Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa
File: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (raw, json)
Hash identifier: SVnreTTlkp7+sQnw4+R3hX14n81V29Q1H9tD8bUKB0M=
Subject key identifier: 35:DB:C2:D0:20:F4:B7:30:7D:E5:AD:C1:41:AA:0C:BC:EC:85:CF:3F
Certificate issuer: /CN=6C9FD300DFD761AFDA950CE979599BBE316BB13C
Certificate serial: 6016BD1022AB4FCF7F3FD93A0EFAF98F15367095
Authority key identifier: 6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa
Signing time: Wed 22 Apr 2026 11:00:02 +0000
ROA not before: Wed 22 Apr 2026 10:55:02 +0000
ROA not after: Wed 21 Apr 2027 11:00:02 +0000
asID: 150985
IP address blocks: 103.228.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:16:bd:10:22:ab:4f:cf:7f:3f:d9:3a:0e:fa:f9:8f:15:36:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C9FD300DFD761AFDA950CE979599BBE316BB13C
Validity
Not Before: Apr 22 10:55:02 2026 GMT
Not After : Apr 21 11:00:02 2027 GMT
Subject: CN=35DBC2D020F4B7307DE5ADC141AA0CBCEC85CF3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:86:d7:d3:a0:60:4b:41:08:06:a6:4a:16:
28:42:16:20:cb:a8:b0:5e:bb:ac:ae:c4:bf:e0:8c:
10:7a:ef:62:34:a9:64:79:0c:45:c8:e0:a2:b6:be:
8f:bb:e6:41:d5:4e:b9:84:a7:65:a3:0d:96:dd:83:
67:c3:8a:49:47:ac:eb:c1:1a:20:16:5b:58:b0:a1:
41:10:5a:95:05:ae:25:ae:90:fc:53:ad:4e:44:c2:
0b:f9:be:d6:fd:aa:54:40:0a:a5:3d:46:73:92:32:
c2:6e:67:15:d9:57:d3:ef:18:83:98:a1:07:bc:d2:
d8:05:f1:b9:b4:50:e0:61:82:f9:4f:cd:cb:b6:14:
12:0d:67:a2:75:f3:27:31:4b:6c:04:bf:e1:ad:20:
15:a7:7b:8e:9d:55:15:88:7e:66:cd:f6:c9:a7:f6:
38:40:6d:1c:43:04:66:c0:94:4e:c6:84:96:2f:db:
f0:28:5f:b3:e4:6d:97:e3:78:a8:c3:88:ee:93:3c:
38:4c:6f:6b:d1:35:2c:57:42:0e:26:a1:63:64:df:
ff:f5:5d:29:f4:ec:50:0c:df:ef:64:ea:55:1d:10:
61:23:1b:64:15:e3:cb:fe:e4:c7:0d:1d:a8:04:4a:
49:75:8a:61:86:95:30:5b:1f:86:bf:74:bc:e0:14:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DB:C2:D0:20:F4:B7:30:7D:E5:AD:C1:41:AA:0C:BC:EC:85:CF:3F
X509v3 Authority Key Identifier:
keyid:6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.18.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5a:3b:a7:d0:c1:b7:3b:85:25:87:ac:fe:9a:85:1d:e5:42:
7c:4b:a5:67:00:67:f2:19:9f:83:f3:0e:3b:4a:cc:65:4f:c9:
bb:ce:64:32:e7:4b:de:05:fe:b3:91:b7:30:4b:18:c2:a2:1e:
