Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439393138.roa
File: 3130332e38302e39342e302f32342d3234203d3e20313439393138.roa (raw, json)
Hash identifier: A1PQH2q3nHcVUcxMtUfiaoff5hku9jBpMMpD8v/rnes=
Subject key identifier: 50:CE:C1:7E:C0:46:7C:81:86:33:A0:74:AC:2C:38:6A:C5:48:AF:79
Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial: 4989DDD5787D27EE1D3885D4AFE374B8D1CF0013
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439393138.roa
Signing time: Wed 22 Apr 2026 05:00:58 +0000
ROA not before: Wed 22 Apr 2026 04:55:58 +0000
ROA not after: Wed 21 Apr 2027 05:00:58 +0000
asID: 149918
IP address blocks: 103.80.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:89:dd:d5:78:7d:27:ee:1d:38:85:d4:af:e3:74:b8:d1:cf:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Validity
Not Before: Apr 22 04:55:58 2026 GMT
Not After : Apr 21 05:00:58 2027 GMT
Subject: CN=50CEC17EC0467C818633A074AC2C386AC548AF79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:ed:28:70:f0:ce:f3:b4:81:c4:11:6a:51:
33:4c:bb:7c:cf:e2:4c:ca:cd:af:7a:5a:b5:db:53:
cc:19:83:89:8d:55:ad:3f:f2:4b:ab:20:2e:53:8e:
2a:52:e2:de:cb:f9:a4:c9:7c:d0:45:3e:fb:73:a1:
b3:16:6a:41:ec:26:88:88:71:b4:5d:4b:bd:44:38:
ef:78:4a:6e:ed:eb:e7:74:b3:2d:cd:ed:ea:c0:88:
bd:33:ad:6d:20:5e:c0:40:3b:10:55:2b:3c:6a:1a:
50:a5:0d:98:c9:38:36:eb:40:b4:66:e0:7f:6b:f8:
85:63:e4:50:1d:36:87:ae:c4:0c:04:a1:14:8d:ba:
a1:13:cc:d9:36:27:0c:ca:a1:c0:40:fb:a6:b4:03:
f2:a3:65:84:0a:9f:3a:1e:64:ae:e5:a7:e0:1e:11:
0d:aa:c3:59:16:b8:b6:1e:62:7f:78:1a:d5:81:2e:
3a:50:64:69:e8:43:73:64:58:d9:e9:c4:74:43:95:
de:c3:f1:38:fb:2d:75:fc:f7:2d:e0:11:67:c1:c7:
dd:2d:41:39:5e:c7:94:a5:a5:39:66:d7:f0:68:e5:
1b:b6:6c:29:af:61:ba:ae:d4:d5:c3:b5:90:4c:24:
c1:8c:d1:5a:0c:f2:dd:8f:b6:41:41:0f:bf:d3:2f:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CE:C1:7E:C0:46:7C:81:86:33:A0:74:AC:2C:38:6A:C5:48:AF:79
X509v3 Authority Key Identifier:
keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:92:5e:80:09:92:77:e2:fe:a2:74:61:eb:8d:98:26:0e:c2:
d2:46:b3:68:c4:e8:84:0a:2f:3a:41:99:16:ef:97:07:1a:cc:
cc:af:23:66:37:9f:62:f0:ae:24:91:01:d7:0f:28:32:bc:fe:
b9:ac:39:19:5f:5b:13:55:03:3d:d5:8f:16:a1:ca:e3:dd:04:
d7:bd:dd:18:70:3a:0c:be:27:17:74:d8:85:1e:d5:ab:25:39:
a0:af:93:34:41:5c:8e:ec:4f:c8:e8:f8:dc:0d:ff:e6:ed:8b:
44:1e:8a:b0:48:a8:b8:90:27:5a:34:83:cb:41:36:59:a7:84:
58:0c:f1:86:de:48:a1:f7:25:7d:8b:54:e2:d3:b4:a9:fe:1b:
95:bf:2e:d2:4e:ed:2f:eb:cb:4a:de:08:24:6b:c2:76:87:a8:
2f:93:45:63:86:a5:10:85:17:d9:a9:17:cb:2e:0e:85:d7:bb:
db:4b:82:b1:4f:01:e2:4b:03:4d:ec:65:a2:2b:b9:74:8d:84:
2c:7e:8b:b9:08:d6:53:a2:f3:aa:6c:36:b8:2b:86:b2:5b:9d:
e7:0f:e5:04:cd:88:3c:47:dc:32:ee:3c:44:76:94:ce:11:78:
38:4e:e4:f5:ca:0a:6b:ab:1e:0b:e1:a5:cd:db:a5:24:71:e1:
11:9c:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:34 2026 by rpki-client