Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232342e302f32342d3234203d3e203536323431.roa
File: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (raw, json)
Hash identifier: KoOhL/6gRa2PBnC22hRDn7CKzJMFUb+xBkVaIGvFK2o=
Subject key identifier: 19:AE:83:8C:84:F5:16:80:C8:A5:63:A7:94:52:F8:ED:98:B5:BD:B6
Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial: 6B98102537AA4CE9224F431531E8E25C3D9B9DCA
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232342e302f32342d3234203d3e203536323431.roa
Signing time: Mon 27 Apr 2026 05:01:40 +0000
ROA not before: Mon 27 Apr 2026 04:56:40 +0000
ROA not after: Mon 26 Apr 2027 05:01:40 +0000
asID: 56241
IP address blocks: 103.37.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:98:10:25:37:aa:4c:e9:22:4f:43:15:31:e8:e2:5c:3d:9b:9d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Validity
Not Before: Apr 27 04:56:40 2026 GMT
Not After : Apr 26 05:01:40 2027 GMT
Subject: CN=19AE838C84F51680C8A563A79452F8ED98B5BDB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:09:46:c3:35:bf:27:6f:3f:87:54:e3:9b:
01:77:96:c8:47:ed:50:72:49:f1:95:01:ce:74:e5:
ae:1a:86:59:f4:cb:2e:27:1b:cb:c4:31:de:7f:ab:
4b:06:8f:a0:2b:c9:39:ad:a6:55:c6:4a:67:69:59:
a2:e9:8d:cf:44:3a:9e:a3:be:25:28:4b:ab:1c:18:
e8:8b:9c:a3:36:d7:be:48:94:b8:4f:9e:31:34:1f:
c6:0c:7d:6c:e7:fc:28:21:aa:21:1c:dc:6b:5a:7d:
73:1d:42:5c:19:4a:96:41:e2:f8:9f:10:a9:b9:0d:
87:3b:a0:60:c7:e4:dc:5a:23:c8:9c:37:e3:81:e4:
8b:86:9c:42:da:d9:57:26:59:5c:03:3e:08:f8:00:
e0:17:60:63:9f:2b:4e:be:17:b2:dd:c1:7a:c2:61:
51:4c:51:fa:a7:47:d5:b2:47:71:77:b3:89:f8:ef:
d8:d9:73:2e:06:f1:81:94:bb:c4:5f:cb:61:d7:a2:
a2:2f:04:ff:b3:23:5b:60:65:a2:0f:20:d7:5f:56:
45:8c:26:34:96:02:e8:18:0a:4b:15:b7:31:b6:ab:
c2:ce:42:ff:b0:72:3e:80:03:e8:c8:c5:13:94:38:
69:ec:c3:dd:89:31:ae:96:0e:4b:6a:bc:32:f5:0a:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AE:83:8C:84:F5:16:80:C8:A5:63:A7:94:52:F8:ED:98:B5:BD:B6
X509v3 Authority Key Identifier:
keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232342e302f32342d3234203d3e203536323431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:05:dc:fa:41:70:69:f5:4d:34:5e:bf:f8:8a:1e:2b:43:54:
7e:bd:ac:03:eb:7c:8e:39:ba:04:16:7a:71:c8:55:a8:a1:e3:
67:d9:63:e9:0b:3a:e5:2f:bb:e9:fa:35:a9:9e:da:4e:16:39:
34:04:18:2b:6c:d1:66:87:db:9d:60:39:59:3e:0f:2e:04:26:
19:ae:20:31:67:d3:2a:a7:a6:33:ac:d4:52:0d:b4:79:ae:40:
70:e8:a6:1f:8c:29:f0:60:4b:de:ca:5c:f5:76:b5:d7:34:77:
65:66:b3:d5:c5:00:64:84:a5:8f:c2:14:be:e0:e0:ce:24:d9:
3f:2d:17:bf:a1:3c:88:84:f6:f6:01:3f:f6:48:2f:7b:aa:4a:
51:ca:6e:79:56:df:7f:d0:c8:3e:db:3e:0d:2b:6a:cf:32:10:
ac:ce:30:7e:8b:d8:fe:f3:8e:fe:ed:54:1e:a9:ed:0f:bc:e1:
2a:2c:aa:dd:e9:36:8b:c3:dc:82:d8:38:cb:5e:28:06:44:91:
c2:71:39:84:db:63:00:6c:93:f0:0b:22:08:38:0e:81:0c:75:
c4:d6:71:93:80:4f:78:03:ad:08:cf:5a:ae:66:f4:14:ef:f0:
bb:4e:98:30:92:3a:4a:cf:9c:38:95:eb:bf:e1:33:4e:57:01:
ed:9f:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:32:45 2026 by rpki-client