Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa
File: 3130332e33392e34392e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier: S4EBWagL764hc19o0BO6sAt5CV9F7/A5HYYT1f0AkHQ=
Subject key identifier: 8E:27:D6:42:0D:DA:5B:F6:66:C2:84:F4:22:69:75:37:40:28:92:B7
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 5B8122E11E9E057E9933DBB4FC77033D18A417B7
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 17:02:45 +0000
ROA not before: Sun 26 Apr 2026 16:57:45 +0000
ROA not after: Sun 25 Apr 2027 17:02:45 +0000
asID: 63501
IP address blocks: 103.39.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:81:22:e1:1e:9e:05:7e:99:33:db:b4:fc:77:03:3d:18:a4:17:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 16:57:45 2026 GMT
Not After : Apr 25 17:02:45 2027 GMT
Subject: CN=8E27D6420DDA5BF666C284F422697537402892B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:03:dd:98:40:2d:74:c7:27:62:a3:e5:eb:
ba:d5:39:c8:8e:5b:5c:ce:3a:b5:64:71:93:3b:c0:
77:97:0c:96:e6:81:96:2c:0f:b6:4d:b1:82:f3:fd:
cc:74:61:3d:69:cc:f0:46:3d:c3:ae:3d:81:96:85:
eb:7b:78:6e:35:85:77:d8:6c:30:3a:b8:be:69:f1:
bb:c6:3d:b7:17:12:3f:fe:d8:ba:a3:5f:56:a0:cd:
86:11:55:55:17:34:1d:40:32:5d:c8:35:8e:ea:b6:
c8:bd:e4:ba:05:1c:95:45:65:23:ef:7e:a9:43:41:
ec:8b:f2:97:a3:db:14:36:c1:eb:f0:da:45:ae:7b:
7e:d3:c3:f3:e0:84:13:af:05:c0:b3:b7:74:1d:ee:
7d:17:0a:42:1f:02:a1:a5:5f:e0:a9:7a:72:40:8b:
38:bb:e2:d4:32:15:29:e8:61:52:ee:41:2e:bf:d4:
da:0e:28:80:26:3b:61:8c:3b:c2:d5:ab:d1:94:ce:
72:48:8b:c0:46:d9:52:54:cb:8f:06:22:54:4c:ee:
21:4f:6c:be:6b:96:c2:2a:bf:be:bc:7b:f5:61:d7:
91:fb:0f:f0:46:ad:b2:d3:32:0d:32:7b:41:fa:a8:
07:40:91:2e:18:60:b5:99:c9:ed:29:0d:1e:8c:77:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:27:D6:42:0D:DA:5B:F6:66:C2:84:F4:22:69:75:37:40:28:92:B7
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:23:04:c1:c8:27:c6:c7:61:91:86:c9:25:94:80:2b:6a:14:
2a:32:cf:ec:79:7b:3a:76:54:bc:73:b3:4b:e7:6c:35:fa:df:
af:50:67:78:57:44:fc:92:7a:fa:4a:5f:ad:f3:34:e6:d3:1c:
48:4f:38:fc:b5:88:ed:7b:6d:f1:c1:61:2b:83:5a:b0:55:c7:
e4:6e:05:eb:2c:63:0d:98:2d:6a:3b:08:1d:86:47:80:3f:32:
47:eb:31:84:66:89:46:da:0a:7f:19:b5:4b:78:33:c4:04:b8:
f8:f9:1f:b3:05:0c:66:5f:8e:e8:f9:06:f5:91:bc:35:6f:8a:
56:7d:9f:30:fc:f0:30:6f:5e:44:0e:ab:e7:0a:f3:52:c3:3b:
85:d4:72:3d:72:ea:8c:03:ae:21:3e:3d:44:e8:de:d9:42:93:
64:e0:d9:62:df:a4:21:86:5c:ee:d6:b8:8c:ed:c7:4f:ce:18:
b9:4c:ac:2a:25:ce:f7:51:f1:bc:82:4b:c0:db:f0:cb:cb:19:
57:15:f7:44:0b:91:57:d4:c4:3d:8e:a2:f8:15:81:73:36:3f:
bc:16:b6:23:e6:6b:25:56:65:49:cf:6f:94:58:9b:f9:9a:3c:
a6:0c:d3:e2:e6:a9:ea:f6:97:33:d3:68:ce:2e:f8:41:bc:02:
1b:43:fd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:05 2026 by rpki-client