Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa
File: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (raw, json)
Hash identifier: juXY9Ufm/Kj2OcgyR4E7Zpe5y/9AvVbUXBaN4oNLHDk=
Subject key identifier: FE:F4:C8:3C:6A:FD:09:24:FC:3C:86:80:C8:61:51:58:AD:6A:19:C2
Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8
Certificate serial: 1D61AB1620B08988076764B24B7A83CD15EEE52C
Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa
Signing time: Tue 28 Apr 2026 10:05:26 +0000
ROA not before: Tue 28 Apr 2026 10:00:26 +0000
ROA not after: Tue 27 Apr 2027 10:05:26 +0000
asID: 149967
IP address blocks: 103.21.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:61:ab:16:20:b0:89:88:07:67:64:b2:4b:7a:83:cd:15:ee:e5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8
Validity
Not Before: Apr 28 10:00:26 2026 GMT
Not After : Apr 27 10:05:26 2027 GMT
Subject: CN=FEF4C83C6AFD0924FC3C8680C8615158AD6A19C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:cf:23:ed:99:73:e4:27:05:74:e8:ad:d2:
1b:52:a3:0d:d7:e6:6c:89:20:79:5b:cc:32:fb:03:
5b:32:73:92:81:e0:ce:36:b8:f8:ca:77:72:dd:2e:
f3:a4:98:6c:32:88:31:dd:21:8f:72:00:9a:63:c8:
0e:ef:47:ae:da:57:a2:70:16:c4:e0:7d:97:88:e4:
42:9b:93:6d:66:d4:13:34:05:be:ae:bd:8a:b2:6b:
67:09:c4:e4:e5:13:77:30:7d:08:78:48:56:46:37:
fb:39:12:cc:51:e5:02:56:49:50:30:c6:cd:91:62:
5d:ee:78:48:77:04:8b:93:9f:62:29:ec:82:17:67:
ef:f3:47:92:cc:d6:6b:53:44:33:a7:e1:4e:e5:91:
bb:a1:42:11:3b:c0:be:f8:4a:02:79:f6:d8:e7:ec:
eb:09:ad:b2:1d:62:79:5d:51:ea:b2:52:de:7a:35:
c3:a9:5f:9a:50:f8:b8:35:2d:4e:83:db:e7:a1:0d:
5e:98:33:70:83:f3:6d:6a:3c:7e:79:81:42:db:36:
19:c5:ed:65:44:93:7b:4d:ad:f0:d4:e7:ed:c8:ac:
5e:ac:51:b5:be:9f:ba:5d:07:cb:0c:1b:71:ad:5d:
eb:53:43:95:fb:3c:4b:f2:5c:88:ae:e8:a7:c3:d3:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F4:C8:3C:6A:FD:09:24:FC:3C:86:80:C8:61:51:58:AD:6A:19:C2
X509v3 Authority Key Identifier:
keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f4:81:23:c3:4f:8e:b7:b0:e5:7d:b5:e6:28:7c:95:a9:9b:
20:de:ac:b8:00:84:d5:81:73:7c:01:a6:d7:87:be:8b:75:02:
65:f6:bf:bd:c4:db:b1:94:80:c0:f9:4e:f7:83:d3:27:f1:15:
03:e6:b2:93:03:7a:5d:a7:57:f3:ba:c4:23:e9:f4:a7:f4:50:
86:c5:09:ec:ed:94:9f:6a:c5:77:cb:5c:8f:42:93:c0:9f:5f:
c1:ed:af:df:61:06:39:62:cb:18:c4:7a:44:27:32:df:5e:e0:
83:c0:e9:4b:72:c0:f8:8e:fc:83:58:b8:1c:cc:34:4c:78:52:
f1:27:63:44:2e:1b:6b:84:6c:0e:3c:fa:90:98:03:ce:b8:10:
f9:c7:d4:9c:b8:32:a3:ed:c8:2d:e0:a7:ea:78:34:0f:99:42:
b5:ca:43:88:f0:6e:1c:6b:a1:30:c9:eb:8a:01:4b:23:32:83:
1a:03:8d:33:06:b4:fd:ac:c0:44:e3:c8:bc:bf:d3:53:b9:37:
30:34:51:38:f1:64:c1:09:ca:15:10:d3:ad:67:2f:3d:53:97:
47:ca:5d:ef:e6:a0:a6:d5:2b:6a:f5:86:be:e6:c5:24:6a:92:
38:5c:b3:2e:70:c8:6b:1e:5d:ad:c2:64:5d:cc:4d:ac:f1:f1:
d5:92:fb:92
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHWGrFiCwiYgHZ2SyS3qDzRXu5SwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG
ODdGM0VDODAeFw0yNjA0MjgxMDAwMjZaFw0yNzA0MjcxMDA1MjZaMDMxMTAvBgNV
BAMTKEZFRjRDODNDNkFGRDA5MjRGQzNDODY4MEM4NjE1MTU4QUQ2QTE5QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDc8j7Zlz5CcFdOit0htSow3X
5myJIHlbzDL7A1syc5KB4M42uPjKd3LdLvOkmGwyiDHdIY9yAJpjyA7vR67aV6Jw
FsTgfZeI5EKbk21m1BM0Bb6uvYqya2cJxOTlE3cwfQh4SFZGN/s5EsxR5QJWSVAw
xs2RYl3ueEh3BIuTn2Ip7IIXZ+/zR5LM1mtTRDOn4U7lkbuhQhE7wL74SgJ59tjn
7OsJrbIdYnldUeqyUt56NcOpX5pQ+Lg1LU6D2+ehDV6YM3CD821qPH55gULbNhnF
7WVEk3tNrfDU5+3IrF6sUbW+n7pdB8sMG3GtXetTQ5X7PEvyXIiu6KfD062ZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/vTIPGr9CST8PIaAyGFRWK1qGcIwHwYDVR0j
BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF
NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG
M0VDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ODNiMjdjLWE3MzAtNDAwMi05
MWI4LWQwMzY2ZGZhYzc3ZS8wLzMxMzAzMzJlMzIzMTJlMzEzOTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxXDMA0GCSqG
SIb3DQEBCwUAA4IBAQAO9IEjw0+Ot7DlfbXmKHyVqZsg3qy4AITVgXN8AabXh76L
dQJl9r+9xNuxlIDA+U73g9Mn8RUD5rKTA3pdp1fzusQj6fSn9FCGxQns7ZSfasV3
y1yPQpPAn1/B7a/fYQY5YssYxHpEJzLfXuCDwOlLcsD4jvyDWLgczDRMeFLxJ2NE
LhtrhGwOPPqQmAPOuBD5x9ScuDKj7cgt4KfqeDQPmUK1ykOI8G4ca6EwyeuKAUsj
MoMaA40zBrT9rMBE48i8v9NTuTcwNFE48WTBCcoVENOtZy89U5dHyl3v5qCm1Stq
9Ya+5sUkapI4XLMucMhrHl2twmRdzE2s8fHVkvuS
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:19 2026 by rpki-client