Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa
File: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (raw, json)
Hash identifier: YaToVJRPhsm9JLErIx7VEdRCp6eknDGkgHe3/l8Ofgw=
Subject key identifier: 1E:30:D8:9C:A2:83:C1:DA:9D:61:57:7F:FB:F3:C8:67:18:65:E3:0D
Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Certificate serial: 4F27232DCFB587F39BA9AC29E10FFAE7167F7DB1
Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa
Signing time: Tue 28 Apr 2026 08:02:08 +0000
ROA not before: Tue 28 Apr 2026 07:57:08 +0000
ROA not after: Tue 27 Apr 2027 08:02:08 +0000
asID: 150942
IP address blocks: 103.77.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:27:23:2d:cf:b5:87:f3:9b:a9:ac:29:e1:0f:fa:e7:16:7f:7d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Validity
Not Before: Apr 28 07:57:08 2026 GMT
Not After : Apr 27 08:02:08 2027 GMT
Subject: CN=1E30D89CA283C1DA9D61577FFBF3C8671865E30D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:03:e9:51:ab:25:62:57:fd:d5:a8:52:c0:
a3:a4:bb:b0:2d:3d:64:22:a2:f6:fe:51:dc:17:e1:
b7:60:72:e3:98:aa:e5:eb:4b:9f:b2:4d:4d:17:25:
04:b1:c3:bd:1c:9f:6e:ba:82:46:ce:24:e3:81:a4:
75:14:fc:7e:3c:3d:6a:67:81:06:5c:2f:b9:17:a6:
61:dd:0b:6c:9d:57:0c:7e:d4:41:5b:2f:9b:84:a6:
30:d0:97:88:c3:d1:d2:46:fd:f4:45:97:38:7f:8a:
4c:17:4d:7e:6b:6f:16:71:04:9b:23:e3:d1:a8:74:
48:fb:93:45:91:46:3a:13:cf:8c:45:55:0e:95:40:
b6:fc:c6:49:64:6c:49:02:74:3b:c8:a1:70:27:17:
5b:72:a8:b3:78:5b:92:8d:89:e8:78:1c:2b:91:bb:
68:d0:4d:d6:90:e2:fc:37:22:f5:48:d8:7a:a3:50:
fc:b2:f1:f1:8a:76:ae:a5:0d:4a:0e:da:55:a7:54:
6b:24:89:3b:dd:64:48:67:7b:86:3e:23:53:8d:01:
e3:8f:5b:29:60:6a:72:43:79:6a:85:05:95:e9:ec:
03:9a:76:55:ae:b6:9b:e6:ae:0b:6b:90:72:21:6e:
d7:11:1b:98:b3:5d:de:4c:9c:d3:39:47:70:bc:f4:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:30:D8:9C:A2:83:C1:DA:9D:61:57:7F:FB:F3:C8:67:18:65:E3:0D
X509v3 Authority Key Identifier:
keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.156.0/22
Signature Algorithm: sha256WithRSAEncryption
68:a9:c8:4f:cd:22:80:cb:e6:7e:6d:a9:5e:61:84:7e:c5:ad:
9d:ff:a1:71:73:9d:5a:56:ff:47:e4:88:bc:0f:3d:ef:fd:5e:
5f:b0:b3:3d:3b:de:d4:ea:a3:08:c9:2b:86:b2:75:b4:4e:aa:
2d:f6:02:f1:0f:6b:e1:d5:31:f8:26:d7:82:f3:c6:07:e0:cf:
a6:2f:b2:c2:1c:81:f3:b6:8e:dd:2d:2f:d9:a9:9b:36:be:8c:
51:83:80:79:e5:da:27:91:60:96:92:80:86:9a:f4:ce:89:83:
75:53:a0:18:e5:45:88:47:bd:14:b0:21:b6:34:b5:6f:74:09:
b2:9b:ec:bc:37:a8:cb:30:78:28:0d:29:42:6f:38:3a:a1:41:
6a:cd:df:b2:2f:ed:8b:61:5f:4f:60:73:43:06:0f:1b:ce:87:
cd:19:c4:83:2b:7e:c2:8f:eb:4e:7a:16:47:c5:17:a9:58:5d:
92:f3:24:b6:33:50:ca:a5:e4:ef:de:7a:70:ae:35:e0:2e:ba:
1c:38:fa:ff:ad:67:9b:59:d8:cb:4c:9d:7c:fb:1a:ff:fd:8a:
c2:cc:e0:07:62:40:c7:7f:f5:02:f0:dc:96:1b:50:12:ef:4e:
0f:fa:b7:75:35:59:2f:18:b4:ce:a1:ee:aa:18:76:75:3d:f2:
87:96:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:48:13 2026 by rpki-client