Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa
File: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (raw, json)
Hash identifier: d9VwfoXlxTMhSxebRpDsGNr3UQKFrXBw88x5ujvrjOE=
Subject key identifier: F8:34:3F:8D:CB:5A:48:A8:CA:CD:1A:DD:94:FD:E8:D6:38:94:76:BA
Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Certificate serial: 0FD2E1702E068423CDF141A7505A191DA5C47C3E
Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa
Signing time: Fri 24 Apr 2026 11:00:02 +0000
ROA not before: Fri 24 Apr 2026 10:55:02 +0000
ROA not after: Fri 23 Apr 2027 11:00:02 +0000
asID: 141602
IP address blocks: 103.159.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d2:e1:70:2e:06:84:23:cd:f1:41:a7:50:5a:19:1d:a5:c4:7c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Validity
Not Before: Apr 24 10:55:02 2026 GMT
Not After : Apr 23 11:00:02 2027 GMT
Subject: CN=F8343F8DCB5A48A8CACD1ADD94FDE8D6389476BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:d9:13:d1:3f:30:d9:a2:8a:fa:64:e2:02:
2d:ea:e3:31:bc:cb:07:ca:c1:59:ef:99:76:d7:7c:
bc:6d:6d:8e:67:16:25:f5:b3:db:bb:65:5d:fe:49:
a0:69:a8:40:bf:5c:ac:4a:40:5b:b2:46:69:4b:e0:
82:31:e7:88:a2:c4:bf:02:b1:eb:5d:43:e9:1d:73:
52:f5:64:ae:fc:3c:d1:7d:c1:93:0c:f7:a8:ea:22:
dc:50:30:01:46:52:21:5a:e0:3a:02:ad:6e:ef:73:
f1:c7:9d:a7:dc:3d:e8:83:40:76:38:bc:6a:ab:01:
04:95:18:f0:55:b6:29:fc:e8:fe:6f:b5:d8:12:01:
08:88:62:5d:4a:a6:68:78:fd:73:17:aa:16:61:63:
40:d4:46:fe:c1:fa:2d:34:6f:af:de:d8:48:fa:dc:
a8:5e:6d:04:39:bd:77:fb:28:c4:08:cb:23:e4:db:
5d:89:89:92:91:04:78:bf:fc:9c:d1:16:61:b3:44:
de:5f:11:d8:22:b3:0f:d4:8c:c0:45:88:a5:7e:f4:
6c:e8:8b:3f:56:7e:ad:c1:65:51:51:6a:64:5e:a6:
4c:c9:d6:42:0e:74:29:f2:7f:36:78:25:b7:2d:2b:
a9:e2:17:9d:fd:09:22:bc:ae:1a:b5:ff:3f:80:a6:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:34:3F:8D:CB:5A:48:A8:CA:CD:1A:DD:94:FD:E8:D6:38:94:76:BA
X509v3 Authority Key Identifier:
keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d1:85:ad:12:9b:d4:c7:23:a4:70:d8:40:71:a3:dc:f8:3e:
85:fc:91:50:7b:bc:a6:0f:92:b1:5b:b0:8f:c9:38:a0:3f:57:
a1:d2:c2:24:6e:54:9c:39:f2:5c:f2:ca:4d:4c:76:15:47:0f:
71:ef:80:df:1e:54:39:ed:85:fe:94:d5:7f:11:4a:80:72:e1:
54:45:54:11:f7:e6:55:e0:ef:ae:45:c6:17:21:d0:fd:cc:4f:
d2:44:c1:dc:b6:f3:c2:6a:48:f0:23:37:b7:4e:e0:bd:5e:e2:
05:4e:94:e2:fa:8d:6a:1b:06:d8:72:9a:72:0a:f6:57:af:8c:
c6:ff:ec:8d:46:ab:d9:a4:e3:20:c6:27:3c:ca:b7:5f:cd:48:
0d:cb:67:0d:d5:66:31:3e:25:10:0a:4b:af:08:8a:69:09:fb:
45:27:cc:66:42:98:ed:5e:81:61:6b:34:0a:09:aa:c9:ed:d6:
cd:c3:49:df:1e:86:01:5b:92:a8:5d:38:e8:95:c1:f3:7c:13:
e3:4b:1c:d7:67:14:ac:ad:aa:a8:dc:f1:56:a8:d9:8a:d1:db:
49:d9:5f:1d:24:ee:1f:8c:91:a7:d5:fd:c5:a5:bf:ed:3e:ad:
b9:c8:a9:d7:65:a5:6e:76:25:50:f9:6b:c1:2b:8c:04:7e:ca:
6f:25:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 12:02:00 2026 by rpki-client