Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e362e302f32342d3234203d3e203338373533.roa
File: 3130332e32392e362e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier: cRgslTh3PXJEKANjJWqtxp9J1yCu2y4M+r3ttZJ2MxY=
Subject key identifier: F7:8B:EE:2E:C6:40:2A:CB:A5:3C:D3:E8:C2:34:8D:83:B0:95:C6:CE
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 6996972A2C9ECBC968C92AAD05D14F0889986DD9
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e362e302f32342d3234203d3e203338373533.roa
Signing time: Tue 21 Apr 2026 03:00:02 +0000
ROA not before: Tue 21 Apr 2026 02:55:02 +0000
ROA not after: Tue 20 Apr 2027 03:00:02 +0000
asID: 38753
IP address blocks: 103.29.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:96:97:2a:2c:9e:cb:c9:68:c9:2a:ad:05:d1:4f:08:89:98:6d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Apr 21 02:55:02 2026 GMT
Not After : Apr 20 03:00:02 2027 GMT
Subject: CN=F78BEE2EC6402ACBA53CD3E8C2348D83B095C6CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:dd:1e:33:c9:9f:19:d3:c3:ea:93:c4:4c:
3f:d7:17:6d:5b:61:d3:17:7b:7a:61:09:e8:48:e7:
78:73:51:2c:da:8a:6e:2a:0c:d3:be:d3:64:1a:0c:
3e:f2:cb:de:6a:5a:42:e6:a9:96:e4:b0:ce:8c:b7:
41:a7:be:64:f6:ba:bb:15:ef:31:16:01:30:f6:b0:
8c:24:80:70:55:3d:f5:1e:bf:20:3a:d9:e2:32:ec:
b6:ff:1d:10:59:77:5a:11:7a:2e:35:0c:57:4f:aa:
28:bd:85:b0:d2:69:59:bf:1a:17:7b:07:88:dd:e7:
f0:ce:1a:85:4a:f3:2f:1e:0a:12:86:ae:c4:5b:0c:
f7:17:fa:70:aa:32:45:18:2f:fd:34:d3:dc:52:96:
79:00:03:0c:2d:68:68:75:d3:05:fe:2e:21:59:26:
d5:ef:b4:91:1d:8a:e4:da:1f:7e:a5:8b:1d:d2:dd:
6a:b3:db:81:da:1a:01:26:d3:68:97:16:7f:90:09:
ac:e5:72:8f:48:a9:ae:b4:96:30:ac:9f:a6:ae:d2:
ee:c2:31:5a:39:f2:f4:d1:22:b7:d6:3c:35:6d:3b:
50:2b:a1:1b:65:61:a6:cc:00:7e:cc:59:9a:b2:a9:
d2:4b:ba:b9:41:54:51:a5:8e:25:d5:38:e8:65:42:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8B:EE:2E:C6:40:2A:CB:A5:3C:D3:E8:C2:34:8D:83:B0:95:C6:CE
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e362e302f32342d3234203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:72:8e:08:8a:1c:79:2e:1f:a1:02:79:a9:9c:22:91:64:e5:
a7:c4:37:91:df:4a:ea:fd:84:40:e7:94:67:9f:02:4d:69:ee:
17:db:74:0a:e9:46:1a:cb:e5:eb:de:92:8e:eb:46:ec:c1:aa:
db:5e:42:48:3b:e4:99:1e:67:d2:99:2f:97:c0:60:9a:c5:11:
ff:7c:b7:42:64:79:97:ee:2b:fd:46:f5:83:c1:e5:25:00:6a:
5d:e8:ef:eb:a9:84:9a:f2:9a:5b:16:cb:c4:c2:f9:d3:3b:18:
19:df:89:c7:91:e2:4a:51:06:f4:9f:d6:e2:e5:f3:af:c5:41:
31:8b:ca:2a:87:26:6d:d0:1b:d7:93:5b:31:51:f0:74:39:49:
c1:1c:91:d0:6b:76:74:60:fd:84:3d:9a:cb:64:28:aa:ef:f0:
74:82:b0:c2:7f:3e:a5:1d:5e:e1:c3:43:e3:93:07:d5:c9:60:
24:16:e3:18:64:b6:f1:a5:39:35:db:f8:31:0b:27:fd:29:c5:
e3:2a:74:4f:ad:c8:a9:cc:ef:bb:82:b6:cf:a5:70:30:fa:dc:
2f:9d:98:3d:0a:0c:8a:81:32:66:63:be:86:16:27:c9:56:ca:
5e:d6:f6:48:83:0f:48:24:8e:be:40:b5:f2:79:ad:23:b7:c8:
0b:54:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:32 2026 by rpki-client