Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa
File: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (raw, json)
Hash identifier: IqsL3oGkvgtcuhjnxANij8h6uajCYq8Mf2MQq3urX+s=
Subject key identifier: AD:6C:E4:14:0B:09:12:9A:0B:6B:0F:03:5D:D7:47:80:D2:BB:FF:04
Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657
Certificate serial: 0372B552EF812C3BECCD9F7727965FE4B675747B
Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa
Signing time: Thu 23 Apr 2026 14:00:02 +0000
ROA not before: Thu 23 Apr 2026 13:55:02 +0000
ROA not after: Thu 22 Apr 2027 14:00:02 +0000
asID: 147131
IP address blocks: 103.176.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:72:b5:52:ef:81:2c:3b:ec:cd:9f:77:27:96:5f:e4:b6:75:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657
Validity
Not Before: Apr 23 13:55:02 2026 GMT
Not After : Apr 22 14:00:02 2027 GMT
Subject: CN=AD6CE4140B09129A0B6B0F035DD74780D2BBFF04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:49:c3:a7:f6:4d:65:40:f5:b2:6b:2c:81:
83:79:21:8b:61:d7:18:b6:d2:af:cb:89:dc:ec:b2:
b0:ab:c7:47:33:77:80:7e:55:41:b9:3d:92:b6:5e:
69:35:78:9b:02:c3:f4:ba:9c:1d:65:a3:e1:3f:dc:
75:fb:55:fd:0d:1b:7d:d7:73:be:d5:7c:54:1c:d3:
9b:0f:fd:ec:dc:12:e7:cc:2b:c5:73:83:78:79:ce:
f1:f3:f8:64:bc:2f:0d:f5:ca:c0:20:5a:b3:af:13:
ce:86:20:f9:6f:51:3f:74:59:63:5c:39:f0:9a:d4:
8d:26:88:ab:b9:37:a9:64:9e:30:77:44:5a:42:2c:
17:09:1a:03:13:ff:b4:13:ea:f3:20:52:55:b6:95:
61:1a:72:ca:ee:aa:c2:b0:b7:f3:8c:22:ea:1b:a5:
64:b7:87:5a:9d:e1:cf:68:e9:32:a9:48:27:3f:d8:
85:47:52:32:84:e2:18:2d:73:2a:64:73:92:0a:98:
cf:a4:80:3e:d9:d3:83:af:f6:97:8f:27:a0:b2:09:
fb:6e:63:89:a5:f2:5c:d3:05:e0:b1:25:9d:61:74:
42:fb:88:3f:b5:e3:bd:a2:28:a7:79:2c:b3:86:d7:
0a:23:20:0b:31:19:8c:c9:03:fe:fd:21:dc:a3:9c:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6C:E4:14:0B:09:12:9A:0B:6B:0F:03:5D:D7:47:80:D2:BB:FF:04
X509v3 Authority Key Identifier:
keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.96.0/23
Signature Algorithm: sha256WithRSAEncryption
40:a4:da:30:7e:68:e4:26:99:cf:46:ce:bb:d6:7a:cf:21:ee:
a4:5e:94:19:56:51:41:67:9c:47:72:a9:e1:db:ca:4e:5e:67:
59:fd:e2:d7:ff:06:a7:e3:39:fe:d8:65:1a:b4:fd:eb:13:23:
04:4c:c2:a3:7c:53:e3:d6:56:74:00:ef:fc:37:50:7f:84:dd:
67:60:da:4f:ad:ad:d8:2b:70:2c:20:7d:c0:de:30:f7:1d:bf:
8a:16:e2:74:53:a9:7e:93:c7:d5:7a:7a:9e:c2:e7:47:a6:0a:
40:b1:4a:0f:85:34:4f:2b:4d:fd:b3:2f:98:e9:97:f2:a0:43:
0a:91:32:47:3f:e3:32:24:1f:87:d9:e5:24:3e:a4:f0:e4:42:
c9:c8:62:1e:1e:9c:48:f0:ce:58:6e:81:92:ad:af:87:6e:1b:
a8:bc:b8:94:fc:b7:ad:01:0d:c8:84:51:85:65:4c:3d:0a:a8:
83:8a:81:c6:ef:f1:19:81:5c:0e:18:39:63:e2:ac:23:ba:22:
2f:86:13:ab:b6:29:a8:63:b2:73:44:60:79:97:fa:dd:d2:27:
95:69:7c:ba:b9:bf:5d:71:78:f3:80:38:b5:2e:c7:b4:22:96:
5c:e4:54:eb:02:d9:a9:b7:0d:7c:ec:21:92:b0:f6:63:b3:fa:
d9:e7:48:a1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUA3K1Uu+BLDvszZ93J5Zf5LZ1dHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF
MzdCQjY1NzAeFw0yNjA0MjMxMzU1MDJaFw0yNzA0MjIxNDAwMDJaMDMxMTAvBgNV
BAMTKEFENkNFNDE0MEIwOTEyOUEwQjZCMEYwMzVERDc0NzgwRDJCQkZGMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dUnDp/ZNZUD1smssgYN5IYth
1xi20q/LidzssrCrx0czd4B+VUG5PZK2Xmk1eJsCw/S6nB1lo+E/3HX7Vf0NG33X
c77VfFQc05sP/ezcEufMK8Vzg3h5zvHz+GS8Lw31ysAgWrOvE86GIPlvUT90WWNc
OfCa1I0miKu5N6lknjB3RFpCLBcJGgMT/7QT6vMgUlW2lWEacsruqsKwt/OMIuob
pWS3h1qd4c9o6TKpSCc/2IVHUjKE4hgtcypkc5IKmM+kgD7Z04Ov9pePJ6CyCftu
Y4ml8lzTBeCxJZ1hdEL7iD+1472iKKd5LLOG1wojIAsxGYzJA/79IdyjnFwTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrWzkFAsJEpoLaw8DXddHgNK7/wQwHwYDVR0j
BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx
QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC
QjY1Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMzRkYzNmLTMwOGYtNGRlMS1h
MzY1LTcwMWJkOWNmMTAwNC8wLzMxMzAzMzJlMzEzNzM2MmUzOTM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM3MzEzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7BgMA0GCSqG
SIb3DQEBCwUAA4IBAQBApNowfmjkJpnPRs671nrPIe6kXpQZVlFBZ5xHcqnh28pO
XmdZ/eLX/wan4zn+2GUatP3rEyMETMKjfFPj1lZ0AO/8N1B/hN1nYNpPra3YK3As
IH3A3jD3Hb+KFuJ0U6l+k8fVenqewudHpgpAsUoPhTRPK039sy+Y6ZfyoEMKkTJH
P+MyJB+H2eUkPqTw5ELJyGIeHpxI8M5YboGSra+HbhuovLiU/LetAQ3IhFGFZUw9
CqiDioHG7/EZgVwOGDlj4qwjuiIvhhOrtimoY7JzRGB5l/rd0ieVaXy6ub9dcXjz
gDi1Lse0IpZc5FTrAtmptw187CGSsPZjs/rZ50ih
-----END CERTIFICATE-----
Generated at Sun Jul 19 12:42:50 2026 by rpki-client