Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232352e302f32342d3234203d3e203536323431.roa
File: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (raw, json)
Hash identifier: vfCpkdvg/hDMy0HBlDwipkFrFvPRFNwZRyFvdwixnzI=
Subject key identifier: 74:42:56:37:00:60:FA:8D:3B:1A:21:60:DD:87:59:1A:E8:87:DA:70
Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial: 3ADCBDE8442F4247A7B589FD502363525B65E6D5
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232352e302f32342d3234203d3e203536323431.roa
Signing time: Mon 27 Apr 2026 05:01:40 +0000
ROA not before: Mon 27 Apr 2026 04:56:40 +0000
ROA not after: Mon 26 Apr 2027 05:01:40 +0000
asID: 56241
IP address blocks: 103.37.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:dc:bd:e8:44:2f:42:47:a7:b5:89:fd:50:23:63:52:5b:65:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Validity
Not Before: Apr 27 04:56:40 2026 GMT
Not After : Apr 26 05:01:40 2027 GMT
Subject: CN=744256370060FA8D3B1A2160DD87591AE887DA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:b9:40:94:e3:2e:af:1b:38:c8:94:9f:46:
91:a1:90:d2:ea:f7:cf:16:d8:82:db:7b:a8:a5:2b:
21:b7:fa:e6:1c:df:d6:57:4a:3b:fe:f4:7d:dd:57:
22:33:55:3b:c6:46:08:97:10:9e:98:4f:17:88:e9:
99:51:19:c7:11:2e:1a:86:e0:99:a1:86:23:8a:86:
50:e9:74:42:e9:24:54:00:6e:d4:5a:ba:20:ec:ed:
3b:77:44:98:6c:58:98:98:d7:c5:05:fc:3d:26:03:
4e:7a:bc:68:49:d8:5c:09:50:21:bd:18:34:30:5d:
92:ad:7e:64:6c:ad:f7:32:d4:30:69:95:01:6f:e0:
6b:f8:db:ce:05:54:39:a2:5d:b7:e1:3a:76:da:a6:
9c:a1:fa:f6:6d:5a:86:90:f7:ab:eb:ce:ef:36:bb:
13:0e:b2:f9:f2:ef:f1:1c:65:ca:fa:36:0f:68:f8:
f7:43:51:fc:24:4d:aa:d0:7e:78:27:b8:a8:f9:30:
f9:27:d4:32:16:8a:ce:fb:1b:36:ba:3f:c3:b9:d6:
df:89:5b:89:a1:a6:52:66:1c:47:64:b2:00:3c:68:
65:ab:c0:e3:c2:08:8e:27:ce:bd:28:bd:5e:8d:6c:
0a:e7:02:f9:52:44:bc:03:a3:8c:79:2b:f8:63:97:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:42:56:37:00:60:FA:8D:3B:1A:21:60:DD:87:59:1A:E8:87:DA:70
X509v3 Authority Key Identifier:
keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232352e302f32342d3234203d3e203536323431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5a:f7:81:17:77:e2:b3:19:0a:07:aa:4f:6a:47:0e:f8:88:
74:8e:3f:3c:da:f8:a3:cb:3d:ee:a7:ee:bc:8c:4c:b8:fa:d8:
46:e3:84:00:9b:5c:9a:c0:6c:43:b0:fb:8f:b6:13:5b:eb:00:
ad:1a:d9:b6:8f:33:76:a9:a5:8c:30:e3:3b:e8:fa:e2:64:80:
28:da:f5:cf:53:a1:e5:3b:08:03:53:0c:dc:a7:60:96:e3:30:
83:d7:db:ed:d9:5a:85:13:b1:c0:e6:ac:91:db:dc:31:85:7f:
55:da:77:a1:b8:c0:39:d5:c5:3a:84:6b:42:da:ae:d2:d8:bf:
b5:f2:1f:29:71:ee:e6:7a:cf:50:76:47:36:64:05:45:64:e0:
84:54:7d:a7:1d:93:9b:e1:59:04:6f:74:91:9d:17:fa:1d:d2:
8f:ed:66:09:e9:b1:2c:2b:fa:13:d4:9f:75:a3:ca:e4:09:f0:
32:db:68:40:e1:61:18:a1:e1:9d:31:4c:79:22:73:1c:df:5d:
96:08:cd:b1:9f:05:d2:ec:c0:16:9b:ed:45:0d:17:ad:86:ac:
af:38:d5:ba:45:9e:9d:2d:85:ae:8e:71:0a:c0:07:16:66:6e:
0a:9c:b7:27:e7:8d:bd:5e:00:05:c8:2a:d3:09:b2:a5:5e:c6:
cf:a4:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:32:56 2026 by rpki-client