8c:8e:4b:43:00:02:f7:13:26:a3:8e:3b:ac:f7:b8:76:de:66:
89:8e:65:6e:12:05:04:a9:87:95:5a:0c:4b:34:72:39:7c:35:
52:36:e8:cb:95:48:bb:33:c4:29:11:92:8f:f2:1b:95:4e:85:
6e:d3:d5:86:50:54:2a:2c:5a:d8:41:0d:aa:2c:ab:03:eb:ce:
ea:e3:0b:53:de:c7:d2:6d:23:77:bc:9c:12:42:cc:54:4c:21:
d1:11:d2:db:76:9b:bd:50:48:50:34:c3:2d:89:87:36:e0:ee:
15:48:ed:ec:e3:b9:fe:68:85:1c:05:8d:12:b2:7f:6b:2d:c6:
80:13:cd:d2:a9:a7:be:db:dc:85:f5:91:c5:49:a5:64:e1:40:
d9:c5:c1:4a:e0:23:4b:ef:3a:05:b0:df:6e:5f:c5:85:0f:11:
30:74:58:f7:ae:c1:fb:c8:f2:96:89:3c:32:00:09:bc:e1:88:
1d:f3:91:dc:cb:75:e8:5d:ef:b2:10:4d:b8:9b:42:d1:a6:5a:
c2:36:44:c3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYBa9ECKrT89/P9k6Dvr5jxU2cJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM5RkQzMDBERkQ3NjFBRkRBOTUwQ0U5Nzk1OTlCQkUz
MTZCQjEzQzAeFw0yNjA0MjIxMDU1MDJaFw0yNzA0MjExMTAwMDJaMDMxMTAvBgNV
BAMTKDM1REJDMkQwMjBGNEI3MzA3REU1QURDMTQxQUEwQ0JDRUM4NUNGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/obX06BgS0EIBqZKFihCFiDL
qLBeu6yuxL/gjBB672I0qWR5DEXI4KK2vo+75kHVTrmEp2WjDZbdg2fDiklHrOvB
GiAWW1iwoUEQWpUFriWukPxTrU5Ewgv5vtb9qlRACqU9RnOSMsJuZxXZV9PvGIOY
oQe80tgF8bm0UOBhgvlPzcu2FBINZ6J18ycxS2wEv+GtIBWne46dVRWIfmbN9smn
9jhAbRxDBGbAlE7GhJYv2/AoX7PkbZfjeKjDiO6TPDhMb2vRNSxXQg4moWNk3//1
XSn07FAM3+9k6lUdEGEjG2QV48v+5McNHagESkl1imGGlTBbH4a/dLzgFBXzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNdvC0CD0tzB95a3BQaoMvOyFzz8wHwYDVR0j
BBgwFoAUbJ/TAN/XYa/alQzpeVmbvjFrsTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMS82QzlGRDMwMERG
RDc2MUFGREE5NTBDRTk3OTU5OUJCRTMxNkJCMTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkM5RkQzMDBERkQ3NjFBRkRBOTUwQ0U5Nzk1OTlCQkUzMTZC
QjEzQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzMjk3OTNlLThmMTgtNDExNi05
MjY4LWExMzNkYWYxMWNlZi8xLzMxMzAzMzJlMzIzMjM4MmUzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+QSMA0GCSqG
SIb3DQEBCwUAA4IBAQBXWjun0MG3O4Ulh6z+moUd5UJ8S6VnAGfyGZ+D8w47Ssxl
T8m7zmQy50veBf6zkbcwSxjCoh6MjktDAAL3Eyajjjus97h23maJjmVuEgUEqYeV
WgxLNHI5fDVSNujLlUi7M8QpEZKP8huVToVu09WGUFQqLFrYQQ2qLKsD687q4wtT
3sfSbSN3vJwSQsxUTCHREdLbdpu9UEhQNMMtiYc24O4VSO3s47n+aIUcBY0Ssn9r
LcaAE83Sqae+29yF9ZHFSaVk4UDZxcFK4CNL7zoFsN9uX8WFDxEwdFj3rsH7yPKW
iTwyAAm84Ygd85Hcy3XoXe+yEE24m0LRplrCNkTD
-----END CERTIFICATE-----
Generated at Sun Jul 19 12:03:22 2026 by rpki-client