Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
File: 3130332e332e37362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: arkbeE8CUN5wnejLRga/lhWH35Ot6//xJ+wHyhgHl4w=
Subject key identifier: CA:98:D6:D2:6D:8B:23:47:83:C0:CD:AF:95:E4:7B:37:9A:85:16:99
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 274C053C124983A11F04846F73DF1923F3649A98
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
Signing time: Sun 23 Mar 2025 06:00:02 +0000
ROA not before: Sun 23 Mar 2025 05:55:02 +0000
ROA not after: Sun 22 Mar 2026 06:00:02 +0000
asID: 9341
IP address blocks: 103.3.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4c:05:3c:12:49:83:a1:1f:04:84:6f:73:df:19:23:f3:64:9a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 23 05:55:02 2025 GMT
Not After : Mar 22 06:00:02 2026 GMT
Subject: CN=CA98D6D26D8B234783C0CDAF95E47B379A851699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:02:4b:41:fa:f1:31:32:7f:9b:2e:52:dc:9b:
ef:d4:88:ce:0b:de:97:00:60:7b:ac:fa:ab:4e:05:
b3:84:32:c6:bf:b0:18:b2:72:d9:94:0a:2d:78:c6:
48:99:16:63:9c:bf:de:83:3f:81:b0:79:23:13:9c:
51:32:2f:93:96:8e:82:8f:1b:08:d8:26:14:71:ce:
2b:01:5e:99:ec:22:40:8b:d3:15:59:77:9b:88:b9:
87:07:3b:5d:44:09:36:9b:11:0c:c6:d8:de:47:be:
80:88:9f:00:b0:a7:4d:ab:16:cb:aa:61:75:ba:f0:
a4:a7:87:0a:88:be:38:d8:f5:b9:34:3c:a3:1b:5f:
f2:80:36:99:c4:ad:d2:b0:fd:ce:6f:3c:3c:6b:c2:
2a:2b:08:fa:d7:53:ef:62:46:56:95:e7:c8:24:ad:
d4:7e:98:ac:3d:15:80:8d:5d:76:e0:c2:6b:18:a9:
c8:57:7f:28:f3:9b:67:d5:ee:2d:1c:1d:e4:ca:f9:
10:ec:55:ff:3b:aa:ee:e4:8f:bc:e8:ad:51:af:99:
3a:57:ab:aa:cb:4a:d6:14:30:ee:d0:9b:df:03:2f:
5b:e5:7b:15:ec:fb:62:d4:64:0e:2a:ff:90:91:f1:
5e:68:0d:a4:70:f6:cf:34:5c:4e:5b:df:27:6f:1f:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:D6:D2:6D:8B:23:47:83:C0:CD:AF:95:E4:7B:37:9A:85:16:99
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b0:3a:62:9b:cc:10:94:15:15:f6:59:ad:23:d7:24:cf:ef:
bb:9d:ef:84:bf:72:b0:d4:3d:17:69:67:7b:89:54:aa:46:58:
50:9f:1b:10:97:47:0e:d8:fa:66:8a:06:46:9c:b9:3e:11:4a:
92:05:62:cc:87:f6:fe:d3:1f:f3:c7:a9:7e:a6:2f:c2:a3:40:
b3:d6:f7:01:e9:d8:92:c5:c1:f6:8d:07:13:f8:f5:33:95:3f:
9e:28:e4:22:2f:fc:51:10:d6:fd:10:9d:56:85:9e:27:86:3a:
bc:a7:0a:10:f0:02:da:7c:5a:96:af:e0:a8:dd:93:ae:83:fb:
c2:cc:1c:d4:a0:4f:17:42:56:81:d1:dc:50:d6:73:e6:98:78:
2e:cb:98:be:10:9f:f2:f1:ee:c5:19:da:1c:68:14:26:29:5b:
f6:6a:82:ed:07:61:ad:3c:f8:8f:a2:91:e2:60:af:7c:90:f4:
a8:0b:df:99:bc:e4:51:63:7e:71:c7:57:79:7b:e9:d0:63:54:
e2:ae:58:bd:eb:19:05:98:77:d3:9d:49:ba:05:46:2b:d7:ab:
4a:58:4a:6a:7e:a0:32:9a:8d:77:93:e9:ba:a7:5e:b3:ec:2c:
bc:20:74:9a:29:3f:1c:ba:e0:6d:64:5f:37:83:70:65:93:25:
aa:db:b4:de
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUJ0wFPBJJg6EfBIRvc98ZI/NkmpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNTAzMjMwNTU1MDJaFw0yNjAzMjIwNjAwMDJaMDMxMTAvBgNV
BAMTKENBOThENkQyNkQ4QjIzNDc4M0MwQ0RBRjk1RTQ3QjM3OUE4NTE2OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4AktB+vExMn+bLlLcm+/UiM4L
3pcAYHus+qtOBbOEMsa/sBiyctmUCi14xkiZFmOcv96DP4GweSMTnFEyL5OWjoKP
GwjYJhRxzisBXpnsIkCL0xVZd5uIuYcHO11ECTabEQzG2N5HvoCInwCwp02rFsuq
YXW68KSnhwqIvjjY9bk0PKMbX/KANpnErdKw/c5vPDxrwiorCPrXU+9iRlaV58gk
rdR+mKw9FYCNXXbgwmsYqchXfyjzm2fV7i0cHeTK+RDsVf87qu7kj7zorVGvmTpX
q6rLStYUMO7Qm98DL1vlexXs+2LUZA4q/5CR8V5oDaRw9s80XE5b3ydvHwD1AgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUypjW0m2LI0eDwM2vleR7N5qFFpkwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzEzMDMzMmUzMzJlMzczNjJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM5MzMzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwNMMA0GCSqGSIb3DQEBCwUA
A4IBAQA8sDpim8wQlBUV9lmtI9ckz++7ne+Ev3Kw1D0XaWd7iVSqRlhQnxsQl0cO
2PpmigZGnLk+EUqSBWLMh/b+0x/zx6l+pi/Co0Cz1vcB6diSxcH2jQcT+PUzlT+e
KOQiL/xRENb9EJ1WhZ4nhjq8pwoQ8ALafFqWr+Co3ZOug/vCzBzUoE8XQlaB0dxQ
1nPmmHguy5i+EJ/y8e7FGdocaBQmKVv2aoLtB2GtPPiPopHiYK98kPSoC9+ZvORR
Y35xx1d5e+nQY1Tirli96xkFmHfTnUm6BUYr16tKWEpqfqAymo13k+m6p16z7Cy8
IHSaKT8cuuBtZF83g3BlkyWq27Te
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:21 2025 by rpki-client