Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa
File:                     3130332e38302e39342e302f32332d3233203d3e20313439393138.roa (raw, json)
Hash identifier:          OFeFjnafQ8r4c7o/+lnq0diJcl5ox16sK4thv+k/8uk=
Subject key identifier:   00:80:0B:59:19:E1:BB:83:BF:D9:25:06:7D:33:E4:89:05:6A:F2:DF
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       47E199A7E653AA305FF8BBEFBAA3FB009547901D
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa
Signing time:             Wed 22 Apr 2026 04:00:01 +0000
ROA not before:           Wed 22 Apr 2026 03:55:01 +0000
ROA not after:            Wed 21 Apr 2027 04:00:01 +0000
asID:                     149918
IP address blocks:        103.80.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e1:99:a7:e6:53:aa:30:5f:f8:bb:ef:ba:a3:fb:00:95:47:90:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Apr 22 03:55:01 2026 GMT
            Not After : Apr 21 04:00:01 2027 GMT
        Subject: CN=00800B5919E1BB83BFD925067D33E489056AF2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:81:40:08:5e:db:08:3b:72:52:28:8c:f3:
                    d1:d5:f9:59:62:53:d2:34:5b:5a:a1:a0:08:45:df:
                    b7:f9:ce:f5:02:15:0b:fe:b2:ab:3b:db:00:a1:c1:
                    c3:b2:fd:b3:e1:05:7c:21:36:9b:e6:26:32:0f:74:
                    19:45:e5:91:cf:5a:8e:bc:33:52:02:b3:ab:8a:0f:
                    fa:b5:05:e4:2b:5d:36:73:be:3f:95:5b:47:34:d1:
                    53:4b:34:7e:91:d5:16:2e:07:f8:3e:16:dc:d5:08:
                    8a:5a:18:65:39:2c:45:05:4a:1a:96:b1:d9:f6:ae:
                    91:59:3c:55:58:61:31:d3:42:9a:79:ea:35:18:59:
                    f3:f8:b2:94:c9:f0:5d:be:3b:16:dd:ef:47:a8:f5:
                    26:6b:bc:9e:0d:78:b7:be:d6:be:1c:52:df:af:4d:
                    70:57:9d:9f:73:75:4c:2d:d3:42:8e:8f:c3:2c:cb:
                    60:74:54:1b:80:d7:7f:62:ee:c2:3d:6e:ad:8f:ec:
                    e9:64:57:21:82:9b:c9:28:73:c7:98:eb:af:7d:ce:
                    a8:58:ea:08:39:b2:4a:0c:3a:d4:29:24:3b:ba:d3:
                    ea:c5:dc:fb:2e:67:a1:c2:35:ca:43:d8:bd:5e:df:
                    64:4e:31:86:ce:13:35:73:04:b9:74:56:1a:86:64:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:0B:59:19:E1:BB:83:BF:D9:25:06:7D:33:E4:89:05:6A:F2:DF
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:18:91:8b:e7:ae:98:b9:b0:ed:93:2a:f4:b4:c7:5b:90:
         bb:48:7f:d4:83:2d:af:fc:2a:b3:bc:27:75:83:9b:75:ae:f8:
         3d:79:55:0e:49:44:51:6d:a0:3c:bb:a6:12:6b:61:7b:d0:d4:
         61:4f:91:7b:77:d7:7e:94:12:e2:b1:b1:72:31:56:fc:d4:12:
         b0:f3:dc:bf:b3:68:40:83:ed:21:c0:41:12:4e:18:b2:d0:9c:
         6d:a9:ee:f9:95:a4:ba:e4:f7:ad:ad:d4:0a:2a:ce:8c:07:b8:
         02:0b:29:70:c7:95:99:f9:cf:5f:cf:1d:a2:a4:fb:bd:ae:a0:
         08:fc:06:d5:94:65:b4:58:0f:0b:f9:15:b0:e1:2d:a8:cb:d3:
         91:b0:b8:7f:a9:0d:f0:b9:b1:75:f4:09:07:73:9a:e7:8e:09:
         39:63:07:03:13:d7:06:b9:0c:d1:75:0e:f1:cb:ff:7f:8b:9f:
         5f:ae:f4:af:f9:e6:75:cc:a4:98:f9:8e:3c:60:64:b8:48:c8:
         4c:ea:19:5d:c4:f4:e9:84:9d:55:53:88:07:78:b9:86:76:10:
         c2:bf:e9:43:06:cc:67:a4:aa:c5:fa:ce:ed:7b:9c:66:0c:42:
         48:a9:b1:7e:b4:37:44:80:e3:83:77:e6:2e:e3:31:b0:60:d1:
         7e:f6:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:09 2026 by rpki-client