Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa
File: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (raw, json)
Hash identifier: dnJ5obqkVlUW9vc+OWxA0COB4dW3hY4AwINjzDhf/2I=
Subject key identifier: 8E:0F:59:4E:9A:C8:7A:9A:2E:5E:8C:42:50:A0:7A:F6:27:4F:48:6D
Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial: 5242DEA71DB6122FF462B5926AE8D10D9D4BC0E5
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa
Signing time: Sun 19 Apr 2026 11:00:02 +0000
ROA not before: Sun 19 Apr 2026 10:55:02 +0000
ROA not after: Sun 18 Apr 2027 11:00:02 +0000
asID: 138866
IP address blocks: 103.140.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:42:de:a7:1d:b6:12:2f:f4:62:b5:92:6a:e8:d1:0d:9d:4b:c0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Validity
Not Before: Apr 19 10:55:02 2026 GMT
Not After : Apr 18 11:00:02 2027 GMT
Subject: CN=8E0F594E9AC87A9A2E5E8C4250A07AF6274F486D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:76:4c:bf:d2:1f:8f:11:a4:ab:df:08:61:
7f:a1:db:de:f3:7e:ac:fd:92:0e:c6:4f:59:63:3e:
22:7d:66:48:64:1b:56:fc:b0:aa:75:b8:f4:a2:af:
76:76:33:b3:8d:04:17:21:d6:8b:72:d8:74:d2:36:
3f:64:9d:e2:ab:f9:65:b4:7d:7b:24:e6:51:38:49:
6f:90:a3:b6:bf:e8:d1:70:bb:56:f7:37:7d:00:fc:
53:57:53:d0:4a:bf:94:93:71:dd:32:7b:8c:f5:58:
50:e0:d0:26:a9:ec:94:77:00:16:a0:b7:63:16:1f:
b9:76:d3:52:34:19:74:6a:8f:d3:7d:93:76:68:31:
a2:23:c8:bf:49:82:fb:6a:91:bf:b2:09:de:b6:ea:
fc:5e:83:8c:7f:6e:04:33:7e:bd:3d:bb:8a:0b:86:
84:b8:12:11:46:6e:d0:a5:f6:70:fd:b3:a2:5c:54:
b8:fd:19:07:f9:a3:8a:ae:d1:8f:b3:11:79:3c:5b:
4f:af:bf:c4:c1:4f:48:fc:70:ad:07:7b:83:ad:3d:
83:8c:e8:c1:0b:2a:10:2e:48:ce:de:71:31:ce:49:
a4:b4:49:34:e7:bf:04:c4:50:a7:0c:a1:d7:53:df:
fe:4a:96:0b:d2:14:1c:98:a1:43:db:63:46:f1:5a:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:59:4E:9A:C8:7A:9A:2E:5E:8C:42:50:A0:7A:F6:27:4F:48:6D
X509v3 Authority Key Identifier:
keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.131.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:4a:06:3d:f5:34:ed:b2:13:58:3f:70:10:08:36:cb:15:31:
ac:10:6f:71:7c:5a:55:8c:c8:2f:07:16:7d:7d:7c:d1:d1:de:
66:b1:71:96:2f:54:a6:2d:b4:15:4f:97:67:d5:98:7c:c9:2b:
e2:b9:41:dd:23:79:86:8a:8c:f2:97:48:6c:1c:6f:2f:a4:3c:
7e:20:c2:e0:80:bf:56:c2:ec:ec:53:3a:19:84:eb:c6:4b:ee:
a6:99:35:33:10:3a:02:74:2f:9c:e8:46:4e:d5:78:f6:b9:8b:
d1:1f:15:c5:99:af:5e:30:36:e2:3e:e1:fc:39:e9:75:08:e9:
c7:52:b1:c4:d6:e5:bd:5a:0b:a0:de:62:01:35:81:7d:8d:00:
16:e3:11:58:56:7b:d5:0c:b3:2f:60:f1:9e:e9:40:04:f8:9d:
66:62:52:24:66:99:ca:d2:bb:71:a6:5a:9b:5f:0d:7e:6a:8c:
0d:50:62:a6:0c:15:bd:79:67:22:3b:f6:d1:b6:7b:a3:62:06:
24:df:b9:28:61:03:d7:0b:ea:fe:63:c8:49:14:ed:5b:90:e4:
3c:c1:87:5b:6a:7b:14:f5:c5:2e:35:e3:c0:c5:57:ac:ca:28:
30:f7:08:67:6a:11:a2:22:57:29:1c:86:9b:72:f6:a0:49:96:
cc:2c:7f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:11 2026 by rpki-client