Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
File: 3130332e33392e35302e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier: b3Pf6p+ffN7m5xPDUuUMtA74ng1Z7TTLj42TpPN2JQQ=
Subject key identifier: 2D:F5:90:54:6A:69:5D:02:F3:08:A6:74:0E:61:54:1B:78:B0:64:46
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 5AD65DA554E71222C3D67545BF6382034E0A13E9
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 19:00:02 +0000
ROA not before: Sun 26 Apr 2026 18:55:02 +0000
ROA not after: Sun 25 Apr 2027 19:00:02 +0000
asID: 63501
IP address blocks: 103.39.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d6:5d:a5:54:e7:12:22:c3:d6:75:45:bf:63:82:03:4e:0a:13:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 18:55:02 2026 GMT
Not After : Apr 25 19:00:02 2027 GMT
Subject: CN=2DF590546A695D02F308A6740E61541B78B06446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:af:65:8b:7e:57:a7:ad:06:cc:a7:26:43:
6c:07:0f:ef:71:9f:93:e5:a1:37:15:e0:39:10:8e:
85:dc:2f:de:73:d5:4b:fd:44:80:d6:fa:b1:23:d4:
ad:58:91:b6:85:b4:e5:33:20:16:b7:8f:00:e8:bd:
db:e6:09:0a:61:e1:91:9b:83:12:c9:f8:83:78:3a:
3c:27:26:a9:a7:99:e0:ed:ab:f0:7b:96:dd:16:b6:
d9:77:01:40:75:72:fc:54:a2:0c:b6:84:73:9f:e1:
a1:3c:80:c5:1a:6a:33:93:e2:00:fd:a9:3d:9a:f6:
12:54:af:15:6e:9d:1a:50:2c:c8:3a:23:51:c8:30:
19:64:9f:a6:9a:1d:89:06:d6:16:cd:15:b4:60:e1:
06:87:14:c9:44:cd:1f:e9:54:dd:39:6a:b4:7f:67:
36:74:75:88:e3:f7:a6:54:f7:c9:ef:e6:93:38:8f:
2e:9b:65:d5:6c:d8:ac:9e:bd:ca:6c:95:45:fd:e0:
26:12:c6:58:55:2b:5e:f9:c7:95:1d:56:a6:aa:14:
e8:c5:fe:a5:9a:c9:07:f3:14:db:23:e3:18:03:00:
ae:ff:db:c2:d2:31:74:9f:6c:dc:aa:92:9f:1f:1a:
38:84:73:a5:55:f8:33:c8:7b:e6:0e:fe:ea:0f:90:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:90:54:6A:69:5D:02:F3:08:A6:74:0E:61:54:1B:78:B0:64:46
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.50.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:f2:56:1f:5d:03:77:85:4a:40:78:e0:d1:00:2d:fa:ce:89:
1b:57:96:3d:4c:30:8b:6b:b2:00:32:44:55:49:7d:45:4c:2d:
e1:e9:0a:27:49:7b:b5:b9:59:78:2f:d0:93:f2:bc:a8:e2:a7:
80:b5:19:0c:03:c6:21:f1:75:f9:d8:49:8c:34:38:74:0d:eb:
2a:0e:0e:3e:61:2d:80:ac:d5:a6:30:ec:fc:5a:c2:d0:54:01:
cc:d4:ce:df:ad:1b:94:c8:80:cc:7d:81:3c:26:a5:ef:11:49:
cb:b6:3e:e0:83:fe:8c:1d:97:a3:64:a8:2c:77:11:5c:84:20:
d0:55:da:2e:56:db:90:f2:b2:65:ae:17:23:88:99:80:c1:5e:
51:cf:d6:68:ba:15:31:5a:a2:2b:ca:0a:5a:60:54:52:b8:ce:
c4:e4:58:0b:b5:a9:5b:dc:38:83:be:0e:04:6f:dc:59:ab:0b:
1a:54:f2:a5:60:89:67:40:27:ed:4b:89:bd:17:17:01:08:0d:
d7:e6:08:8b:c0:ae:38:43:d2:5f:de:90:a0:ff:da:e4:44:9f:
f3:da:6b:da:6a:cc:fd:0f:a4:a4:1f:f7:75:f1:7c:8c:f1:71:
78:fd:c5:36:3e:50:cd:dc:cf:71:ee:97:b3:a5:17:8f:9d:03:
d6:34:a8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:24 2026 by rpki-client