Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa
File: 3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa (raw, json)
Hash identifier: jPZXqxjh3cJXE/UfyTrBg90LVG0RpIvVakkn3Adyw5I=
Subject key identifier: 03:60:5C:C6:51:15:2E:28:41:3B:07:28:6E:45:9C:96:A3:A1:5C:38
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 3179AB13E8D51E4CDBDD1F75529CF7650C2DAA28
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa
Signing time: Tue 28 Apr 2026 10:00:35 +0000
ROA not before: Tue 28 Apr 2026 09:55:35 +0000
ROA not after: Tue 27 Apr 2027 10:00:35 +0000
asID: 45725
IP address blocks: 103.245.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:79:ab:13:e8:d5:1e:4c:db:dd:1f:75:52:9c:f7:65:0c:2d:aa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Apr 28 09:55:35 2026 GMT
Not After : Apr 27 10:00:35 2027 GMT
Subject: CN=03605CC651152E28413B07286E459C96A3A15C38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:4d:65:1a:4b:94:27:09:cd:fc:72:97:6e:
4a:bd:ed:2e:e6:5d:01:ae:b2:d9:06:35:16:b8:9f:
14:13:85:17:b0:d0:98:e5:51:89:3f:8b:b7:65:63:
29:37:ba:0f:d1:1f:ca:5d:b0:ba:2a:55:01:f6:5e:
ac:1f:0c:8a:36:7f:bf:cd:1b:45:f4:5b:23:17:1b:
3f:bb:4c:aa:de:ab:97:63:23:b0:5f:99:df:11:07:
ef:58:c7:7f:0c:92:dd:68:d8:45:a2:eb:1a:1a:94:
00:c1:25:f8:76:92:69:f8:ab:d8:20:d5:9b:f1:58:
22:1d:61:c1:8a:c2:bc:cb:17:48:b2:3d:9e:f6:25:
a1:ac:21:e3:f8:b3:4e:c6:c5:25:e9:41:fa:f7:70:
1d:ce:82:34:8b:6c:f5:83:cf:07:c4:6c:eb:f7:51:
e4:a3:41:03:f3:f3:4e:23:e6:03:1a:e6:9c:a1:e0:
ee:9e:63:d9:4c:dc:2f:33:cf:e4:65:d7:ff:21:34:
c5:d7:00:20:d7:35:a7:ed:c9:1e:b6:e7:9d:26:26:
6e:ba:a6:98:11:38:5b:03:c0:68:af:19:e9:8c:e8:
f5:1e:bd:1c:8e:31:aa:02:9a:72:75:9e:f8:6e:7b:
af:64:8c:db:21:f7:7c:d8:18:66:9b:01:cf:14:f4:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:5C:C6:51:15:2E:28:41:3B:07:28:6E:45:9C:96:A3:A1:5C:38
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.136.0/22
Signature Algorithm: sha256WithRSAEncryption
20:fe:5b:59:2d:d7:16:d7:33:5c:cf:a2:9a:b1:9c:b2:bb:80:
98:3e:44:76:75:d4:b4:6e:f6:80:50:9b:a4:c0:41:48:0b:35:
1a:b2:f9:7d:8a:2e:9f:a4:08:70:87:c7:5c:e6:df:28:05:1d:
dc:f0:d8:b0:fd:cf:20:c3:22:ce:b4:7f:43:14:0f:52:b4:70:
8f:7b:1a:d2:e8:8c:c7:4f:a6:24:3e:1b:91:1e:41:b1:a6:94:
18:01:44:45:ff:3d:89:8c:9b:4c:0f:c5:d4:8e:f0:b0:1c:4f:
c7:fb:63:c0:96:a4:bf:59:1b:21:23:26:a2:fd:ac:2d:22:79:
8c:bc:a3:98:89:45:1b:c7:9b:7a:3e:ca:24:8a:8e:fb:57:a8:
e2:f2:1f:3f:00:b0:3b:47:97:55:9f:18:02:2e:fd:f5:cf:5e:
41:30:c1:63:b2:db:dc:27:4c:87:9a:15:6b:38:a2:1f:be:8c:
fc:ae:22:df:8a:6a:98:23:29:85:27:ea:33:00:82:0a:65:10:
2d:d7:05:a2:fc:ed:f2:80:96:64:d3:65:ae:a9:59:b5:13:23:
7f:9c:85:6b:49:54:d2:a2:9d:19:6d:f1:2d:7c:92:b6:4b:64:
47:fd:37:51:1e:1a:cd:4e:86:46:a1:7b:bb:b1:2d:78:ed:ad:
31:80:f7:8a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMXmrE+jVHkzb3R91Upz3ZQwtqigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yNjA0MjgwOTU1MzVaFw0yNzA0MjcxMDAwMzVaMDMxMTAvBgNV
BAMTKDAzNjA1Q0M2NTExNTJFMjg0MTNCMDcyODZFNDU5Qzk2QTNBMTVDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1U1lGkuUJwnN/HKXbkq97S7m
XQGustkGNRa4nxQThRew0JjlUYk/i7dlYyk3ug/RH8pdsLoqVQH2XqwfDIo2f7/N
G0X0WyMXGz+7TKreq5djI7Bfmd8RB+9Yx38Mkt1o2EWi6xoalADBJfh2kmn4q9gg
1ZvxWCIdYcGKwrzLF0iyPZ72JaGsIeP4s07GxSXpQfr3cB3OgjSLbPWDzwfEbOv3
UeSjQQPz804j5gMa5pyh4O6eY9lM3C8zz+Rl1/8hNMXXACDXNaftyR62550mJm66
ppgROFsDwGivGemM6PUevRyOMaoCmnJ1nvhue69kjNsh93zYGGabAc8U9KypAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUA2BcxlEVLihBOwcobkWclqOhXDgwHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMxMzAzMzJlMzIzNDM1MmUzMTMzMzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/WIMA0GCSqG
SIb3DQEBCwUAA4IBAQAg/ltZLdcW1zNcz6KasZyyu4CYPkR2ddS0bvaAUJukwEFI
CzUasvl9ii6fpAhwh8dc5t8oBR3c8Niw/c8gwyLOtH9DFA9StHCPexrS6IzHT6Yk
PhuRHkGxppQYAURF/z2JjJtMD8XUjvCwHE/H+2PAlqS/WRshIyai/awtInmMvKOY
iUUbx5t6Psokio77V6ji8h8/ALA7R5dVnxgCLv31z15BMMFjstvcJ0yHmhVrOKIf
voz8riLfimqYIymFJ+ozAIIKZRAt1wWi/O3ygJZk02WuqVm1EyN/nIVrSVTSop0Z
bfEtfJK2S2RH/TdRHhrNToZGoXu7sS147a0xgPeK
-----END CERTIFICATE-----
Generated at Sun Jul 19 11:59:10 2026 by rpki-client