Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa
File: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (raw, json)
Hash identifier: UAwuYER5N9Rj9OMtFV0hIKhZjXBfV+bttQt+q2qWOBA=
Subject key identifier: 59:F7:52:9E:A2:D4:FF:A7:19:69:55:00:06:14:BB:7B:64:77:AA:06
Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73
Certificate serial: 126FDC142F094DF6B29948D24BF242F023FDAE45
Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa
Signing time: Wed 29 Apr 2026 03:00:00 +0000
ROA not before: Wed 29 Apr 2026 02:55:00 +0000
ROA not after: Wed 28 Apr 2027 03:00:00 +0000
asID: 149883
IP address blocks: 103.189.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6f:dc:14:2f:09:4d:f6:b2:99:48:d2:4b:f2:42:f0:23:fd:ae:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73
Validity
Not Before: Apr 29 02:55:00 2026 GMT
Not After : Apr 28 03:00:00 2027 GMT
Subject: CN=59F7529EA2D4FFA7196955000614BB7B6477AA06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:0e:8a:91:8a:36:e5:38:86:e2:5e:8d:d0:
cc:02:f6:e7:a4:5f:fb:87:b8:dc:84:be:fa:47:34:
b3:b1:1a:88:7f:d5:02:5e:4b:8e:02:d5:b7:04:33:
0e:d2:6c:8f:bb:dc:20:d7:04:ae:ff:b3:ad:c3:22:
1a:4c:2c:3b:22:39:db:33:40:cc:c8:8e:a0:f8:7e:
30:cf:1e:50:32:c2:34:7b:73:9c:a9:4a:9a:f4:28:
78:75:7a:c8:d0:3b:b6:b4:05:bb:6a:cf:7b:f7:d6:
30:f2:52:97:c4:01:dc:81:0d:c4:6e:7b:af:82:ac:
47:66:94:b7:75:23:94:ec:b0:94:78:d3:ee:c9:c4:
26:40:02:7c:c5:18:8b:b1:d9:83:73:5f:61:10:bb:
10:bc:e4:9b:67:53:45:17:9d:f4:06:d0:36:94:9c:
50:83:ad:a1:f7:20:db:5e:59:ae:50:43:69:0b:bf:
f3:76:cf:76:e8:63:f7:25:95:f1:bd:42:a6:9b:b8:
5b:b3:be:30:70:2f:40:cb:f1:63:af:a2:ce:8d:68:
21:1b:ac:00:af:fd:df:5e:4f:66:9b:89:24:e4:21:
52:9c:df:b4:72:69:f4:ec:d1:22:a2:ff:7c:9b:9a:
c3:8d:91:d5:57:55:c0:18:05:2c:6f:7d:77:ba:e6:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:52:9E:A2:D4:FF:A7:19:69:55:00:06:14:BB:7B:64:77:AA:06
X509v3 Authority Key Identifier:
keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.118.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:43:84:d9:6c:e0:13:39:33:12:71:58:a7:a6:5d:31:eb:d7:
8a:33:91:72:48:ec:f6:d2:da:71:16:09:8a:6f:31:23:a8:40:
75:9c:1b:3f:32:9d:1f:38:69:d4:e5:b3:1b:9d:46:a2:6e:3a:
07:1b:79:de:74:d0:fe:ce:10:f8:08:f3:e9:2e:fd:ab:4e:80:
ab:46:e0:43:67:17:9c:c2:f2:3c:6b:ae:30:b5:16:b6:6d:4d:
d9:8a:ed:73:0c:b1:dd:f2:07:88:2d:5e:66:22:72:f4:57:d3:
fc:44:a0:06:4f:b2:a6:8d:1a:11:b0:be:57:27:bd:5d:db:85:
d0:2c:3b:c3:4d:51:10:5b:f4:64:40:3e:a7:ec:9f:04:5f:25:
32:f9:53:35:3c:e9:24:4b:c4:2f:d9:4d:ce:33:74:8d:2e:46:
a4:f3:db:4a:dc:9d:02:fe:98:be:59:f0:ee:16:55:8c:00:27:
e2:c3:0d:9d:df:b8:27:3d:48:32:e4:71:55:7c:f3:84:04:ff:
32:e2:01:5d:dc:fb:2f:f9:94:fe:6c:8d:fc:07:05:24:bf:31:
6b:fd:50:9e:45:bf:67:23:40:9c:eb:ec:39:fe:b9:71:44:a1:
5f:b0:b9:28:fd:5e:36:9d:9b:33:93:53:1d:26:01:f4:f1:10:
29:b1:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:45 2026 by rpki-client