Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa
File: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: T4DNFTwuv/rFX7NacMN+i0gB6m2e0DYT6M4A7SHZK1I=
Subject key identifier: DD:04:9A:00:32:98:24:B5:69:F4:A5:04:D7:1F:51:DD:B2:C4:67:52
Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial: 60DFDD08A8A8F8EE782C47342AF9BAADD8126DED
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa
Signing time: Mon 20 Apr 2026 07:02:44 +0000
ROA not before: Mon 20 Apr 2026 06:57:44 +0000
ROA not after: Mon 19 Apr 2027 07:02:44 +0000
asID: 58369
IP address blocks: 103.188.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:df:dd:08:a8:a8:f8:ee:78:2c:47:34:2a:f9:ba:ad:d8:12:6d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
Validity
Not Before: Apr 20 06:57:44 2026 GMT
Not After : Apr 19 07:02:44 2027 GMT
Subject: CN=DD049A00329824B569F4A504D71F51DDB2C46752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d1:6c:7f:25:ac:e7:1d:e1:a3:e6:9e:cc:c6:
e5:a3:c7:0c:e6:fa:b2:fa:8c:5f:32:00:ef:33:f1:
cc:b7:9e:2d:30:d6:f5:bf:4d:30:94:72:f3:0e:b9:
21:40:4e:6e:43:2d:3f:ec:f0:5d:85:b7:19:46:76:
c0:64:91:10:27:fc:d1:16:57:7b:4a:83:42:a5:18:
46:80:9e:06:9b:60:77:ff:07:ce:d6:66:54:78:95:
45:51:ca:fd:3e:1e:2e:af:f0:bd:f1:da:ba:f2:dc:
1c:2a:39:e2:59:d0:d3:dd:09:60:f5:f0:49:4e:39:
35:72:10:64:ef:b3:dc:d7:92:30:71:f5:03:c9:47:
3f:82:59:e0:8e:6f:08:21:fa:37:bc:57:e5:07:58:
83:ea:e0:25:5b:18:80:ab:51:7d:f7:d7:c0:b4:0f:
29:2f:6b:ef:24:9d:cb:3e:e4:76:0a:00:1d:46:4c:
48:77:63:f8:d7:18:2a:fb:52:b8:01:0c:e5:da:55:
f7:b0:37:12:5c:3b:e7:af:63:56:d7:b8:a8:c5:e8:
bb:a8:c5:e3:48:2b:80:94:26:70:5f:c1:9b:f5:6a:
e9:80:fb:bc:0f:0d:5f:df:ea:f3:0d:35:ca:75:26:
6c:f2:21:ff:87:d5:95:e1:9d:90:0d:cf:b6:35:ff:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:9A:00:32:98:24:B5:69:F4:A5:04:D7:1F:51:DD:B2:C4:67:52
X509v3 Authority Key Identifier:
keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.175.0/24
Signature Algorithm: sha256WithRSAEncryption
30:de:f5:05:de:8e:63:37:72:18:10:b8:a5:8d:d7:b5:60:11:
ac:79:a8:90:eb:af:99:7b:d1:bb:c4:3c:c0:b0:ae:89:79:fb:
58:fe:af:8f:ae:23:7f:a6:ce:1b:ce:70:1e:d6:ef:c2:57:24:
93:b5:d5:f0:17:36:27:86:7f:05:b1:7e:69:30:b1:c9:c9:d7:
e7:d3:6a:ca:7b:ae:22:a2:2e:7d:31:d1:c1:0f:1a:e6:ac:e1:
6e:a5:89:0c:ae:cc:0f:26:24:46:e2:b7:4f:70:ac:99:e9:28:
e3:00:41:c4:c0:57:0b:23:fc:0c:f3:a9:e6:91:41:27:e3:ff:
5a:ef:f0:5e:6c:a9:6e:41:ce:92:86:fa:de:76:a0:19:d7:51:
ea:b7:f9:2b:57:c9:41:85:f8:8f:d0:c6:12:8a:c8:37:41:71:
2d:39:08:ca:5d:c2:19:3e:31:de:77:ab:5e:dc:7e:6b:e8:df:
ae:48:e4:65:ce:d4:e9:35:e9:55:12:60:1a:78:9a:63:1e:78:
87:ec:28:9b:34:12:5c:2d:03:2a:9a:82:6c:ba:fe:3a:3e:15:
a1:6c:51:4e:ba:bb:d2:a0:9e:8d:55:49:23:4a:c1:87:7f:be:
17:0c:5f:96:fe:b7:74:25:1c:eb:f3:90:2f:c9:ac:98:6e:ed:
0e:f1:bd:c7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYN/dCKio+O54LEc0Kvm6rdgSbe0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2
OTg0NDNGRTAeFw0yNjA0MjAwNjU3NDRaFw0yNzA0MTkwNzAyNDRaMDMxMTAvBgNV
BAMTKEREMDQ5QTAwMzI5ODI0QjU2OUY0QTUwNEQ3MUY1MUREQjJDNDY3NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD50Wx/JaznHeGj5p7MxuWjxwzm
+rL6jF8yAO8z8cy3ni0w1vW/TTCUcvMOuSFATm5DLT/s8F2FtxlGdsBkkRAn/NEW
V3tKg0KlGEaAngabYHf/B87WZlR4lUVRyv0+Hi6v8L3x2rry3BwqOeJZ0NPdCWD1
8ElOOTVyEGTvs9zXkjBx9QPJRz+CWeCObwgh+je8V+UHWIPq4CVbGICrUX3318C0
Dykva+8kncs+5HYKAB1GTEh3Y/jXGCr7UrgBDOXaVfewNxJcO+evY1bXuKjF6Luo
xeNIK4CUJnBfwZv1aumA+7wPDV/f6vMNNcp1JmzyIf+H1ZXhnZANz7Y1/z4NAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3QSaADKYJLVp9KUE1x9R3bLEZ1IwHwYDVR0j
BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND
RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0
NDNGRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2YmQ1NTM4LTQyNzAtNDEyZC05
ZDY2LWMyYjUxNTdkM2Q2ZS8wLzMxMzAzMzJlMzEzODM4MmUzMTM3MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7yvMA0GCSqG
SIb3DQEBCwUAA4IBAQAw3vUF3o5jN3IYELiljde1YBGseaiQ66+Ze9G7xDzAsK6J
eftY/q+PriN/ps4bznAe1u/CVySTtdXwFzYnhn8FsX5pMLHJydfn02rKe64ioi59
MdHBDxrmrOFupYkMrswPJiRG4rdPcKyZ6SjjAEHEwFcLI/wM86nmkUEn4/9a7/Be
bKluQc6ShvredqAZ11Hqt/krV8lBhfiP0MYSisg3QXEtOQjKXcIZPjHed6te3H5r
6N+uSORlztTpNelVEmAaeJpjHniH7CibNBJcLQMqmoJsuv46PhWhbFFOurvSoJ6N
VUkjSsGHf74XDF+W/rd0JRzr85AvyayYbu0O8b3H
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:17 2026 by rpki-client