Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa
File: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (raw, json)
Hash identifier: epbpNBb6vQYG/H5qCJr1wsSydIaARIPkXjzEZuAXwQ4=
Subject key identifier: 06:9F:E3:6D:CB:77:3C:1B:D9:A1:B1:1E:0F:67:DC:88:8C:09:7A:25
Certificate issuer: /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
Certificate serial: 157EB3829FB4C0D79463F0556BE5865F8547494C
Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa
Signing time: Wed 29 Apr 2026 06:00:02 +0000
ROA not before: Wed 29 Apr 2026 05:55:02 +0000
ROA not after: Wed 28 Apr 2027 06:00:02 +0000
asID: 149922
IP address blocks: 103.191.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:7e:b3:82:9f:b4:c0:d7:94:63:f0:55:6b:e5:86:5f:85:47:49:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
Validity
Not Before: Apr 29 05:55:02 2026 GMT
Not After : Apr 28 06:00:02 2027 GMT
Subject: CN=069FE36DCB773C1BD9A1B11E0F67DC888C097A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:c0:19:71:46:eb:06:b7:bc:ae:7f:55:00:
71:e4:85:e2:f0:92:8f:dd:c0:11:e7:dd:36:03:32:
cf:11:fc:6a:e7:87:e3:ce:dd:ef:8b:88:c6:f7:87:
b8:34:d3:1f:0d:8e:79:28:9b:af:d8:fb:ba:15:27:
37:24:16:23:74:a6:e7:af:d0:ea:88:1f:5f:f9:c2:
77:e7:f4:e6:41:26:95:d2:0d:96:d1:12:57:64:51:
b0:b2:87:d8:de:1d:bb:bc:d0:03:2d:fe:27:7f:93:
d1:27:3d:99:8c:19:b7:c9:2f:34:b9:48:9c:78:e2:
b3:d1:9e:14:26:89:40:4c:82:ac:6a:a8:ff:80:61:
78:b0:28:37:f1:f4:b7:2c:2a:3f:c2:ca:a5:24:dd:
b4:fe:70:0b:2d:a7:e8:de:b4:19:d7:50:6b:0d:3b:
82:48:37:86:18:e3:15:58:44:14:2d:bd:f1:34:b2:
63:3a:e2:e2:6c:8c:cd:d9:e7:ad:32:e2:66:fd:59:
89:d5:47:5a:00:d1:48:32:d0:6d:bc:e8:73:1f:c9:
2c:79:e8:8a:bd:6f:c0:a0:2a:04:1a:21:16:48:b7:
67:05:a1:dc:12:e8:c6:b0:a2:ae:18:6a:7a:25:cc:
0c:72:d0:22:80:06:28:4a:69:87:4a:13:96:9d:a4:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9F:E3:6D:CB:77:3C:1B:D9:A1:B1:1E:0F:67:DC:88:8C:09:7A:25
X509v3 Authority Key Identifier:
keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.141.0/24
Signature Algorithm: sha256WithRSAEncryption
07:bc:73:46:74:a0:5b:f0:46:e9:1d:8f:b3:58:ef:e3:04:3c:
3f:2a:56:18:7a:ce:06:0d:7f:02:1b:60:1d:c2:ea:4b:a3:9a:
58:8a:96:06:79:e5:eb:8a:0a:06:e9:75:be:cf:a5:97:7e:2a:
65:b6:36:df:7e:b9:b0:4f:c8:51:3c:e6:5d:b1:d1:c3:c0:56:
f1:18:ed:2a:58:3d:e0:43:32:47:52:fa:75:71:49:44:db:6f:
b2:db:ba:a1:18:f2:c4:f2:11:86:42:9f:b2:1b:d7:43:00:1a:
6b:7a:d7:bc:82:77:b5:fd:af:cc:30:69:43:d7:f5:1c:c1:ae:
cb:bf:2d:64:60:2f:0b:47:9b:c3:90:01:db:a9:a7:6b:b6:be:
44:a3:1e:27:c4:c3:ae:5c:e8:fc:09:0d:b0:d6:fa:cb:3e:9f:
f4:3b:e3:85:96:16:74:1d:55:f0:53:9e:87:e8:2a:7b:86:26:
87:a8:5c:e5:25:c2:83:a7:0e:1a:e8:b1:ab:47:df:8e:7f:35:
aa:9b:62:86:15:b3:a2:6d:cb:f9:ae:ca:79:51:12:42:ad:e3:
04:64:2a:d6:7a:d8:8e:11:73:52:77:08:68:9a:b1:d7:d6:b7:
87:da:23:7a:ba:2c:09:dc:35:29:23:1d:00:58:e1:5b:e1:9f:
a1:b7:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:45:13 2026 by rpki-client