Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa
File: 3130332e33392e34382e302f32322d3232203d3e203633353031.roa (raw, json)
Hash identifier: BuGS8tj6hoyt9exbOaBEMPcOUd3CIDCwhbuU2g4wnYo=
Subject key identifier: 2D:27:72:8D:80:4E:A9:36:51:0F:B0:43:21:D2:D4:99:F0:AC:1E:D6
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 4CD23AA4DE764F7EE82A6512105BEDBFC5ACFB30
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 17:02:45 +0000
ROA not before: Sun 26 Apr 2026 16:57:45 +0000
ROA not after: Sun 25 Apr 2027 17:02:45 +0000
asID: 63501
IP address blocks: 103.39.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d2:3a:a4:de:76:4f:7e:e8:2a:65:12:10:5b:ed:bf:c5:ac:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 16:57:45 2026 GMT
Not After : Apr 25 17:02:45 2027 GMT
Subject: CN=2D27728D804EA936510FB04321D2D499F0AC1ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:a6:20:db:3b:98:41:78:07:7c:96:df:0b:
55:55:05:03:7d:68:f7:03:83:75:48:ad:9d:02:6d:
e9:fa:b6:b8:cb:b1:91:8c:4b:36:fd:46:67:ae:fe:
ea:d3:b8:89:09:d7:1e:c6:20:05:a1:dd:4b:09:d1:
c7:92:65:39:92:dc:ae:fa:86:d4:6d:16:25:7f:95:
4e:d0:6d:73:2f:15:df:d0:ff:ee:ce:aa:f5:7f:ca:
5b:90:e0:be:ff:0a:89:29:d8:c2:18:2d:51:bb:f5:
8b:f8:cd:0a:be:b8:df:29:c0:10:d0:22:d2:37:7c:
ef:13:c5:c8:cc:68:7e:f6:39:5d:51:d5:90:87:2c:
10:c8:a4:c8:b6:db:9f:cb:c9:78:14:ef:d3:62:8f:
a3:b4:db:89:22:96:c6:64:0d:ec:28:30:95:78:17:
9d:69:0b:84:15:c3:9c:a5:32:5c:b0:34:f5:9b:5b:
f0:42:4c:69:67:fb:d7:98:49:77:1b:d3:42:be:01:
5a:0d:53:e4:85:f1:d4:7a:f3:1b:33:b4:39:4d:3f:
a2:65:13:f3:8e:42:93:af:d5:54:d1:41:fc:9b:fd:
a6:34:65:33:0a:8b:9f:d8:54:1a:f3:9e:05:81:76:
b7:bd:f0:db:c2:e9:20:42:e9:bf:93:c9:76:9d:be:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:27:72:8D:80:4E:A9:36:51:0F:B0:43:21:D2:D4:99:F0:AC:1E:D6
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.48.0/22
Signature Algorithm: sha256WithRSAEncryption
11:80:89:9f:f6:2e:67:43:32:10:b1:f7:ed:81:48:2d:3d:0f:
d0:dc:5a:9d:ac:15:da:df:0c:50:59:65:64:55:3a:eb:b8:92:
5b:cb:a5:1b:48:72:ef:03:3c:d2:ef:67:43:18:29:08:d9:a4:
6f:a9:e5:96:48:00:52:ac:47:e1:ea:6d:17:42:09:67:79:d2:
04:5d:76:93:d8:a2:69:17:d1:ab:1b:bb:56:5e:78:f2:99:43:
19:d4:66:d9:8a:53:6b:b7:17:ac:09:7e:85:91:a5:40:cf:4c:
35:67:d4:5b:3d:a2:9f:e2:1d:5f:10:fc:47:f5:1d:30:fe:b7:
e8:00:29:5c:55:52:1c:87:87:42:02:b6:59:11:89:a7:88:fd:
75:0b:8e:db:22:cd:bf:98:9f:33:0b:6e:59:91:97:bb:33:80:
a1:9c:c2:bb:8d:3b:97:50:34:31:73:bb:9e:a8:4d:bb:cc:71:
57:ed:7c:7d:53:c2:c1:16:3c:bb:f3:e1:96:67:12:db:45:12:
b3:31:4f:46:15:6a:c2:d9:22:78:76:c9:42:97:7b:3c:d3:ae:
7b:1f:45:23:73:ba:f0:de:30:c0:e0:65:ac:a8:d0:ce:c4:2f:
32:3c:c6:90:1b:31:bc:41:a6:e0:05:94:a3:55:ef:94:5b:4c:
17:0e:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:45 2026 by rpki-client