Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa
File: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (raw, json)
Hash identifier: PmzIgA95kbf9e372hAJYkdzxYxJo40K4YDejPjiuyBU=
Subject key identifier: 82:04:10:46:E1:F3:5A:4C:DF:95:8B:66:CE:41:89:2B:28:99:AD:2E
Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Certificate serial: 2786FC14416A4F63824DE5A24661FF3FF31CB03C
Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa
Signing time: Fri 24 Apr 2026 11:00:02 +0000
ROA not before: Fri 24 Apr 2026 10:55:02 +0000
ROA not after: Fri 23 Apr 2027 11:00:02 +0000
asID: 141602
IP address blocks: 103.159.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:86:fc:14:41:6a:4f:63:82:4d:e5:a2:46:61:ff:3f:f3:1c:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Validity
Not Before: Apr 24 10:55:02 2026 GMT
Not After : Apr 23 11:00:02 2027 GMT
Subject: CN=82041046E1F35A4CDF958B66CE41892B2899AD2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:fe:f3:ed:54:99:ef:d1:bc:8e:50:6d:9b:
5a:d7:5d:79:c7:91:5f:d3:16:5f:ca:87:df:3a:c1:
b3:6f:01:02:39:7e:33:ef:e5:72:35:00:08:26:6a:
15:ae:9c:7f:66:27:cd:34:42:38:b4:a1:23:77:57:
c9:78:46:31:35:80:6a:f5:ba:23:58:5d:8b:41:03:
b5:f1:26:c1:d2:57:32:1b:e0:fe:31:24:e1:a9:b2:
0d:32:ec:af:be:a1:75:0d:8c:45:33:05:b6:68:b4:
04:b1:4c:c0:ea:04:7c:df:4d:05:55:0b:65:d8:7d:
25:1b:50:02:8a:57:83:89:5f:b4:7d:ba:ad:da:36:
3f:28:b7:63:be:c4:34:7b:e1:94:86:62:22:dd:2c:
60:52:70:72:2c:e8:11:b6:95:03:73:1f:2d:26:22:
de:5e:ae:fa:2d:b4:b2:59:18:a8:6f:60:01:42:6b:
8a:c0:10:13:f0:63:9a:e9:26:28:3a:0c:f9:75:14:
ed:b6:29:fa:c5:6a:17:1d:a0:8c:21:c4:d8:fa:04:
f1:b4:01:63:6a:51:07:65:6f:ab:d7:c6:a2:bc:2b:
73:b2:df:30:ac:29:76:e7:f6:0f:ad:ca:fc:91:46:
c5:c6:3f:f3:46:fc:5b:54:a6:49:ae:60:83:3d:91:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:10:46:E1:F3:5A:4C:DF:95:8B:66:CE:41:89:2B:28:99:AD:2E
X509v3 Authority Key Identifier:
keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.112.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:49:f2:8e:31:88:18:37:43:b8:cb:dc:80:13:b3:09:80:ad:
5d:e3:df:bf:83:1a:8b:89:b2:cc:39:f2:7b:8f:14:35:54:3a:
28:68:8f:a4:36:f1:a3:00:2e:95:c6:d7:9e:8e:16:84:6e:e2:
b6:69:12:fb:28:c1:ac:99:55:9b:dc:21:85:c4:05:da:43:f2:
8d:cd:40:36:50:50:04:af:6d:fe:09:db:50:da:fa:46:50:5e:
9b:ee:7d:90:3f:ba:3f:fc:36:bf:e4:93:e9:dc:f1:33:a7:d0:
46:59:70:9a:e6:98:4e:0c:53:4c:29:3e:14:54:cb:13:9e:69:
83:a1:fb:1d:e8:95:22:0e:fa:40:68:52:ac:3d:b7:75:d5:64:
be:4b:29:b6:73:43:dd:c7:33:fe:ef:cb:7d:8e:1e:29:85:83:
42:7e:b3:df:a7:91:7e:e7:a4:80:df:ce:87:eb:8a:1f:08:47:
94:4f:b0:39:a0:fc:b2:ca:18:c4:30:2f:14:12:04:64:7c:97:
77:a0:c7:02:19:c0:f5:ca:b5:8f:f7:04:cb:db:b4:c2:15:0f:
bd:ab:b4:5d:32:c5:f5:ce:de:ff:de:75:a8:66:7d:86:65:c4:
24:70:e2:ee:a5:1d:a4:1b:15:7e:4d:a8:bd:47:4e:f5:15:58:
e0:68:6e:6b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUJ4b8FEFqT2OCTeWiRmH/P/McsDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC
Q0UyNkM2NjAeFw0yNjA0MjQxMDU1MDJaFw0yNzA0MjMxMTAwMDJaMDMxMTAvBgNV
BAMTKDgyMDQxMDQ2RTFGMzVBNENERjk1OEI2NkNFNDE4OTJCMjg5OUFEMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqf7z7VSZ79G8jlBtm1rXXXnH
kV/TFl/Kh986wbNvAQI5fjPv5XI1AAgmahWunH9mJ800Qji0oSN3V8l4RjE1gGr1
uiNYXYtBA7XxJsHSVzIb4P4xJOGpsg0y7K++oXUNjEUzBbZotASxTMDqBHzfTQVV
C2XYfSUbUAKKV4OJX7R9uq3aNj8ot2O+xDR74ZSGYiLdLGBScHIs6BG2lQNzHy0m
It5ervottLJZGKhvYAFCa4rAEBPwY5rpJig6DPl1FO22KfrFahcdoIwhxNj6BPG0
AWNqUQdlb6vXxqK8K3Oy3zCsKXbn9g+tyvyRRsXGP/NG/FtUpkmuYIM9kYINAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUggQQRuHzWkzflYtmzkGJKyiZrS4wHwYDVR0j
BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF
OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy
NkM2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExOThmN2Y4LWU3MTUtNGI3OS1h
ZjMyLTJlNTE1NDFhMzRmZi8wLzMxMzAzMzJlMzEzNTM5MmUzMTMxMzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn3AwDQYJ
KoZIhvcNAQELBQADggEBALhJ8o4xiBg3Q7jL3IATswmArV3j37+DGouJssw58nuP
FDVUOihoj6Q28aMALpXG156OFoRu4rZpEvsowayZVZvcIYXEBdpD8o3NQDZQUASv
bf4J21Da+kZQXpvufZA/uj/8Nr/kk+nc8TOn0EZZcJrmmE4MU0wpPhRUyxOeaYOh
+x3olSIO+kBoUqw9t3XVZL5LKbZzQ93HM/7vy32OHimFg0J+s9+nkX7npIDfzofr
ih8IR5RPsDmg/LLKGMQwLxQSBGR8l3egxwIZwPXKtY/3BMvbtMIVD72rtF0yxfXO
3v/edahmfYZlxCRw4u6lHaQbFX5NqL1HTvUVWOBobms=
-----END CERTIFICATE-----
Generated at Sun Jul 19 12:01:55 2026 by rpki-client