Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa
File: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (raw, json)
Hash identifier: leJRaO/XwJWgxh16G1+pzuj6rSObDQD7X96tNPAU2yM=
Subject key identifier: 38:EC:B0:E0:63:F8:BD:21:88:34:8B:DD:7D:CD:8E:6C:8C:7F:C0:3C
Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial: 3D18E2774ECC31B7D02342CF49B1EC536CF52883
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa
Signing time: Sun 19 Apr 2026 11:00:02 +0000
ROA not before: Sun 19 Apr 2026 10:55:02 +0000
ROA not after: Sun 18 Apr 2027 11:00:02 +0000
asID: 138866
IP address blocks: 103.140.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:18:e2:77:4e:cc:31:b7:d0:23:42:cf:49:b1:ec:53:6c:f5:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Validity
Not Before: Apr 19 10:55:02 2026 GMT
Not After : Apr 18 11:00:02 2027 GMT
Subject: CN=38ECB0E063F8BD2188348BDD7DCD8E6C8C7FC03C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:2d:6f:3c:2d:ef:d0:fc:c2:26:e6:0a:a0:
03:f7:5b:dc:5e:cf:34:68:58:7f:96:21:4b:92:9c:
2b:37:65:a6:c2:73:42:0b:0e:08:11:a2:75:4a:27:
26:96:a8:79:3e:21:31:f9:c5:41:e0:4d:4b:8d:c0:
1e:af:30:08:8b:27:cc:fa:75:81:10:f7:c9:56:28:
93:71:20:b6:2f:07:20:5d:3d:ee:03:9c:ce:67:1f:
85:4e:1e:c5:2f:b8:1d:06:25:08:f6:e1:86:96:a4:
73:d9:d2:7a:f4:d8:50:c3:55:c8:3d:00:da:9d:2f:
27:40:f6:ad:cb:94:dc:60:e9:42:82:89:7c:76:36:
61:37:ee:fa:c0:8f:f9:a0:48:bd:00:fa:c6:16:73:
3e:de:74:99:b6:5c:49:69:48:7e:c6:99:ae:a4:e3:
de:84:0f:b1:91:e8:51:07:47:7e:cf:85:82:6f:dc:
61:11:bb:ce:3b:60:dc:84:8e:01:af:c9:63:84:e3:
33:46:23:f2:00:29:c1:a9:0f:e6:09:a2:94:95:f1:
1c:85:13:a9:b9:8b:f7:cc:2c:41:26:66:bd:a7:c5:
54:b5:3f:4f:f6:4e:5d:e7:d2:ea:77:79:d7:b4:da:
cb:ea:8f:c2:06:4b:3a:f5:26:ee:f2:5c:b3:ee:62:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:B0:E0:63:F8:BD:21:88:34:8B:DD:7D:CD:8E:6C:8C:7F:C0:3C
X509v3 Authority Key Identifier:
keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.130.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:8a:f0:fb:d1:f5:0f:04:b9:ed:dd:f3:74:1e:27:fd:1e:9b:
27:b2:22:1f:dd:1e:5b:c4:ad:c8:db:74:67:29:65:4f:cd:55:
60:d0:3b:d0:d6:90:79:ca:3f:0d:35:79:e6:bd:ca:8f:34:7b:
6a:c0:4d:cb:ed:0b:da:4a:cb:ee:7b:1d:05:5f:98:47:68:e2:
59:99:b7:38:fa:d7:23:93:1a:9d:01:ff:40:db:99:9d:c3:a5:
57:d8:35:f2:2c:e7:9b:23:a9:cd:cb:20:c5:f3:23:d8:c8:8b:
56:8a:17:0b:94:9b:b8:59:22:7d:52:34:64:3e:fc:7d:28:66:
ec:7d:2e:55:1d:ed:5e:79:9c:d7:fb:8f:46:76:47:5f:73:cd:
51:f9:19:26:90:43:42:89:02:94:f7:2e:20:de:75:09:55:bc:
67:47:cc:b7:f9:d1:fb:b8:13:d4:42:10:73:ba:d8:0f:e8:64:
54:ef:ea:0c:13:53:a1:15:39:13:a5:d9:95:c4:f8:7f:a3:91:
ec:30:80:b0:34:6a:3c:c7:46:54:3f:53:bf:bf:ca:a0:8a:b9:
9b:67:42:ae:c1:6d:f5:05:81:cd:82:e1:fa:cf:79:ae:8b:26:
52:86:9d:81:a4:ee:1a:7e:9f:bf:d5:18:12:8f:b5:ed:7e:0b:
03:e8:95:ec
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUPRjid07MMbfQI0LPSbHsU2z1KIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG
QzhBN0U5NzAeFw0yNjA0MTkxMDU1MDJaFw0yNzA0MTgxMTAwMDJaMDMxMTAvBgNV
BAMTKDM4RUNCMEUwNjNGOEJEMjE4ODM0OEJERDdEQ0Q4RTZDOEM3RkMwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+i1vPC3v0PzCJuYKoAP3W9xe
zzRoWH+WIUuSnCs3ZabCc0ILDggRonVKJyaWqHk+ITH5xUHgTUuNwB6vMAiLJ8z6
dYEQ98lWKJNxILYvByBdPe4DnM5nH4VOHsUvuB0GJQj24YaWpHPZ0nr02FDDVcg9
ANqdLydA9q3LlNxg6UKCiXx2NmE37vrAj/mgSL0A+sYWcz7edJm2XElpSH7Gma6k
496ED7GR6FEHR37PhYJv3GERu847YNyEjgGvyWOE4zNGI/IAKcGpD+YJopSV8RyF
E6m5i/fMLEEmZr2nxVS1P0/2Tl3n0up3ede02svqj8IGSzr1Ju7yXLPuYk63AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUOOyw4GP4vSGINIvdfc2ObIx/wDwwHwYDVR0j
BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF
MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB
N0U5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05
NGEwLTBmNDAwZWE2YTM3NS8wLzMxMzAzMzJlMzEzNDMwMmUzMTMzMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjIIwDQYJ
KoZIhvcNAQELBQADggEBAMmK8PvR9Q8Eue3d83QeJ/0emyeyIh/dHlvErcjbdGcp
ZU/NVWDQO9DWkHnKPw01eea9yo80e2rATcvtC9pKy+57HQVfmEdo4lmZtzj61yOT
Gp0B/0DbmZ3DpVfYNfIs55sjqc3LIMXzI9jIi1aKFwuUm7hZIn1SNGQ+/H0oZux9
LlUd7V55nNf7j0Z2R19zzVH5GSaQQ0KJApT3LiDedQlVvGdHzLf50fu4E9RCEHO6
2A/oZFTv6gwTU6EVOROl2ZXE+H+jkewwgLA0ajzHRlQ/U7+/yqCKuZtnQq7BbfUF
gc2C4frPea6LJlKGnYGk7hp+n7/VGBKPte1+CwPolew=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:17 2026 by rpki-client