Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa
File: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (raw, json)
Hash identifier: x+jVskb4roqXWCqF0HNC0Ge1tnHFlQXx1CJJSUiGqLI=
Subject key identifier: 76:2D:19:59:46:B1:E3:BA:8E:55:02:CF:3A:9B:E3:93:56:2B:62:10
Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Certificate serial: 10F1CE4EA03BADF1F567742D4C951EC011CC5F13
Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa
Signing time: Tue 28 Apr 2026 08:02:08 +0000
ROA not before: Tue 28 Apr 2026 07:57:08 +0000
ROA not after: Tue 27 Apr 2027 08:02:08 +0000
asID: 150942
IP address blocks: 103.77.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f1:ce:4e:a0:3b:ad:f1:f5:67:74:2d:4c:95:1e:c0:11:cc:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Validity
Not Before: Apr 28 07:57:08 2026 GMT
Not After : Apr 27 08:02:08 2027 GMT
Subject: CN=762D195946B1E3BA8E5502CF3A9BE393562B6210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:1e:9a:db:a1:34:14:6a:aa:0d:29:5a:c2:
e4:64:a3:af:d9:41:9c:dc:3b:45:fc:bb:ec:77:70:
f5:9d:53:7b:8f:cb:0a:1f:33:59:8c:1d:0b:de:d1:
d0:e4:20:04:6d:46:4f:2f:6d:b1:40:d2:fa:2d:88:
94:78:55:a2:8f:02:8c:25:49:ac:bd:12:9b:cd:91:
05:c4:6f:00:34:94:8a:6c:b1:f8:72:54:cc:15:c0:
32:5b:7f:ce:4e:5f:0e:89:a6:82:f1:00:4b:96:c9:
bd:3d:08:fb:f5:83:24:76:8a:fe:e3:c8:c6:81:bb:
db:c5:2b:95:9e:93:8d:3e:6b:33:d8:2f:ba:eb:b5:
5c:ce:cc:fa:ec:d1:a0:e7:bc:33:50:12:d3:c2:7e:
d3:2b:9b:46:b6:20:c1:ad:98:38:99:aa:7c:75:bb:
20:a6:f3:78:31:1f:3e:3a:b0:07:b2:ce:59:31:1c:
4c:da:43:c5:76:50:50:02:ca:d8:37:d8:e9:97:38:
b2:65:9e:f5:77:3e:97:b1:5e:97:5f:fe:83:b1:49:
81:c2:cb:56:36:ba:c9:61:fe:b2:0a:ed:d0:68:47:
e7:35:a3:63:ca:af:f7:e1:19:a6:7c:c1:f5:10:07:
a3:75:fb:b2:c4:21:a1:a6:c7:d0:58:23:c9:e7:69:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:19:59:46:B1:E3:BA:8E:55:02:CF:3A:9B:E3:93:56:2B:62:10
X509v3 Authority Key Identifier:
keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ea:31:8f:0c:cd:6a:fb:e9:7f:91:35:46:70:c1:f2:97:3f:
9e:79:4e:d6:0a:45:f3:bf:80:da:2c:71:17:ae:19:01:bd:3d:
f2:e3:85:4d:69:8c:b1:e1:4d:10:c5:05:e1:d7:1d:b3:56:6f:
13:a2:f8:dc:b7:49:b3:1e:0a:5c:22:07:39:21:60:98:ed:22:
b7:ae:35:98:17:71:6d:8c:6b:8a:9e:0f:42:a1:b0:6b:54:54:
84:29:de:ab:b0:ea:51:73:1a:87:d4:95:60:9f:04:cb:2c:f3:
28:6b:7a:1c:8e:9b:93:0c:df:b5:e1:f2:58:6c:2c:f9:25:69:
bf:a1:9b:e6:3d:2d:49:e3:b8:c8:c1:05:76:55:3d:8e:37:7c:
7c:2a:be:db:a5:6d:40:9c:68:dc:5d:5c:6b:72:8a:dc:c9:72:
51:ce:53:51:0a:ae:75:2e:09:18:70:f7:24:bd:9e:9f:9d:9d:
f6:37:61:7e:67:b0:3c:19:b4:75:bc:4f:e3:06:3d:df:45:6d:
06:77:a3:fd:3e:df:a8:d5:77:87:a2:02:9e:17:db:c3:6c:e2:
72:13:96:9d:90:ab:1e:24:c7:94:b4:59:3d:94:d2:e6:cd:1b:
ca:a5:99:3c:a5:eb:74:b2:09:d0:46:fc:14:d2:fb:17:c5:70:
4a:20:28:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:48:13 2026 by rpki-client