Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa
File: 3130332e38302e39352e302f32342d3234203d3e20313439393138.roa (raw, json)
Hash identifier: jAL/ECHAbOJgSDTp1r4MaxIII7ekBOaXUFH9gpg8CAw=
Subject key identifier: 58:A5:5E:DB:66:C8:61:5E:C2:76:7B:78:96:D1:1B:FF:0F:75:06:32
Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial: 43FB87A37F26FB476BA8D2DC385FE02F20FD434D
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa
Signing time: Wed 22 Apr 2026 04:00:00 +0000
ROA not before: Wed 22 Apr 2026 03:55:00 +0000
ROA not after: Wed 21 Apr 2027 04:00:00 +0000
asID: 149918
IP address blocks: 103.80.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:fb:87:a3:7f:26:fb:47:6b:a8:d2:dc:38:5f:e0:2f:20:fd:43:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Validity
Not Before: Apr 22 03:55:00 2026 GMT
Not After : Apr 21 04:00:00 2027 GMT
Subject: CN=58A55EDB66C8615EC2767B7896D11BFF0F750632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:d7:7a:6a:f8:06:da:55:60:f1:f5:56:14:
48:97:d4:eb:c4:1a:32:42:e2:13:eb:ce:0d:fa:b6:
c5:c6:c5:3d:a7:46:88:e8:f9:cc:c6:46:49:73:b2:
17:c1:5d:21:e6:be:bc:f3:24:00:d4:99:98:28:f0:
b9:25:a3:08:09:27:8d:65:f1:57:59:1a:1f:73:73:
52:ea:cf:3c:3a:be:1d:6c:07:42:f9:38:7c:b7:25:
8f:99:39:e4:f0:1f:fd:4c:a0:2a:f8:cf:c5:a5:2d:
64:69:d7:55:5a:43:61:0c:54:f8:bd:d3:bf:bb:e3:
ac:4d:89:94:16:6f:f1:1c:00:4d:77:13:28:dc:8e:
9f:7e:69:6b:66:fc:39:fa:3f:12:c3:3a:3a:f1:7e:
6e:c4:45:dd:9b:ae:77:45:75:3e:88:bb:b9:14:98:
79:0d:08:3b:06:3a:c2:8e:80:bb:44:9b:f9:9b:8d:
b0:09:ae:dc:a4:e7:4b:88:c7:be:23:a9:f6:c4:f6:
2b:2f:1e:f5:fa:9f:f8:d7:c9:db:a8:4c:ef:38:5f:
7d:1f:0e:34:81:23:1f:a4:54:5b:86:e1:ea:2b:8f:
26:4f:85:dc:32:de:4b:ca:e6:dc:ee:40:83:00:5d:
d8:eb:da:26:1e:93:c7:df:ac:c9:ee:5c:44:dc:a1:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A5:5E:DB:66:C8:61:5E:C2:76:7B:78:96:D1:1B:FF:0F:75:06:32
X509v3 Authority Key Identifier:
keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39352e302f32342d3234203d3e20313439393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.95.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d9:d0:1c:f7:0b:71:d9:5f:e3:94:9a:76:6d:67:4b:46:60:
ae:c5:b6:40:69:18:8d:07:61:97:a5:b4:82:bc:bd:d1:f8:35:
1a:ee:ce:cf:55:12:83:02:0a:de:8c:4d:ee:96:0c:3e:87:10:
b0:34:28:1b:ed:a1:f3:8b:18:9f:aa:33:77:aa:dd:5d:fa:b8:
77:14:9f:df:c3:6e:0c:f7:21:86:d8:7f:09:31:1d:f8:dc:c3:
73:ce:79:fd:ed:81:df:c8:cf:ef:8c:86:7f:22:48:a5:f2:77:
ca:0c:e7:55:57:c3:7f:be:ce:0e:7e:1f:9d:e6:15:32:4b:f0:
b2:0b:a4:b6:b0:3d:2b:e0:f5:38:a8:6e:bf:bf:8b:a4:d6:38:
3c:8d:8a:81:92:3e:9c:63:5d:c3:1b:60:7d:d2:e6:e5:4a:fa:
81:57:35:c0:33:87:1d:9c:04:d8:de:ea:3b:ff:7c:23:e3:3d:
ec:86:20:bc:97:d2:be:09:86:7e:2d:ec:b8:66:d5:8e:9b:ea:
3d:96:a5:36:07:1b:ec:e8:2b:dc:ae:91:ed:97:d1:40:ed:ba:
81:86:1f:81:0b:01:fa:6d:c5:b3:94:14:da:2e:6b:8b:9f:bd:
71:f6:5b:45:61:d8:59:69:85:cc:7a:d3:19:ad:35:e5:d3:ec:
c1:59:1b:9c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQ/uHo38m+0drqNLcOF/gLyD9Q00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE
NjdENjUxMTAeFw0yNjA0MjIwMzU1MDBaFw0yNzA0MjEwNDAwMDBaMDMxMTAvBgNV
BAMTKDU4QTU1RURCNjZDODYxNUVDMjc2N0I3ODk2RDExQkZGMEY3NTA2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWatd6avgG2lVg8fVWFEiX1OvE
GjJC4hPrzg36tsXGxT2nRojo+czGRklzshfBXSHmvrzzJADUmZgo8LklowgJJ41l
8VdZGh9zc1Lqzzw6vh1sB0L5OHy3JY+ZOeTwH/1MoCr4z8WlLWRp11VaQ2EMVPi9
07+746xNiZQWb/EcAE13Eyjcjp9+aWtm/Dn6PxLDOjrxfm7ERd2brndFdT6Iu7kU
mHkNCDsGOsKOgLtEm/mbjbAJrtyk50uIx74jqfbE9isvHvX6n/jXyduoTO84X30f
DjSBIx+kVFuG4eorjyZPhdwy3kvK5tzuQIMAXdjr2iYek8ffrMnuXETcoQQ/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWKVe22bIYV7Cdnt4ltEb/w91BjIwHwYDVR0j
BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx
OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE
NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzAzMzJlMzgzMDJlMzkzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzOTM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdQXzANBgkqhkiG
9w0BAQsFAAOCAQEAMtnQHPcLcdlf45Sadm1nS0ZgrsW2QGkYjQdhl6W0gry90fg1
Gu7Oz1USgwIK3oxN7pYMPocQsDQoG+2h84sYn6ozd6rdXfq4dxSf38NuDPchhth/
CTEd+NzDc855/e2B38jP74yGfyJIpfJ3ygznVVfDf77ODn4fneYVMkvwsguktrA9
K+D1OKhuv7+LpNY4PI2KgZI+nGNdwxtgfdLm5Ur6gVc1wDOHHZwE2N7qO/98I+M9
7IYgvJfSvgmGfi3suGbVjpvqPZalNgcb7Ogr3K6R7ZfRQO26gYYfgQsB+m3Fs5QU
2i5ri5+9cfZbRWHYWWmFzHrTGa015dPswVkbnA==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:34 2026 by rpki-client