Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/3130332e37382e3130342e302f32332d3234203d3e203634333134.roa
File:                     3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (raw, json)
Hash identifier:          gizhryVO0bFaIBg7jzCMDY98VXuCFF9yAaE1HnfH2Jg=
Subject key identifier:   E8:19:00:90:7D:6A:0F:E0:62:41:59:84:B4:90:F4:B6:98:0E:FA:FE
Certificate issuer:       /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A
Certificate serial:       4F8F3BDEBA053390091D454774C98040E13B7C95
Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/3130332e37382e3130342e302f32332d3234203d3e203634333134.roa
Signing time:             Tue 28 Apr 2026 14:00:03 +0000
ROA not before:           Tue 28 Apr 2026 13:55:03 +0000
ROA not after:            Tue 27 Apr 2027 14:00:03 +0000
asID:                     64314
IP address blocks:        103.78.104.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8f:3b:de:ba:05:33:90:09:1d:45:47:74:c9:80:40:e1:3b:7c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A
        Validity
            Not Before: Apr 28 13:55:03 2026 GMT
            Not After : Apr 27 14:00:03 2027 GMT
        Subject: CN=E81900907D6A0FE062415984B490F4B6980EFAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:7c:cf:4c:53:e1:67:4f:85:03:66:d4:08:
                    96:ee:4b:c5:7d:a8:ac:0e:2e:8d:37:28:5b:19:93:
                    63:df:7a:09:8d:8c:18:2d:03:8e:09:c1:16:a7:f6:
                    11:cc:d0:13:27:e9:9e:6b:ab:fc:7c:e7:f1:05:f6:
                    a7:e7:62:9f:d3:64:40:e4:27:30:94:a8:2c:45:9e:
                    11:14:29:b6:c9:6c:75:f0:81:d4:f3:a6:e9:97:99:
                    94:63:63:cb:96:bb:91:73:91:ff:da:2f:0e:97:a5:
                    10:c9:b6:50:b7:84:d7:bf:53:a3:4a:50:f3:76:9e:
                    9e:87:37:6a:0f:19:92:79:d7:5a:57:87:97:cd:d7:
                    3f:1e:0a:ac:38:76:c4:f8:28:34:f7:70:2d:77:c5:
                    d6:4a:d2:9d:e4:b9:b6:b2:ea:42:2f:1c:ce:31:82:
                    e7:37:ff:ae:03:63:a1:3f:c1:b6:f6:7e:b2:c1:0c:
                    37:eb:09:e3:f6:ca:d2:ec:63:a5:eb:a0:b9:ad:66:
                    c7:27:40:63:c5:8e:8a:3f:51:16:ce:f3:7d:cd:6d:
                    74:1d:76:1a:88:07:92:59:8a:81:f3:b1:88:09:1f:
                    f3:d8:18:19:37:32:5d:d0:78:ab:22:de:cd:8b:83:
                    5f:c9:2b:7f:1e:7e:94:fb:c2:bb:3c:cf:1d:e5:c8:
                    25:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:19:00:90:7D:6A:0F:E0:62:41:59:84:B4:90:F4:B6:98:0E:FA:FE
            X509v3 Authority Key Identifier:
                keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/3130332e37382e3130342e302f32332d3234203d3e203634333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:ef:b2:95:3f:d4:84:bd:86:99:4b:be:23:b3:f2:f1:30:b6:
         06:94:da:23:eb:9f:8b:7c:3d:9f:17:a3:9a:2a:8c:5f:8b:ed:
         cd:fa:63:85:b0:da:32:f4:60:0f:67:35:56:72:10:51:1f:27:
         ed:cb:2c:41:aa:81:d0:4b:83:29:af:15:04:69:b4:c5:60:5b:
         95:af:2c:31:78:c6:cd:5f:33:83:60:47:0f:64:66:68:d1:a1:
         0e:78:9b:67:52:c1:73:28:0c:20:5f:19:80:9d:05:3b:0a:18:
         b9:dd:2b:74:12:b6:4f:75:ef:74:ce:01:be:c0:0e:96:15:db:
         2e:3e:e2:af:cc:2e:69:6c:9b:1e:51:a7:fb:89:4f:91:09:43:
         64:d0:2e:11:c9:61:e9:83:73:86:f8:fc:2b:ee:ff:54:62:3f:
         e1:2f:9d:6b:b3:0d:50:30:52:0d:ba:e9:15:af:d7:40:cb:93:
         87:b2:88:91:ac:21:be:24:f8:f9:83:09:eb:46:aa:ca:13:7f:
         68:d1:fd:34:74:45:f0:9c:ff:32:5b:d7:95:77:28:47:e9:3d:
         46:1c:59:f3:79:1f:1d:4b:68:91:75:5a:90:38:8a:30:3d:9e:
         fa:a8:60:31:11:22:b7:3c:d8:4e:bd:70:db:e8:9e:ad:f2:e2:
         a8:d6:47:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:37 2026 by rpki-client