Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa
File:                     3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          dPvhLVbBMd1lxXfQkRhR8fR6L62qMBphAqPInlh6cMg=
Subject key identifier:   26:9B:44:AC:CF:74:40:D1:21:6A:FF:A2:D5:88:CA:ED:05:24:06:B4
Certificate issuer:       /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
Certificate serial:       32A845D4562B6E4ADA743578845C84E88C59B944
Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa
Signing time:             Thu 23 Apr 2026 06:00:02 +0000
ROA not before:           Thu 23 Apr 2026 05:55:02 +0000
ROA not after:            Thu 22 Apr 2027 06:00:02 +0000
asID:                     135477
IP address blocks:        103.76.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a8:45:d4:56:2b:6e:4a:da:74:35:78:84:5c:84:e8:8c:59:b9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
        Validity
            Not Before: Apr 23 05:55:02 2026 GMT
            Not After : Apr 22 06:00:02 2027 GMT
        Subject: CN=269B44ACCF7440D1216AFFA2D588CAED052406B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:24:25:26:d0:c6:34:ed:8b:40:8b:1b:40:
                    f8:34:f5:84:56:c4:6c:dd:92:91:fe:19:17:fa:fa:
                    4c:21:f9:87:35:95:5f:17:47:97:72:05:26:cb:1c:
                    da:c5:ee:cc:2f:ed:a2:1b:5c:63:f2:53:b0:17:04:
                    b2:f5:1a:28:10:f2:d0:40:1b:0b:a3:11:96:2d:9d:
                    6f:54:1b:14:e1:ba:d4:f7:a2:fc:1d:61:9a:c4:a0:
                    8a:cb:d8:5e:c5:04:a1:cc:a2:6e:aa:e0:07:d3:13:
                    76:b4:d6:1b:75:33:ca:23:de:15:9f:df:e7:bb:ad:
                    f9:e0:b3:f9:72:07:64:29:ac:0c:e7:a0:ac:f8:15:
                    f7:74:53:82:dc:75:13:65:41:93:0a:fd:6a:d2:c5:
                    74:a4:06:88:f7:36:8d:df:ad:1c:fa:90:bd:69:c7:
                    dc:0a:3c:52:d9:11:60:3d:4b:ad:09:2f:f5:d2:ff:
                    75:10:e7:4b:33:ec:20:87:e8:14:f9:26:4e:82:e0:
                    f9:93:15:e0:5e:16:b7:b5:ac:19:4f:c2:94:99:29:
                    d8:82:46:d3:09:06:92:e8:55:2d:ab:da:b9:0a:f9:
                    f0:ff:4c:dd:c4:20:33:a6:37:28:e8:2a:b2:af:a5:
                    7a:29:4a:dd:c2:d5:d4:9a:29:b6:6e:d6:9a:82:7f:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:44:AC:CF:74:40:D1:21:6A:FF:A2:D5:88:CA:ED:05:24:06:B4
            X509v3 Authority Key Identifier:
                keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:fc:86:1f:8e:70:d9:34:f0:55:7d:3a:16:67:2a:22:08:7c:
         36:72:f2:81:ed:4c:6d:a0:0c:4d:23:74:7b:57:50:e4:97:6b:
         cd:ac:0c:5e:e0:98:a9:12:f8:5e:47:96:53:d9:5d:c8:2d:41:
         3a:79:87:b4:64:75:96:2d:db:4f:dc:75:19:86:0a:e0:d2:ea:
         c7:84:e8:dc:26:49:5f:0d:1e:fa:5c:ea:26:4d:19:43:26:fb:
         b2:14:38:9b:11:c8:8c:47:e9:4c:27:78:99:31:a0:ee:07:4e:
         b8:5f:f5:e6:7e:ac:99:25:f1:ec:a3:a0:77:72:67:60:ab:56:
         85:9c:87:a5:80:9f:21:3d:6f:3b:cb:8d:e2:ff:a5:b1:80:9e:
         39:0d:40:25:7f:05:67:e8:d7:82:60:a7:d3:e0:4e:3b:60:fd:
         15:49:d5:7e:42:fd:08:84:a2:14:7b:5f:d0:05:84:3f:4c:fb:
         7e:22:28:27:21:fe:d6:cc:89:ef:be:33:f0:8f:0b:5b:a1:c1:
         95:b6:e3:4a:87:85:bc:73:b9:9e:af:48:28:22:51:c4:08:9e:
         06:1a:d4:4c:c5:96:2e:57:78:0d:fa:0c:11:ee:69:a8:aa:c3:
         81:5f:38:0d:0c:42:ae:4a:1b:d4:a6:4a:6e:a2:94:ce:2a:5a:
         ca:32:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:37 2026 by rpki-client