Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa
File: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: mnlx0//Bp1gZKkbsYf7JD2Z0rh9T4tFSvZweZn/Cgec=
Subject key identifier: 06:D9:D4:40:88:05:E4:A2:1C:09:D5:C9:E1:71:A1:C3:AA:D2:DE:59
Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial: 3A2F93B270F3FF341C013F1568EAFFBCF0673CB1
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa
Signing time: Mon 20 Apr 2026 07:02:43 +0000
ROA not before: Mon 20 Apr 2026 06:57:43 +0000
ROA not after: Mon 19 Apr 2027 07:02:43 +0000
asID: 58369
IP address blocks: 103.188.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:2f:93:b2:70:f3:ff:34:1c:01:3f:15:68:ea:ff:bc:f0:67:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
Validity
Not Before: Apr 20 06:57:43 2026 GMT
Not After : Apr 19 07:02:43 2027 GMT
Subject: CN=06D9D4408805E4A21C09D5C9E171A1C3AAD2DE59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:a6:7c:ff:40:a6:f6:49:ec:3d:18:b7:cd:
32:50:a3:f3:6b:b9:6a:f6:1e:58:f6:e5:f9:a0:54:
38:c1:f3:fd:2e:87:7c:f0:24:6d:30:78:3f:6e:53:
90:b0:2b:e4:72:dc:c4:e5:72:35:7d:2b:4a:f7:91:
af:69:6f:3a:8b:f3:8d:46:9c:5d:47:ed:2b:69:14:
c2:b8:e1:0b:08:4a:66:6b:7c:e1:7a:4b:92:44:11:
35:07:ac:97:fe:f8:48:cf:4e:67:f6:ba:eb:46:1f:
4b:f6:ae:d3:a3:eb:a5:ad:e5:92:ab:e1:60:13:30:
10:2f:b4:f7:d8:31:c8:0d:89:1a:84:b4:1f:6e:f8:
7d:f6:d9:2c:f6:9a:5e:1a:6e:db:30:41:b6:29:d2:
94:43:e2:30:a7:51:e6:15:3e:4b:93:d8:5a:c4:87:
5f:c8:9a:f5:d5:e1:9c:eb:02:da:7d:16:11:55:d1:
29:47:38:52:47:5f:3a:d9:a6:db:87:f9:eb:ea:3b:
23:16:c4:34:4f:01:ae:12:6a:03:e2:f9:2e:49:75:
c7:75:ca:1c:06:a2:cd:e9:e7:06:3f:f2:85:a0:67:
01:11:72:20:74:49:8a:cd:13:e3:11:95:ba:12:6d:
f1:75:ae:eb:4c:d0:02:c2:13:48:bb:98:58:01:98:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D9:D4:40:88:05:E4:A2:1C:09:D5:C9:E1:71:A1:C3:AA:D2:DE:59
X509v3 Authority Key Identifier:
keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.174.0/24
Signature Algorithm: sha256WithRSAEncryption
03:83:11:d6:82:38:ed:0c:ca:ac:e2:33:28:9d:3f:98:74:c1:
9d:3c:c1:6f:a5:14:13:a6:89:5f:45:35:ad:87:e7:ed:f1:46:
1a:b9:6a:2d:0a:84:1e:ad:4f:86:c7:11:b0:90:95:99:5a:d6:
c7:48:1c:82:f9:88:a4:f2:71:a1:76:02:dc:1f:5a:02:ae:f1:
09:8e:9a:51:8e:36:ec:e9:2b:55:d3:3f:06:90:f0:61:7a:e6:
e0:1a:08:17:d6:cb:fc:d5:90:b6:dc:e7:78:e6:cd:95:89:a9:
d4:1b:c1:15:11:03:a2:a1:f2:89:f6:66:17:63:0f:bd:81:35:
26:a5:ce:40:74:54:ff:a7:f5:a3:f5:a5:ce:9d:e7:a3:e9:53:
76:e1:4d:57:b3:be:52:bb:ef:5c:99:4e:38:03:d4:51:b8:9e:
7c:f6:28:61:a3:25:36:2e:85:9d:d8:f3:d5:90:4f:29:a3:e9:
7e:55:42:64:49:46:49:b2:0a:18:87:f0:a6:99:19:f3:53:82:
75:e2:ca:eb:ac:05:89:20:08:0a:74:02:7a:f2:ad:5d:d1:9e:
fc:55:d9:b4:8c:86:65:9c:f8:41:78:54:b4:89:40:6e:ee:f5:
70:7d:fd:3f:97:54:8c:fd:89:6c:2f:30:1e:59:b0:79:fe:6e:
c0:8e:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:16 2026 by rpki-client