Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa
File: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (raw, json)
Hash identifier: y+GjBMY4CPIisqalhZEHankPWC/q94Xk679ESfEl0F0=
Subject key identifier: 95:96:C0:42:72:32:A4:87:84:DC:23:4B:28:5A:72:74:EE:79:B6:E5
Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Certificate serial: 2E8093ECF0D35427D65813574868EFF29CD9B5F1
Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa
Signing time: Tue 21 Apr 2026 02:00:02 +0000
ROA not before: Tue 21 Apr 2026 01:55:02 +0000
ROA not after: Tue 20 Apr 2027 02:00:02 +0000
asID: 55670
IP address blocks: 103.12.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:80:93:ec:f0:d3:54:27:d6:58:13:57:48:68:ef:f2:9c:d9:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Validity
Not Before: Apr 21 01:55:02 2026 GMT
Not After : Apr 20 02:00:02 2027 GMT
Subject: CN=9596C0427232A48784DC234B285A7274EE79B6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:d8:06:5d:50:8b:35:06:73:76:13:a9:9e:
e0:5c:5a:1e:67:63:e0:a4:d3:e9:37:0f:08:df:7c:
23:ad:66:0e:33:cc:7c:0a:c5:dc:a6:40:ff:fb:4b:
e8:3b:94:5b:4f:b3:50:92:b3:46:6e:76:7c:92:3f:
0a:2b:eb:b0:8c:e0:c4:70:9e:23:99:f1:a8:8f:ef:
ed:53:8f:f9:39:42:9d:20:9b:f3:13:18:d9:2d:1a:
fe:04:c5:6e:c8:88:3f:40:98:f2:8f:8a:f3:86:43:
19:bb:a7:2d:74:bb:78:5a:d3:5a:8d:d4:2c:df:ee:
09:b8:35:44:77:b4:7a:91:f3:fb:34:65:54:ac:30:
07:fd:ff:96:d0:5f:31:f2:f7:09:e2:8b:ef:9b:28:
f7:9c:a3:94:d8:07:07:58:17:de:07:3e:e7:e7:9f:
97:e1:2b:7a:a8:ce:9b:ad:68:26:b4:03:1f:39:70:
3f:be:d8:f6:cc:37:a9:f9:43:31:2e:56:1d:e8:92:
30:65:88:7c:cd:11:2d:f9:42:84:ec:77:68:3e:2a:
d2:9f:a5:5f:54:88:b9:f9:cd:25:f9:6b:9c:bf:2b:
2b:a8:4d:89:ca:7d:36:96:72:46:1c:a0:b8:e3:06:
07:60:37:c5:7f:1b:56:aa:de:ed:bf:46:68:78:73:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:C0:42:72:32:A4:87:84:DC:23:4B:28:5A:72:74:EE:79:B6:E5
X509v3 Authority Key Identifier:
keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.12.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:78:c8:df:7a:72:c1:7f:b2:2e:0f:ae:98:8f:e0:5a:67:83:
d0:e2:55:4a:95:06:d8:4a:51:28:74:a3:f3:2f:a5:a8:dc:72:
d7:f0:6c:8b:5f:5c:cb:8d:06:89:7d:8e:49:cc:25:aa:b3:de:
52:ae:f8:b6:7d:5f:cd:24:66:14:98:95:9b:dd:7f:56:ed:54:
b6:23:1a:2e:da:89:ff:ce:32:6a:50:8b:b7:92:8d:58:35:30:
72:01:4c:ee:8f:21:45:f2:65:6e:90:83:28:9b:de:92:db:76:
f8:c0:d5:3a:9a:e1:d2:53:49:8d:07:ad:6f:15:10:43:97:eb:
91:b7:96:8f:53:d5:fa:ae:63:1a:25:8f:d4:c8:38:99:97:89:
94:89:f8:00:42:ea:c5:65:84:97:49:c3:4f:9d:7f:e9:66:c5:
84:30:61:d7:75:86:0a:04:89:52:20:d1:a0:e6:13:b5:f2:fe:
11:52:1a:eb:69:99:b2:f4:a4:47:e9:04:19:54:95:cb:ac:89:
a3:cc:46:c5:77:17:d1:ab:74:16:46:e9:be:f0:ce:8f:e1:6a:
2d:fd:f6:a8:56:55:23:d1:44:96:a5:24:fa:c2:4f:df:e0:24:
d5:99:10:5c:ca:b5:23:f5:65:f5:d0:f4:2a:4c:f1:e3:4a:7f:
69:5f:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:26 2026 by rpki-client