Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa
File:                     3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (raw, json)
Hash identifier:          cldQAJ+iR+k2DlgZSCXgjoF1czqzhM2qVWXVaAIyHhk=
Subject key identifier:   E2:90:70:D5:AD:75:96:EF:FC:AF:3C:E4:DD:61:FE:3A:E0:9E:B6:3C
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       795BA176B1BB7D14B9D0B47654C7AB4B3EAD1327
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa
Signing time:             Thu 23 Apr 2026 02:00:00 +0000
ROA not before:           Thu 23 Apr 2026 01:55:00 +0000
ROA not after:            Thu 22 Apr 2027 02:00:00 +0000
asID:                     150936
IP address blocks:        103.110.34.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5b:a1:76:b1:bb:7d:14:b9:d0:b4:76:54:c7:ab:4b:3e:ad:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Apr 23 01:55:00 2026 GMT
            Not After : Apr 22 02:00:00 2027 GMT
        Subject: CN=E29070D5AD7596EFFCAF3CE4DD61FE3AE09EB63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:fb:ce:70:c3:b2:be:50:8d:13:a9:ff:54:
                    20:43:48:ad:db:46:14:90:7f:dd:61:ca:fb:d3:74:
                    09:e9:3b:b6:77:64:7a:40:79:df:3b:1b:b0:07:ba:
                    66:8c:a0:6b:a9:a8:01:0d:b1:5e:00:bf:8b:06:65:
                    b1:32:bf:1c:9c:ad:09:df:3d:79:54:ad:c5:d0:9d:
                    9b:c9:13:c5:ae:7f:e1:d2:31:5a:3e:57:51:a3:81:
                    05:02:14:ce:da:59:86:ff:13:1e:36:f7:5b:21:58:
                    ec:24:ae:ce:57:0a:82:38:e7:10:4f:e7:64:ea:18:
                    82:ae:6a:62:8a:53:cc:32:d3:7a:b0:10:33:a2:1b:
                    b5:e1:ce:72:86:1f:e5:67:b9:fb:cc:ad:d1:62:6e:
                    8a:cf:d8:1d:d8:2a:ba:9a:b4:24:fb:cd:dc:8e:af:
                    0d:1b:49:f6:4e:6a:78:7c:ff:48:2e:8b:c5:f2:33:
                    77:d0:62:67:b9:ad:60:47:40:34:e4:6a:bd:f0:74:
                    f7:e1:a9:bf:a4:ca:0c:ec:c3:b9:5f:4e:78:a1:6f:
                    9e:e0:c2:63:59:15:f8:58:bf:a8:90:fe:e0:fd:e8:
                    02:d2:3d:c9:fb:b3:2b:20:38:a1:44:c5:e9:3f:ba:
                    38:a4:80:46:c5:c3:ea:73:c4:57:55:2e:0e:92:f0:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:70:D5:AD:75:96:EF:FC:AF:3C:E4:DD:61:FE:3A:E0:9E:B6:3C
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:53:88:46:5a:2e:52:e2:4a:c0:0c:3d:65:c9:7b:71:78:
         43:35:3a:a5:cf:16:5f:3a:f5:35:72:c0:6b:b0:b5:f0:b8:ed:
         cd:26:3b:5b:89:e8:a5:02:c7:8f:3a:a3:10:b9:a4:25:6b:fa:
         55:e2:32:97:19:ad:3b:ea:10:bf:39:fa:ac:83:88:ef:24:e1:
         10:16:e0:89:f3:8e:8d:cb:58:66:7b:3b:59:2a:75:c1:25:82:
         19:a9:dc:d5:f8:40:82:c4:00:89:19:ae:10:cb:a6:bb:67:18:
         bc:c0:e0:35:ce:a9:24:56:50:e9:fc:4d:25:b8:5f:4a:d0:5d:
         dc:e0:e8:cd:0e:47:d1:9c:ed:b6:70:61:ee:c0:9f:4d:3f:9b:
         de:5a:40:2e:90:74:a9:0f:89:9b:27:7d:fd:3b:0b:5a:84:15:
         f5:8e:7e:bb:10:2d:e4:ae:c3:4c:28:a9:6e:7d:97:6f:df:d2:
         af:71:a3:c2:14:b7:fc:b6:57:63:3f:ea:4f:27:b0:a5:e4:22:
         77:76:97:67:a7:b7:78:fd:a5:a1:95:63:45:14:83:31:70:18:
         f7:27:6b:2c:77:b8:92:f9:b4:b1:69:46:1b:f1:70:49:f8:88:
         46:c6:c3:e8:36:6e:65:79:aa:fb:11:2b:3b:4d:fd:74:96:55:
         7c:e9:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:51:57 2026 by rpki-client