Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa
File: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (raw, json)
Hash identifier: bp2tmpVJUJ4JGfzFmogOn8r0O3DFk+QAV5ues55e4AM=
Subject key identifier: CC:AC:D7:B8:73:F2:F9:72:3A:BD:85:54:DE:AF:B5:7D:56:A4:24:0D
Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21
Certificate serial: 5F32241EDAB155E263029DA9B512419897387E7C
Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa
Signing time: Thu 23 Apr 2026 05:01:48 +0000
ROA not before: Thu 23 Apr 2026 04:56:48 +0000
ROA not after: Thu 22 Apr 2027 05:01:48 +0000
asID: 150953
IP address blocks: 103.105.58.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:32:24:1e:da:b1:55:e2:63:02:9d:a9:b5:12:41:98:97:38:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21
Validity
Not Before: Apr 23 04:56:48 2026 GMT
Not After : Apr 22 05:01:48 2027 GMT
Subject: CN=CCACD7B873F2F9723ABD8554DEAFB57D56A4240D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:2a:66:cd:b7:33:75:72:78:9b:a3:d3:f4:
d3:9a:1e:cb:f0:a1:76:5d:e0:dc:63:33:97:88:22:
1a:71:98:38:a8:1d:ac:96:e4:f7:23:19:1b:2d:1a:
d6:24:87:4a:5d:eb:43:5a:0e:3b:14:11:f3:f6:5b:
62:1f:6b:4b:b9:d6:60:dd:09:87:cb:8a:16:9c:4d:
df:06:6f:76:38:63:3c:95:ea:f2:2d:dc:87:74:bf:
bb:2e:ad:82:4e:f4:1b:4d:c6:e5:aa:f4:42:d0:4d:
c5:a2:ed:70:55:94:44:86:50:a7:82:54:61:6a:b2:
27:4a:84:16:aa:3a:fa:c2:95:f7:49:cf:35:31:87:
50:25:c2:de:6a:3d:4e:2d:b5:ae:f4:64:65:5a:c8:
f2:11:f6:31:9e:77:98:6a:e0:f9:6d:a0:da:f7:65:
91:e4:50:83:92:c3:46:e8:10:ea:b5:18:6f:2f:90:
35:84:95:da:db:25:48:fd:69:35:b6:4c:58:9e:ae:
a8:5a:23:83:b1:92:03:5e:7f:96:05:c0:10:84:40:
51:b9:bf:e0:98:fa:72:12:06:b6:be:74:f2:c6:8e:
0b:83:b5:bb:cc:7f:0f:c2:bc:08:d1:f6:71:b0:c0:
78:42:ef:7a:fa:9b:90:88:ab:13:53:a0:3b:3e:50:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AC:D7:B8:73:F2:F9:72:3A:BD:85:54:DE:AF:B5:7D:56:A4:24:0D
X509v3 Authority Key Identifier:
keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:1b:36:49:88:3b:0e:58:b4:e6:57:82:9f:fc:af:cc:c4:33:
11:0a:0c:85:d7:5a:82:95:f0:02:3e:40:a0:d7:4f:5e:71:fc:
9c:0d:f0:4c:82:d5:c0:93:df:5e:c6:a3:fb:03:da:99:c4:36:
df:86:20:c9:e2:f3:8b:40:47:5e:93:a3:13:e5:e1:99:29:af:
70:27:d7:80:17:a5:de:45:aa:c6:96:0e:72:1d:4b:9d:f3:c3:
aa:55:d0:7a:ea:24:90:a3:20:e5:c7:43:4b:48:e2:29:b2:17:
d6:d9:49:df:5f:ec:c8:73:c8:54:09:98:a3:d6:b1:f0:7f:b9:
24:fd:51:90:f4:c4:0e:40:b5:7b:4b:12:87:8f:62:3c:1d:4b:
e7:ba:49:78:38:f4:ff:92:82:50:17:a5:83:49:f0:e7:a6:02:
8e:bf:0d:97:6f:d5:43:3b:fc:08:1b:0d:ef:4f:fc:e1:47:16:
28:4c:ca:66:5a:c0:08:0c:5d:34:e6:5b:b6:88:ad:ef:1d:11:
91:58:60:fb:4a:7e:39:c6:dd:2e:5d:e5:02:2c:11:63:2c:1f:
71:1b:86:96:6d:fa:40:f6:69:8b:4b:59:88:f0:4d:8d:af:ac:
49:3c:56:c1:c3:40:54:07:89:6a:bf:17:55:62:c1:69:51:9c:
e4:7a:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:14:09 2026 by rpki-client