Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa
File: 3130332e33392e34382e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier: 33MhC3/axka+HHMLGxfY6U/JOKPJbY1DTPjaOcPOcpI=
Subject key identifier: FA:71:3B:46:F3:DB:C6:97:3D:D2:93:A9:4A:99:FB:38:C5:40:03:3C
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 2F3F0DA6B2A1C758D62F4D364ED5E7C3EE43945A
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 17:02:45 +0000
ROA not before: Sun 26 Apr 2026 16:57:45 +0000
ROA not after: Sun 25 Apr 2027 17:02:45 +0000
asID: 63501
IP address blocks: 103.39.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3f:0d:a6:b2:a1:c7:58:d6:2f:4d:36:4e:d5:e7:c3:ee:43:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 16:57:45 2026 GMT
Not After : Apr 25 17:02:45 2027 GMT
Subject: CN=FA713B46F3DBC6973DD293A94A99FB38C540033C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:ee:2a:86:77:55:cd:ef:67:7d:cb:a9:d4:
5f:84:32:42:64:4e:f9:fb:60:97:0f:6e:31:e3:f1:
88:ab:34:e4:ed:0d:a4:1e:d3:45:ed:72:3f:1f:e3:
77:78:18:9d:6f:ed:55:12:ef:45:3c:6b:fd:6c:9d:
f1:8d:aa:dc:33:a7:d2:a2:32:a3:99:be:30:87:04:
b8:40:ad:a8:ab:c8:1f:48:e2:7a:d4:30:28:8b:3e:
63:0b:53:62:c4:c1:3c:86:70:9c:18:82:2c:07:f9:
53:1c:0c:d0:08:a5:ba:11:6e:78:c4:6c:6f:02:24:
4d:3c:23:77:74:52:eb:55:27:e6:ce:4e:0a:83:a5:
31:75:5b:fc:ba:69:55:9c:03:c7:d6:dc:b0:bf:d7:
9f:23:eb:bf:a2:cf:a8:da:7f:c6:47:61:e3:3b:56:
c7:17:52:9a:d5:f9:c2:a6:71:1d:d1:9a:a1:b7:92:
cf:89:4b:f9:73:da:24:b2:fd:e4:a4:58:80:2c:ff:
71:08:91:5e:19:f6:b3:74:c0:28:2f:7a:8e:91:37:
9e:f5:c7:b9:16:3e:27:4b:7c:9b:59:95:90:a8:70:
fb:8f:32:5f:e4:42:fa:27:d1:98:ab:3e:0e:da:7b:
35:55:b8:f4:58:6b:95:5d:6a:37:d4:7c:47:6c:45:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:3B:46:F3:DB:C6:97:3D:D2:93:A9:4A:99:FB:38:C5:40:03:3C
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.48.0/23
Signature Algorithm: sha256WithRSAEncryption
16:b6:79:0a:d4:1e:80:e5:f1:77:c6:4a:27:17:92:0b:1b:cd:
ac:5e:b8:c7:a8:9b:40:6c:6c:37:4d:b8:b0:f4:35:73:dd:1b:
09:e6:d5:26:f9:cd:b6:28:5f:cb:59:83:ac:0f:d2:bb:67:b6:
ed:41:16:b6:35:2e:23:c1:e1:02:ed:93:c5:21:03:c6:6e:81:
19:2e:91:42:35:9a:f4:9b:b3:27:bd:f6:9b:c2:eb:b0:ee:2a:
e7:c0:78:b5:20:36:5c:20:33:b5:e2:c8:02:54:e7:80:c3:c0:
4e:a7:6a:83:7b:e0:56:7e:ad:98:ce:21:e6:5e:64:0e:71:ed:
2c:4c:75:d8:c7:76:59:18:cd:15:bd:1f:ad:54:ec:52:06:e0:
8a:a9:fc:3d:dd:26:bc:69:a4:bc:d9:a9:db:2b:25:1c:2c:f3:
cd:f5:84:a5:51:cb:bc:34:03:26:d9:95:33:4b:ff:f0:36:46:
f7:51:75:0f:a1:70:58:f4:ba:9e:a9:54:36:fc:04:0a:b0:e0:
7c:ef:03:50:94:62:76:a3:2a:81:fb:37:cd:4c:be:e9:2e:30:
95:76:f7:9b:ae:8d:ac:a5:ee:f6:9d:da:c0:a7:cc:c1:d8:f4:
4a:ce:7b:84:8d:b0:47:c0:11:a5:c2:fe:b0:0c:79:f4:09:d9:
2e:de:f4:52
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIULz8NprKhx1jWL002TtXnw+5DlFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNjA0MjYxNjU3NDVaFw0yNzA0MjUxNzAyNDVaMDMxMTAvBgNV
BAMTKEZBNzEzQjQ2RjNEQkM2OTczREQyOTNBOTRBOTlGQjM4QzU0MDAzM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxe4qhndVze9nfcup1F+EMkJk
Tvn7YJcPbjHj8YirNOTtDaQe00Xtcj8f43d4GJ1v7VUS70U8a/1snfGNqtwzp9Ki
MqOZvjCHBLhArairyB9I4nrUMCiLPmMLU2LEwTyGcJwYgiwH+VMcDNAIpboRbnjE
bG8CJE08I3d0UutVJ+bOTgqDpTF1W/y6aVWcA8fW3LC/158j67+iz6jaf8ZHYeM7
VscXUprV+cKmcR3RmqG3ks+JS/lz2iSy/eSkWIAs/3EIkV4Z9rN0wCgveo6RN571
x7kWPidLfJtZlZCocPuPMl/kQvon0ZirPg7aezVVuPRYa5VdajfUfEdsRV9rAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+nE7RvPbxpc90pOpSpn7OMVAAzwwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzQzODJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnJzAwDQYJKoZIhvcN
AQELBQADggEBABa2eQrUHoDl8XfGSicXkgsbzaxeuMeom0BsbDdNuLD0NXPdGwnm
1Sb5zbYoX8tZg6wP0rtntu1BFrY1LiPB4QLtk8UhA8ZugRkukUI1mvSbsye99pvC
67DuKufAeLUgNlwgM7XiyAJU54DDwE6naoN74FZ+rZjOIeZeZA5x7SxMddjHdlkY
zRW9H61U7FIG4Iqp/D3dJrxppLzZqdsrJRws8831hKVRy7w0AybZlTNL//A2RvdR
dQ+hcFj0up6pVDb8BAqw4HzvA1CUYnajKoH7N81MvukuMJV295uujayl7vad2sCn
zMHY9ErOe4SNsEfAEaXC/rAMefQJ2S7e9FI=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:20 2026 by rpki-client