Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa
File: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (raw, json)
Hash identifier: zlbfKA1T+ov5ixRAxM5b0Qr4cmnnKxJOS7P+Vhzpfmg=
Subject key identifier: BB:4E:76:81:93:74:25:CE:A1:9B:BE:DC:94:2E:1D:2F:39:2F:0C:AB
Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Certificate serial: 2B431A50898934987FB952EA9B11A12A0C67E97F
Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa
Signing time: Fri 24 Apr 2026 11:00:02 +0000
ROA not before: Fri 24 Apr 2026 10:55:02 +0000
ROA not after: Fri 23 Apr 2027 11:00:02 +0000
asID: 141602
IP address blocks: 103.159.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:43:1a:50:89:89:34:98:7f:b9:52:ea:9b:11:a1:2a:0c:67:e9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Validity
Not Before: Apr 24 10:55:02 2026 GMT
Not After : Apr 23 11:00:02 2027 GMT
Subject: CN=BB4E7681937425CEA19BBEDC942E1D2F392F0CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:eb:15:bf:2f:ce:19:30:33:aa:da:83:7b:
96:4c:49:0b:4e:48:37:4f:7c:f2:46:5f:34:da:57:
46:d8:d9:28:0b:fa:ad:53:b5:c2:fa:c3:4c:cd:de:
e3:28:71:0f:47:70:79:0f:5d:aa:83:59:48:4b:81:
07:9b:fb:0c:9f:e3:25:3d:bd:b4:0e:fa:26:2f:b3:
9d:34:d3:3d:e9:69:c2:e4:cc:c4:25:0d:8d:3a:ce:
81:e8:12:d1:88:86:0d:57:20:18:38:0c:18:f0:c2:
0b:70:0e:ae:d5:72:4b:d2:61:6a:50:e4:93:98:04:
94:4b:6b:b4:3a:02:f0:7d:fd:e6:d5:0e:72:d8:c9:
09:19:a1:2e:80:83:72:89:1b:8a:15:53:78:2f:61:
5f:b6:0f:81:b6:36:31:44:b5:22:a3:79:3b:df:db:
06:e0:ac:fa:5e:cb:49:4f:73:7f:c0:13:4e:76:cd:
7a:68:9c:fe:08:20:d7:a5:91:e3:c7:6b:b1:47:52:
3c:db:9c:f5:ec:42:ce:36:f9:2a:43:26:c7:b3:92:
41:d3:d5:a4:02:46:aa:a0:8f:b7:07:9b:63:5a:20:
23:bd:4c:53:de:c8:73:14:33:89:e2:02:56:a9:6f:
07:9f:23:0f:05:d0:d8:ec:31:dd:d3:2a:a8:25:cb:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:76:81:93:74:25:CE:A1:9B:BE:DC:94:2E:1D:2F:39:2F:0C:AB
X509v3 Authority Key Identifier:
keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.112.0/24
Signature Algorithm: sha256WithRSAEncryption
87:38:9f:31:11:5f:91:89:67:57:23:23:71:d6:d4:c8:5c:8a:
57:d5:67:17:61:f2:45:aa:b7:0b:12:18:bc:b6:92:9f:8c:eb:
35:0f:70:9e:aa:c9:4d:71:d7:16:1b:7f:ed:bb:93:de:49:6d:
3b:ac:6a:3d:c2:40:f8:cf:78:b0:07:eb:3d:17:e7:38:11:a0:
f2:2b:88:f4:81:79:b5:e6:d4:c4:c3:4f:03:2a:22:11:43:79:
eb:0b:0e:a5:50:ea:04:1f:c4:cb:9b:67:57:b7:29:e7:d2:55:
62:78:d1:05:ab:af:c5:27:f7:39:f7:19:fe:d9:38:e4:71:74:
33:eb:61:db:02:bc:4b:92:d8:ff:bf:7a:51:02:3c:07:3b:0e:
e0:b4:f2:1d:44:e3:d5:b7:42:4b:7a:ab:c7:fa:75:a5:c4:25:
a7:af:45:25:72:dc:dc:63:f6:eb:5c:2e:a4:34:e1:9d:e7:da:
a7:bf:e0:a3:82:92:4f:85:f9:cb:52:f2:d9:be:e2:29:90:0d:
da:d5:8c:72:db:b7:3d:26:bf:fe:6b:04:4d:6f:bb:05:f6:03:
10:28:06:5b:33:28:07:29:66:b9:d2:c1:a1:aa:9b:43:ae:b2:
bf:43:33:f2:7b:1a:03:73:81:84:ab:fe:56:7c:e5:3e:e2:ae:
d1:fc:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 12:02:14 2026 by rpki-client