Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa
File: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (raw, json)
Hash identifier: MQrfWpjnJ40Zh85+OFlbN87K10ECra77POn+TEz09GQ=
Subject key identifier: 5C:D1:DB:7F:5C:FD:B3:65:66:96:D6:CF:4D:7E:15:BA:DD:1F:B9:96
Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Certificate serial: 44B237A28B5C0EFD93FF507EE64D68CC40E049EC
Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa
Signing time: Tue 28 Apr 2026 08:02:07 +0000
ROA not before: Tue 28 Apr 2026 07:57:07 +0000
ROA not after: Tue 27 Apr 2027 08:02:07 +0000
asID: 150942
IP address blocks: 103.77.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b2:37:a2:8b:5c:0e:fd:93:ff:50:7e:e6:4d:68:cc:40:e0:49:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Validity
Not Before: Apr 28 07:57:07 2026 GMT
Not After : Apr 27 08:02:07 2027 GMT
Subject: CN=5CD1DB7F5CFDB3656696D6CF4D7E15BADD1FB996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:65:05:97:ce:15:3a:67:84:9e:1b:bb:2f:
36:fe:fd:01:4e:c4:a2:f8:98:6c:b8:bf:9e:82:0b:
57:75:5d:99:85:73:de:5f:78:61:75:6a:f7:80:3a:
f1:16:95:26:24:0b:06:be:65:1f:c5:47:5d:c7:4a:
32:a7:51:d7:b6:1d:0d:a2:11:43:c8:e9:a4:4e:e0:
75:ea:ce:ac:d3:68:2f:20:73:f8:ab:37:b9:fb:75:
2c:5b:86:93:3d:d1:62:bf:d9:75:62:12:6f:34:72:
99:53:02:b3:a2:42:1a:4f:7c:85:d1:de:2a:ce:f1:
48:94:d1:30:4f:cd:b4:80:79:20:dd:91:67:ce:7a:
5c:d6:ee:90:54:00:9f:01:e8:fe:49:f4:6d:74:60:
84:b5:e8:26:10:98:22:23:fe:ed:cb:ac:14:9a:7f:
d8:41:3e:84:03:d5:a1:a9:89:c0:fa:96:fa:e5:99:
65:61:a5:b7:60:e5:da:f6:81:3a:02:8b:8b:0b:e0:
a7:bc:28:cb:79:9b:62:ed:de:75:ea:f7:e6:f9:b1:
60:2f:43:fa:9f:f0:23:bf:d6:0a:be:59:1c:98:d6:
93:c1:b3:75:b0:5e:6b:a2:26:6f:1b:66:8d:7e:d8:
53:56:fc:17:e9:fb:a6:6d:4e:7b:9f:4f:e1:ca:0d:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D1:DB:7F:5C:FD:B3:65:66:96:D6:CF:4D:7E:15:BA:DD:1F:B9:96
X509v3 Authority Key Identifier:
keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.157.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2e:e5:d1:90:4e:e1:90:cc:ed:8f:63:8b:10:50:af:92:0c:
83:96:6c:70:3d:0c:59:58:52:bf:d0:2b:7d:e0:5b:7f:0d:51:
a9:40:1f:cb:af:83:28:44:48:d9:2c:55:da:0a:b5:39:56:5f:
e3:ce:50:c4:47:93:30:10:39:33:05:bf:9c:3e:fd:df:85:d2:
bf:5f:90:5a:f2:cd:f0:33:35:4c:93:d0:e4:45:be:c7:55:d4:
a3:ca:90:94:7a:08:bd:b1:5d:af:d5:f5:08:bf:96:62:bd:52:
c0:07:68:8a:08:a6:0a:17:6b:63:08:66:32:5c:db:c9:79:77:
10:dd:ef:e8:56:99:ea:59:d1:c2:d1:08:b5:2a:78:4c:39:c3:
1f:54:6b:8d:4d:f4:f6:3f:89:38:c8:01:01:23:7b:6d:72:28:
88:bf:b2:21:34:df:ce:b0:f9:69:c0:20:95:48:ef:01:dc:2d:
63:de:10:64:8e:63:7f:cc:c5:7c:27:61:7a:02:fd:75:ab:73:
ff:6e:57:ed:c4:d1:36:27:96:b8:17:78:b2:50:3b:4e:05:f6:
10:9a:43:34:2a:d0:27:fa:dd:d9:9d:78:fc:a4:e4:e7:da:55:
eb:d1:84:bb:d4:93:84:de:29:26:90:5a:05:1c:c7:af:a7:9e:
c7:87:75:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:48:15 2026 by rpki-client