Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa
File: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier: 71lerHyYxrUlUi2hQ+pnLFS/ksMo/6sn6l12FTOEJCk=
Subject key identifier: 2A:D3:DF:E4:D6:DC:08:A1:14:C7:7A:A3:F7:65:2A:23:EB:2F:E4:0E
Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial: 47F6909A50F8FF53C36CD93C7F60A9B8FFC3C576
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa
Signing time: Fri 24 Apr 2026 03:00:02 +0000
ROA not before: Fri 24 Apr 2026 02:55:02 +0000
ROA not after: Fri 23 Apr 2027 03:00:02 +0000
asID: 138089
IP address blocks: 103.131.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f6:90:9a:50:f8:ff:53:c3:6c:d9:3c:7f:60:a9:b8:ff:c3:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Validity
Not Before: Apr 24 02:55:02 2026 GMT
Not After : Apr 23 03:00:02 2027 GMT
Subject: CN=2AD3DFE4D6DC08A114C77AA3F7652A23EB2FE40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:00:b4:d6:da:38:19:b7:58:e7:25:c8:b1:
86:c2:91:e9:f0:1a:1b:fd:a2:98:08:92:58:5c:83:
82:6c:e7:46:7c:de:fe:51:01:12:4e:09:9b:05:31:
7b:c3:30:47:76:15:43:96:dd:5d:85:24:83:df:ea:
b9:71:1c:42:db:aa:c7:00:dc:3c:d3:99:2d:84:d3:
aa:ca:28:77:25:e4:64:9f:7c:f8:88:73:45:90:2b:
a3:68:e6:09:c2:56:dc:56:d7:8f:dd:97:99:f2:00:
5e:f6:67:23:b3:58:22:08:13:95:c2:d7:0d:fb:fe:
fc:9c:e5:ba:f1:82:78:79:8b:05:c6:d4:e8:c7:e6:
32:28:1a:18:c2:12:d2:25:65:13:f4:a4:57:dc:f2:
45:0c:75:98:37:6f:fa:6c:17:cf:ad:c3:b5:fd:d7:
27:7b:51:52:d3:4f:ad:96:3a:d7:5f:f3:3b:db:20:
b4:66:e5:9b:69:4b:b9:75:64:4d:a2:41:05:a3:d3:
03:1d:24:3a:e8:6c:9a:6f:ec:80:e2:15:34:9d:6c:
04:79:13:a2:0c:3c:c4:47:96:fb:1a:76:e3:41:af:
a4:52:b6:6d:d8:03:d2:c5:9f:80:5f:b7:82:2d:d6:
97:2d:1e:b9:79:19:d4:a7:db:a0:01:cb:98:92:d6:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D3:DF:E4:D6:DC:08:A1:14:C7:7A:A3:F7:65:2A:23:EB:2F:E4:0E
X509v3 Authority Key Identifier:
keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5e:38:13:6b:19:a7:1b:13:a5:31:a8:4c:5f:4f:ce:09:a1:
43:52:60:98:09:b9:2d:1c:f4:fd:c1:5d:0a:6d:c1:4e:66:0c:
35:2b:70:f7:56:c5:a5:1a:4c:62:53:6e:99:88:29:68:a3:60:
3d:49:41:33:33:65:a1:a2:a4:cd:0c:69:73:bb:c4:a1:60:4b:
88:0b:da:49:62:ec:ca:27:5b:9a:2c:75:16:b8:15:6a:fb:29:
b3:ea:b2:6b:e2:6f:b3:c8:95:32:ae:3a:7c:46:e6:38:49:83:
ea:e6:75:d0:ce:0d:73:d8:36:e7:d5:13:6c:4f:ee:ac:d3:e2:
97:ff:3c:fd:70:e2:95:72:11:02:86:86:72:a2:1a:20:b0:c9:
2e:03:b9:40:d6:6a:26:22:16:30:9a:d4:01:4c:f3:52:af:01:
2b:c8:54:0a:1c:77:00:f0:cb:2e:2b:9c:ec:18:a2:a4:41:a9:
ee:1e:0a:55:ab:64:68:6a:c7:36:61:93:69:93:94:08:03:ba:
aa:a1:17:f2:ec:0a:bb:e5:15:08:2f:91:12:b2:48:a7:1a:ba:
ca:7b:22:62:d1:a3:6e:c9:b2:21:6d:8a:bc:19:01:28:ea:d7:
f6:cd:97:94:53:25:71:d7:2d:0a:79:0a:7d:ba:83:aa:18:7b:
d2:59:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:26:11 2026 by rpki-client