Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa
File: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (raw, json)
Hash identifier: E97VUo450rwa8TNivJFFUIBUV8WNUgdrBRJVJOdKFqg=
Subject key identifier: F4:FF:33:9E:3F:12:E1:5C:7B:5A:64:9E:9A:81:37:E3:7E:9D:A9:7C
Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Certificate serial: 11CD449BC36EEA3D37114E50F46A28DFF6BAA3B0
Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa
Signing time: Fri 24 Apr 2026 10:00:01 +0000
ROA not before: Fri 24 Apr 2026 09:55:01 +0000
ROA not after: Fri 23 Apr 2027 10:00:01 +0000
asID: 150232
IP address blocks: 103.13.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:cd:44:9b:c3:6e:ea:3d:37:11:4e:50:f4:6a:28:df:f6:ba:a3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Validity
Not Before: Apr 24 09:55:01 2026 GMT
Not After : Apr 23 10:00:01 2027 GMT
Subject: CN=F4FF339E3F12E15C7B5A649E9A8137E37E9DA97C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:6a:9d:86:1d:66:16:0f:04:69:97:7c:b6:
40:e1:8d:7a:a9:c7:ee:0a:4b:62:b5:cf:c9:dc:99:
a4:24:0c:2b:cf:21:6a:9b:83:3f:ff:7f:b6:23:23:
7f:cc:9f:68:b3:3c:12:65:b2:91:72:6b:cd:7a:56:
58:7e:87:20:b0:f5:7e:c1:f8:6f:ec:67:21:26:5f:
e8:8e:f1:ec:2c:46:cf:fc:42:cb:77:17:03:f2:72:
44:e1:d3:af:d8:34:8f:21:04:f7:a4:34:7b:d4:e0:
50:24:74:6d:a6:f5:64:34:53:fb:06:17:a6:58:78:
ae:01:f7:41:1c:4e:68:3a:f2:a8:b4:2b:3f:7e:db:
9a:2d:e2:d1:d1:12:91:54:c4:66:d3:77:2d:1e:6f:
c2:fe:5f:78:a8:8e:5a:7f:31:c2:14:16:71:1a:77:
c9:25:d8:5b:3a:60:e4:43:e4:ce:26:14:50:26:3d:
83:78:4b:94:4f:46:5f:b0:8a:44:78:c7:69:1f:5d:
9b:7e:62:3b:a3:88:ab:1c:7f:82:d2:c3:27:8f:f9:
89:bb:99:24:0c:f1:29:7a:c8:b4:10:9c:30:36:87:
ce:ed:ca:83:03:16:e8:a7:32:a5:7a:73:9e:cb:4f:
5a:13:ca:8e:c1:ce:0b:e6:4a:06:69:bc:b6:74:8e:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:33:9E:3F:12:E1:5C:7B:5A:64:9E:9A:81:37:E3:7E:9D:A9:7C
X509v3 Authority Key Identifier:
keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.235.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5c:4e:54:cd:25:f4:3d:d9:7a:c9:e4:de:54:1a:71:6f:31:
5c:71:8e:d9:6e:59:04:3b:29:cb:3c:50:4b:b5:f6:d3:6d:de:
64:26:5d:ee:56:1e:25:5a:29:46:ed:0a:c2:63:80:a2:1e:ed:
94:09:30:06:c4:81:43:76:05:7e:62:34:c9:b4:10:b2:d9:fa:
08:92:20:82:b4:e5:48:7f:c3:2d:95:7d:71:46:f6:38:48:89:
32:03:4d:8c:20:ea:8b:58:d6:4a:4d:2b:81:41:ba:0a:b0:e2:
2a:37:5a:4f:53:13:87:90:ad:d7:43:4a:55:98:ec:75:57:ca:
34:75:bf:05:fd:14:9d:10:f6:3c:d6:07:93:81:ac:62:b2:18:
35:8f:c8:aa:23:4d:69:c2:85:0d:cd:d8:d4:2d:32:c2:31:c4:
62:f7:f1:a7:cc:35:a4:5f:a9:3e:08:f5:eb:58:ef:c5:70:aa:
1f:ec:ba:e6:fc:e6:ad:4e:8f:20:10:41:31:7a:ff:b8:14:15:
08:bf:40:09:8f:bd:c5:ca:fb:48:60:d4:4e:bc:04:86:66:89:
b9:10:a2:f7:1a:ac:79:4b:a3:6b:fa:79:e7:12:ab:30:3d:5c:
45:28:2a:a6:b6:7e:8f:9d:08:ec:02:5f:ca:bd:bb:0f:b3:40:
c6:39:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:28 2026 by rpki-client