Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa
File: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (raw, json)
Hash identifier: 33IGGo0KT1LdAYCDtCn4OXKineBNCRRLWuRztzQfx8I=
Subject key identifier: 79:9A:F6:29:18:C8:46:14:05:48:E7:B6:66:2C:E5:C8:DC:C0:DB:B7
Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F
Certificate serial: 232D74844BB29E2D1AF95F48B9AFF855B8B9AFE3
Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa
Signing time: Mon 20 Apr 2026 06:00:00 +0000
ROA not before: Mon 20 Apr 2026 05:55:00 +0000
ROA not after: Mon 19 Apr 2027 06:00:00 +0000
asID: 150923
IP address blocks: 103.97.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2d:74:84:4b:b2:9e:2d:1a:f9:5f:48:b9:af:f8:55:b8:b9:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F
Validity
Not Before: Apr 20 05:55:00 2026 GMT
Not After : Apr 19 06:00:00 2027 GMT
Subject: CN=799AF62918C846140548E7B6662CE5C8DCC0DBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cc:24:5a:87:43:5b:d5:d7:d3:46:3e:fb:46:
df:80:05:f2:c7:80:2f:fc:bc:92:64:a5:c0:40:2d:
11:57:b2:f5:a7:f6:74:89:ca:ac:48:0c:45:4f:bd:
e4:06:0c:86:09:72:13:d7:1c:0f:3a:b2:7e:e1:fc:
38:07:4b:83:08:e6:6c:2b:e6:80:49:4f:57:4c:db:
e0:a9:8a:0e:b1:7e:7f:83:4f:71:cd:6d:e5:0a:1b:
97:80:cb:ff:f1:4b:cf:fc:80:f1:21:36:2e:61:64:
48:11:56:4c:d0:f5:de:d7:cb:67:8d:1d:cd:c7:eb:
39:b9:3f:6f:c9:cc:c6:33:10:67:3f:05:89:6d:b7:
c8:e3:11:42:a3:cc:04:38:61:2b:13:c1:31:87:64:
77:00:f0:a8:f1:b0:a2:cf:5e:85:b9:73:a6:08:71:
fa:3c:26:64:f3:d3:48:f0:3d:c3:91:cd:37:34:62:
54:b3:d4:3f:e4:a0:49:29:71:c0:09:5e:8d:63:1c:
78:df:ac:e1:b0:7c:2a:7a:c8:f9:59:d9:30:d9:c6:
24:11:1e:d4:82:a0:fb:d2:f3:9a:9d:34:32:0f:24:
91:c9:79:8f:a3:55:66:12:08:17:5e:f4:82:f7:7f:
06:10:5b:3f:f6:db:68:d3:51:b9:d1:a7:68:dc:50:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9A:F6:29:18:C8:46:14:05:48:E7:B6:66:2C:E5:C8:DC:C0:DB:B7
X509v3 Authority Key Identifier:
keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.225.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7d:da:2d:5e:a0:fe:33:c2:3c:08:93:4b:b9:4f:2c:f4:6a:
cc:92:93:47:c4:b6:03:a1:74:fb:b4:60:ae:35:c7:50:4d:51:
26:7f:82:b4:4b:e7:cb:4d:da:71:2e:76:a0:15:5a:be:e4:d3:
45:3f:5b:04:40:96:6f:ef:0b:4f:83:bc:a2:2e:f7:57:a2:7e:
d2:6d:7a:5d:5a:2d:91:6d:0b:36:b1:13:ee:2f:7e:dc:b2:8f:
22:ae:0a:31:bb:0f:08:78:46:bc:4d:5a:81:0c:8f:23:54:2a:
7c:9e:c5:01:78:1d:c8:aa:14:55:3f:2f:32:2a:b9:cf:2b:21:
4a:d2:d9:05:ad:74:e2:d6:cf:59:c3:a4:97:26:23:2d:cc:6c:
fe:4f:3a:06:7c:44:ce:b4:2d:44:e1:87:ff:9f:d1:bb:e6:c4:
25:ff:2f:1c:cd:21:6f:8b:28:5f:48:25:d6:87:74:10:9d:9a:
c3:4d:38:7b:ee:b7:5c:48:8b:bf:df:89:6a:40:26:25:2d:87:
8c:c8:a1:6a:b4:e6:7b:09:e5:67:05:83:26:da:77:81:66:64:
c4:c4:3b:49:32:fa:6c:d7:1f:f5:29:9f:98:a9:17:5d:4d:ae:
59:55:f7:13:20:54:28:5b:d0:c8:06:5c:01:7a:51:88:82:db:
58:37:bb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:26 2026 by rpki-client