Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa
File: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (raw, json)
Hash identifier: dVF/9Z/elLNVxvzdwmV9s3QqGN0O1icipQ9zcKvGgeg=
Subject key identifier: 4F:4C:A9:CD:84:3D:0E:B3:F6:7B:D3:86:9F:CA:D5:DA:D1:CE:AE:BB
Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Certificate serial: 0A4C8E29F313694F6DB4043D075AD488FB5C3A94
Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa
Signing time: Tue 28 Apr 2026 08:02:07 +0000
ROA not before: Tue 28 Apr 2026 07:57:07 +0000
ROA not after: Tue 27 Apr 2027 08:02:07 +0000
asID: 150942
IP address blocks: 103.77.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4c:8e:29:f3:13:69:4f:6d:b4:04:3d:07:5a:d4:88:fb:5c:3a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Validity
Not Before: Apr 28 07:57:07 2026 GMT
Not After : Apr 27 08:02:07 2027 GMT
Subject: CN=4F4CA9CD843D0EB3F67BD3869FCAD5DAD1CEAEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:69:e2:3e:50:b5:9e:97:4c:e2:f3:cd:94:
34:dd:32:1c:3f:b4:24:12:91:a3:27:e6:49:40:27:
30:02:0d:c0:47:fb:a9:87:54:21:7f:1a:a8:15:67:
65:a1:f4:f2:bf:e0:c2:cd:a5:68:41:f0:20:c7:ad:
5b:c5:0b:6a:cd:8b:ca:56:3a:06:87:71:90:2f:5e:
ee:0b:ba:3d:d5:3b:ea:e3:e6:7c:8d:2d:06:82:f7:
4d:56:96:07:ca:46:15:aa:d7:6f:37:23:a1:5f:e4:
fb:b8:0c:ed:77:af:8f:04:02:6e:7b:ef:fb:00:a4:
67:a4:bd:3e:5c:45:9c:c7:32:40:11:5e:2f:8c:29:
fe:dd:1b:3d:d1:e2:6c:1f:26:e2:82:ac:e8:94:fb:
d7:70:a7:f2:2e:55:e5:a6:5e:a5:f2:8d:6c:44:0b:
38:5b:e7:35:33:ab:bc:9b:12:a6:1d:33:90:d7:d6:
14:b3:de:49:4c:aa:74:06:1f:ee:47:db:d5:81:27:
5d:8d:63:00:16:9d:8f:0c:e6:53:2f:bd:34:48:cd:
85:a5:22:15:23:ef:74:65:8c:56:52:cc:27:49:16:
55:be:26:9f:fa:80:c2:ef:55:e4:6a:4d:6a:fe:d4:
18:2b:77:8d:9a:6b:18:fe:df:d9:34:46:96:9b:36:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:A9:CD:84:3D:0E:B3:F6:7B:D3:86:9F:CA:D5:DA:D1:CE:AE:BB
X509v3 Authority Key Identifier:
keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.156.0/24
Signature Algorithm: sha256WithRSAEncryption
44:97:c4:81:0c:8d:b6:e9:0a:49:e5:cb:a7:3d:f4:66:b3:c3:
a8:6d:38:1c:3c:4e:f5:3b:84:99:27:43:e4:b4:bb:24:c7:e0:
fc:6c:ac:25:f0:ab:fa:8a:13:3b:76:f1:29:51:1e:a0:e4:9d:
ba:53:ac:7c:99:37:ef:76:b9:33:e9:80:70:6a:e7:fa:c4:de:
e3:27:2d:51:e1:f9:59:f4:80:a9:9c:39:5e:af:4e:db:20:8d:
c7:3b:db:8b:da:14:4e:86:2e:21:21:45:61:34:d5:c6:3c:5c:
9f:80:3c:4e:0e:00:97:25:82:48:60:1a:cb:54:51:77:9b:f3:
c3:03:6b:4a:54:5c:c8:c0:ff:47:2d:ce:69:2e:8f:1d:fc:03:
6a:3d:0c:b4:96:28:0c:dd:01:b9:78:c0:f3:be:20:d2:13:8f:
94:61:85:59:84:60:b2:00:5c:28:e7:65:a7:bf:15:e0:f5:aa:
71:89:cc:24:d9:34:2b:e2:51:e3:4b:70:7e:dc:0e:35:85:d6:
ae:7d:87:70:ab:25:ad:4f:f8:dc:75:d2:a3:e4:4b:86:5f:79:
3a:df:6a:ba:91:c1:d3:6d:c3:f7:27:ce:cb:29:7e:80:4d:a0:
49:2d:3b:a6:7b:d3:5a:66:7a:68:e1:4c:a7:45:c2:e2:d1:36:
92:4d:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:48:14 2026 by rpki-client