Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa
File: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (raw, json)
Hash identifier: 8eOGJAh6LVLLrIlSLuGaeepcxnrM7IQVoFSTdiUQNzk=
Subject key identifier: 71:48:B4:31:BD:D7:76:06:89:25:BE:9D:99:F2:32:05:9E:2A:80:9D
Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C
Certificate serial: 292DAB94FDA6E49B1D5F634279D8E15BC30E88C4
Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa
Signing time: Thu 23 Apr 2026 16:00:02 +0000
ROA not before: Thu 23 Apr 2026 15:55:02 +0000
ROA not after: Thu 22 Apr 2027 16:00:02 +0000
asID: 141147
IP address blocks: 103.159.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2d:ab:94:fd:a6:e4:9b:1d:5f:63:42:79:d8:e1:5b:c3:0e:88:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C
Validity
Not Before: Apr 23 15:55:02 2026 GMT
Not After : Apr 22 16:00:02 2027 GMT
Subject: CN=7148B431BDD776068925BE9D99F232059E2A809D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:6a:5a:52:99:8e:d2:b4:ea:d6:0c:93:c9:
23:79:48:e9:5b:c9:5e:41:92:50:65:9e:14:93:5f:
9f:de:cf:13:18:9e:c0:58:0b:a6:2a:95:0a:14:df:
b8:af:47:dc:5d:22:ba:88:37:49:bf:ac:63:bb:33:
1f:78:58:a5:10:ff:98:91:45:7f:f8:1e:6e:35:71:
95:a3:d2:28:74:96:d2:be:f2:80:8c:da:3a:b2:03:
64:6a:6c:fc:97:ba:b0:e0:cb:83:4e:de:d5:03:43:
0b:0a:8a:ae:39:48:ed:f2:bc:1f:df:7b:3d:fa:e5:
80:3f:cd:16:a2:db:f9:cf:f4:d9:57:49:f6:4e:51:
2f:85:59:04:d0:f3:d3:95:16:7e:77:93:ed:aa:54:
7d:39:cc:ab:23:ec:11:02:83:ed:20:88:ae:71:11:
77:fb:af:84:14:af:78:69:31:aa:d8:12:9e:c3:9f:
70:a8:36:47:ca:af:22:9c:ab:d7:c2:ea:68:6e:7b:
78:af:0f:35:b9:f9:4a:0a:bb:6b:27:f0:58:a6:62:
3f:ed:c4:74:aa:2d:64:52:eb:57:14:c2:22:85:27:
8a:bd:8b:3e:49:86:5c:60:8c:fe:9b:a1:49:56:f7:
0f:36:b9:94:da:4d:8d:51:7f:27:d2:a4:2a:af:d8:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:48:B4:31:BD:D7:76:06:89:25:BE:9D:99:F2:32:05:9E:2A:80:9D
X509v3 Authority Key Identifier:
keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.224.0/23
Signature Algorithm: sha256WithRSAEncryption
97:63:7e:5b:ec:a9:25:41:cd:c7:b7:1c:26:17:04:8b:53:cb:
3d:5d:96:c4:bb:ca:4d:03:4c:b7:a4:e2:77:b5:77:88:4a:69:
b8:55:14:b7:41:2e:c4:1b:a9:ab:d9:44:87:fb:2f:38:88:07:
07:a1:25:92:a4:98:7c:64:5c:4e:1f:1a:85:fc:5a:d1:16:a0:
0b:c7:96:e9:2b:eb:4b:8f:f0:01:6a:6f:27:d4:ef:47:78:cf:
f2:1e:a5:30:37:9d:ce:89:cb:a4:01:75:cf:e6:71:7e:3b:0e:
6c:60:43:44:f6:04:42:56:62:ef:de:e7:e3:4a:2f:48:fc:3b:
9e:ff:27:ca:dc:7a:56:b3:e3:41:77:16:98:90:10:c4:10:69:
4d:12:64:58:36:39:e0:6e:88:f2:40:a0:63:b3:5b:75:08:46:
27:34:07:aa:1b:15:53:2c:7d:66:12:2a:73:76:33:6c:34:02:
f8:95:47:b5:ba:38:b0:69:ae:c1:17:6c:89:0e:25:a0:de:b9:
29:7a:36:4b:c6:a8:a7:6b:63:04:c6:a2:77:b4:d8:36:6b:ff:
7a:c6:6e:96:8a:6e:dd:6c:ab:dc:c2:d4:c8:e5:5e:e8:c4:96:
f5:71:80:98:a6:39:18:18:3d:31:7a:0f:39:88:48:28:61:69:
5d:7c:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:58 2026 by rpki-client