Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa
File: 3130332e33392e34382e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier: fezjrThJFDU18DFVKneDqeLezaADDvPwgxcT8BqlQyc=
Subject key identifier: DD:3A:14:14:5C:D4:76:31:A1:C7:1D:99:BE:9D:11:65:A2:B1:91:C7
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 6F748B9CC48A555FBF5FD200C0C3A769FC2FBD59
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 17:02:44 +0000
ROA not before: Sun 26 Apr 2026 16:57:44 +0000
ROA not after: Sun 25 Apr 2027 17:02:44 +0000
asID: 63501
IP address blocks: 103.39.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:74:8b:9c:c4:8a:55:5f:bf:5f:d2:00:c0:c3:a7:69:fc:2f:bd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 16:57:44 2026 GMT
Not After : Apr 25 17:02:44 2027 GMT
Subject: CN=DD3A14145CD47631A1C71D99BE9D1165A2B191C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:ba:30:70:f3:60:89:1a:f9:b9:9c:95:cb:
8d:10:08:45:ff:72:7c:88:3a:cc:0d:01:9b:d7:49:
52:89:0a:96:7c:4a:6b:c1:41:93:1f:41:f7:d1:74:
5b:62:ae:9f:c8:8d:36:ac:c4:82:e3:52:2b:49:2a:
2f:17:2a:c7:95:82:60:7f:ef:c3:ac:57:60:56:e4:
8f:a6:1e:af:de:37:b2:0e:62:5c:fd:80:c6:58:79:
49:e7:ce:0f:1f:25:da:c0:61:12:27:d5:dd:72:d4:
9f:6e:ca:fa:3d:96:fc:2c:96:ef:7c:fc:87:8f:e1:
56:c9:63:51:13:fe:68:16:20:0a:7e:af:6d:2c:ca:
8e:0a:f0:8e:49:75:d7:6b:f8:c3:07:17:9d:6d:24:
e7:40:c7:72:7d:a4:41:ee:71:62:07:01:41:a2:75:
95:cf:f0:b0:4a:50:45:59:88:37:11:86:da:e2:d7:
2d:22:c3:e6:63:d2:72:94:31:ee:fe:64:e5:c4:2d:
b0:5d:a0:30:e9:bd:fd:02:3f:04:6f:60:9a:b1:b4:
57:46:4f:13:e9:2d:a8:5a:33:05:88:d7:fc:a3:bc:
32:76:75:2d:26:0b:8f:e1:e7:82:8b:0f:61:82:7c:
73:9e:96:00:a7:5d:6f:71:07:06:44:6c:cd:7b:fd:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:14:14:5C:D4:76:31:A1:C7:1D:99:BE:9D:11:65:A2:B1:91:C7
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9c:5c:55:4b:19:d2:c9:2e:bb:7c:07:58:ea:70:e9:42:54:
af:65:19:95:98:cc:1e:f4:71:e2:3d:91:11:9e:dd:98:61:6f:
66:f1:50:04:9e:72:d2:14:cd:5b:9f:67:d0:a2:f2:be:ef:ca:
78:00:a1:2e:9a:a0:e2:75:03:0b:5b:17:07:b4:bb:0e:2e:91:
1d:b9:b9:fd:e7:33:ac:4e:4c:ea:d1:ab:de:f8:e5:ed:3c:a1:
1b:b1:c8:92:67:59:3b:80:f7:8d:ad:be:f1:da:b2:f3:82:88:
1c:81:d6:72:81:e6:8c:41:e7:40:6b:f9:23:82:fd:b0:cc:86:
c3:84:0c:13:e5:56:11:ed:47:bc:1e:48:5d:27:13:b6:95:d0:
ea:aa:bc:aa:86:cb:7a:95:88:ee:52:a0:47:3f:c9:9c:97:d3:
0d:98:1d:b8:67:4c:e7:9d:8b:06:a4:10:18:4f:a2:e4:24:5d:
86:9d:c5:01:39:b6:c1:3c:41:0e:62:89:d0:88:18:08:9c:79:
77:29:a9:60:be:d2:83:07:7a:88:fb:c0:60:4a:4d:a9:14:40:
71:88:49:6e:8e:5a:a2:cf:db:a2:68:aa:46:0d:85:e9:2d:ae:
af:84:4c:df:c3:52:8b:43:80:b8:35:ca:4e:ec:4c:6c:68:7f:
df:8d:47:33
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUb3SLnMSKVV+/X9IAwMOnafwvvVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNjA0MjYxNjU3NDRaFw0yNzA0MjUxNzAyNDRaMDMxMTAvBgNV
BAMTKEREM0ExNDE0NUNENDc2MzFBMUM3MUQ5OUJFOUQxMTY1QTJCMTkxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC437owcPNgiRr5uZyVy40QCEX/
cnyIOswNAZvXSVKJCpZ8SmvBQZMfQffRdFtirp/IjTasxILjUitJKi8XKseVgmB/
78OsV2BW5I+mHq/eN7IOYlz9gMZYeUnnzg8fJdrAYRIn1d1y1J9uyvo9lvwslu98
/IeP4VbJY1ET/mgWIAp+r20syo4K8I5Jdddr+MMHF51tJOdAx3J9pEHucWIHAUGi
dZXP8LBKUEVZiDcRhtri1y0iw+Zj0nKUMe7+ZOXELbBdoDDpvf0CPwRvYJqxtFdG
TxPpLahaMwWI1/yjvDJ2dS0mC4/h54KLD2GCfHOelgCnXW9xBwZEbM17/Qg1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU3ToUFFzUdjGhxx2Zvp0RZaKxkccwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzQzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJzAwDQYJKoZIhvcN
AQELBQADggEBAJycXFVLGdLJLrt8B1jqcOlCVK9lGZWYzB70ceI9kRGe3Zhhb2bx
UASectIUzVufZ9Ci8r7vyngAoS6aoOJ1AwtbFwe0uw4ukR25uf3nM6xOTOrRq974
5e08oRuxyJJnWTuA942tvvHasvOCiByB1nKB5oxB50Br+SOC/bDMhsOEDBPlVhHt
R7weSF0nE7aV0OqqvKqGy3qViO5SoEc/yZyX0w2YHbhnTOediwakEBhPouQkXYad
xQE5tsE8QQ5iidCIGAiceXcpqWC+0oMHeoj7wGBKTakUQHGISW6OWqLP26JoqkYN
hektrq+ETN/DUotDgLg1yk7sTGxof9+NRzM=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:44 2026 by rpki-client