Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
File: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (raw, json)
Hash identifier: PjtR+k/vy+xQ0W/2j7aQuMB9F5e8VCzrPwXXwu812BA=
Subject key identifier: EF:5B:59:7B:BE:4F:86:31:41:8A:52:44:69:8D:CD:5E:C7:CB:A9:FC
Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F
Certificate serial: 5D0BF3B17A4333A3348135D7A6678A947B57E419
Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
Signing time: Sun 19 Apr 2026 17:00:00 +0000
ROA not before: Sun 19 Apr 2026 16:55:00 +0000
ROA not after: Sun 18 Apr 2027 17:00:00 +0000
asID: 150923
IP address blocks: 103.97.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0b:f3:b1:7a:43:33:a3:34:81:35:d7:a6:67:8a:94:7b:57:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F
Validity
Not Before: Apr 19 16:55:00 2026 GMT
Not After : Apr 18 17:00:00 2027 GMT
Subject: CN=EF5B597BBE4F8631418A5244698DCD5EC7CBA9FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:cf:48:a5:7e:20:dc:af:d5:7d:be:81:7a:
bc:1d:1a:4f:29:86:bd:e8:75:e4:03:4b:aa:d2:b1:
a7:a7:16:28:94:af:c6:57:24:51:fa:fb:83:71:1c:
0f:ca:6e:fe:7d:f2:d6:e8:a0:60:32:43:e3:9b:2d:
96:1c:f9:a9:d2:30:a7:dc:6b:be:1f:d5:fb:ba:a7:
3a:4e:fc:5f:e2:a0:fb:c8:a6:5e:54:07:ae:89:30:
49:77:3b:84:c6:a2:d0:9a:d7:f5:d0:ad:e2:ab:1e:
77:41:a9:b6:e6:97:6f:0e:e7:9a:32:93:3a:b6:3a:
f5:51:71:e1:d9:a4:a5:c7:8c:e1:3f:48:cd:99:e7:
13:03:f0:2f:4b:a7:2f:3d:49:2a:f1:6d:93:3e:ea:
bf:ab:2b:75:d1:c0:9d:ad:9d:e1:5b:1f:de:51:9b:
fe:db:d2:44:8f:34:d5:4e:ca:79:c4:36:a7:93:20:
30:28:c4:a7:8e:1e:00:76:14:f7:92:4d:f6:ec:a7:
49:6a:43:f3:e2:63:a7:a4:16:89:fa:f1:a3:c2:bb:
57:f8:e6:de:71:df:17:76:bb:f6:fc:8e:f9:2a:9f:
9a:e4:06:c9:07:a7:d1:73:23:ed:fc:29:8c:35:ec:
41:a6:4a:2a:f6:66:4e:5f:55:a9:01:88:93:01:86:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5B:59:7B:BE:4F:86:31:41:8A:52:44:69:8D:CD:5E:C7:CB:A9:FC
X509v3 Authority Key Identifier:
keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.224.0/24
Signature Algorithm: sha256WithRSAEncryption
09:62:88:c1:94:57:92:69:03:5c:59:42:3a:73:d2:d8:fb:9e:
14:3d:c2:9d:cf:03:32:fc:a1:de:a8:df:a3:e6:2a:65:91:f6:
91:7c:c3:b7:23:be:63:73:e6:b0:0b:32:6d:ed:6e:b1:ee:33:
5d:1c:00:78:8d:e2:6f:ed:04:5e:de:d8:3a:e8:3c:9b:d8:e4:
00:f7:ea:d3:44:23:64:79:b2:6b:bf:ec:c7:20:28:b4:c0:d3:
09:c3:c9:8c:7a:70:08:c5:97:b1:93:eb:42:92:1e:15:c7:0d:
08:6c:35:07:d9:e1:f9:2e:43:b9:61:5e:a6:e7:a4:d5:d5:e9:
2c:45:e4:25:b4:45:ae:3a:d4:a1:ec:2b:59:c3:2f:0d:d7:82:
be:04:a5:84:e4:75:28:1e:55:1f:8c:b0:96:ec:b0:c9:51:1e:
c1:b1:29:97:96:d3:95:06:8b:09:49:14:e7:58:00:38:85:6c:
f2:20:08:5f:79:1e:cc:6f:6c:72:ab:d1:6b:d4:92:08:10:e0:
96:48:66:bf:be:43:6c:0e:92:9a:b1:0e:33:7a:8d:cd:96:b4:
a0:1e:fe:86:da:2b:30:cb:4f:fc:f6:e2:ac:73:e7:b1:e8:8f:
63:20:69:b9:33:59:3a:de:4a:49:f3:9a:8a:5f:e9:a7:fc:e7:
43:42:ed:45
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXQvzsXpDM6M0gTXXpmeKlHtX5BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1
QkVFNzM3RjAeFw0yNjA0MTkxNjU1MDBaFw0yNzA0MTgxNzAwMDBaMDMxMTAvBgNV
BAMTKEVGNUI1OTdCQkU0Rjg2MzE0MThBNTI0NDY5OERDRDVFQzdDQkE5RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulM9IpX4g3K/Vfb6BerwdGk8p
hr3odeQDS6rSsaenFiiUr8ZXJFH6+4NxHA/Kbv598tbooGAyQ+ObLZYc+anSMKfc
a74f1fu6pzpO/F/ioPvIpl5UB66JMEl3O4TGotCa1/XQreKrHndBqbbml28O55oy
kzq2OvVRceHZpKXHjOE/SM2Z5xMD8C9Lpy89SSrxbZM+6r+rK3XRwJ2tneFbH95R
m/7b0kSPNNVOynnENqeTIDAoxKeOHgB2FPeSTfbsp0lqQ/PiY6ekFon68aPCu1f4
5t5x3xd2u/b8jvkqn5rkBskHp9FzI+38KYw17EGmSir2Zk5fVakBiJMBhr4xAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU71tZe75PhjFBilJEaY3NXsfLqfwwHwYDVR0j
BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE
QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF
NzM3Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0YWFhMmYxLTYzYTktNDI4MS04
OTQyLWZiNWQ4MjQxMTlhNC8wLzMxMzAzMzJlMzkzNzJlMzIzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2HgMA0GCSqG
SIb3DQEBCwUAA4IBAQAJYojBlFeSaQNcWUI6c9LY+54UPcKdzwMy/KHeqN+j5ipl
kfaRfMO3I75jc+awCzJt7W6x7jNdHAB4jeJv7QRe3tg66Dyb2OQA9+rTRCNkebJr
v+zHICi0wNMJw8mMenAIxZexk+tCkh4Vxw0IbDUH2eH5LkO5YV6m56TV1eksReQl
tEWuOtSh7CtZwy8N14K+BKWE5HUoHlUfjLCW7LDJUR7BsSmXltOVBosJSRTnWAA4
hWzyIAhfeR7Mb2xyq9Fr1JIIEOCWSGa/vkNsDpKasQ4zeo3NlrSgHv6G2iswy0/8
9uKsc+ex6I9jIGm5M1k63kpJ85qKX+mn/OdDQu1F
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:49 2026 by rpki-client