
50:d1:06:54:69:c6:d1:a7:4d:a1:02:99:5d:e2:e8:
82:5e:0d:fd:23:b5:9d:4d:b6:4b:df:83:45:08:ae:
8b:82:89:97:0b:25:a9:ac:86:4e:e3:90:07:1f:69:
db:1e:eb:fb:b6:e6:07:3e:f5:02:46:b0:aa:0b:09:
79:50:c9:a8:01:0a:86:20:cb:00:97:c7:74:18:cf:
29:6e:37:48:eb:ef:13:a3:7e:a0:0d:32:d7:a3:d4:
6c:81:ab:c2:18:3a:84:39:ee:02:9c:59:0d:a9:26:
65:79:25:f8:e4:42:7e:d1:99:e8:b6:d3:30:82:fe:
1c:5e:6a:5e:7e:41:e2:3e:e0:26:8b:1b:9f:5b:c6:
79:5f:cb:cb:82:f9:4e:b2:63:c2:00:65:28:c2:fd:
33:29:12:77:9d:f4:6f:37:47:2a:18:d6:06:e4:81:
46:83:a3:6c:f5:18:65:cd:dd:fd:4f:1f:35:46:22:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:01:CC:90:40:14:B4:5F:19:E8:0F:11:F2:0F:BC:BD:0D:F5:9A
X509v3 Authority Key Identifier:
keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.224.0/23
Signature Algorithm: sha256WithRSAEncryption
94:44:e8:fa:cd:d0:cd:69:0b:7d:4f:04:d4:fb:e7:03:3b:4f:
06:de:1b:3b:0d:73:65:f4:e8:56:78:e6:a1:53:9c:16:22:c9:
63:a6:0e:68:a7:f7:a5:9d:cf:77:d6:a1:a7:6c:de:4d:51:62:
1b:b9:9f:c7:61:26:36:0b:85:a2:72:27:dc:b2:f9:ac:ed:f7:
62:b4:40:13:6a:68:e9:2b:4c:b8:b6:32:38:c0:8e:d7:30:75:
c8:9a:2e:cc:af:49:6d:c3:0f:36:1b:55:df:d8:dc:7d:91:21:
74:25:b1:fc:b7:ca:1c:5a:68:d1:35:6f:00:e1:62:1b:d1:5d:
76:f9:a3:2f:66:37:d8:9a:da:d4:dd:55:39:60:77:09:59:c0:
18:13:2c:c2:8e:b1:97:37:3d:47:7d:54:b4:27:8e:ab:72:81:
0f:ec:d6:38:2b:4d:ce:9b:5f:00:91:c8:8d:33:ea:80:01:43:
ab:27:68:34:96:9a:b5:0a:b5:5d:c0:f7:24:e1:15:78:4f:35:
63:c5:0a:06:d2:ea:13:e8:51:8f:69:0d:19:ba:29:96:8f:8a:
2f:da:7e:e4:99:30:07:9a:77:9d:46:c9:d6:99:98:b0:a3:40:
3a:53:e4:f7:6f:6e:17:65:20:0d:c1:ee:7a:27:ce:ae:0f:6c:
ca:c1:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:09 2026 by rpki-client