Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
File: 3130332e33392e35302e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier: 2udWXhiCXKEpg60tvOpp7QZry6q7IWc/0NVF2jvu+Yc=
Subject key identifier: C1:F5:D3:05:E4:D9:5B:1F:89:DF:AD:C8:57:74:0B:DF:98:5D:7C:48
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 0E4B497453AD311C091BADB407F182C465FDE00F
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 19:00:02 +0000
ROA not before: Sun 26 Apr 2026 18:55:02 +0000
ROA not after: Sun 25 Apr 2027 19:00:02 +0000
asID: 63501
IP address blocks: 103.39.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4b:49:74:53:ad:31:1c:09:1b:ad:b4:07:f1:82:c4:65:fd:e0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 18:55:02 2026 GMT
Not After : Apr 25 19:00:02 2027 GMT
Subject: CN=C1F5D305E4D95B1F89DFADC857740BDF985D7C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:01:a8:5f:cd:48:aa:f3:8e:ea:70:4b:a4:
09:de:09:4b:bd:72:7c:f4:2a:9e:74:ba:a8:94:23:
32:74:26:3a:ea:36:40:d7:21:50:f5:5e:27:19:34:
ac:d8:e2:8d:b8:c8:bd:84:c0:04:3d:1f:bc:03:4a:
72:e2:82:db:38:ee:1c:a8:a6:d3:d2:3c:70:da:8c:
20:55:4e:20:b7:c1:0f:0c:4c:74:1a:1b:1f:f5:46:
2d:09:35:bc:f7:cd:c8:99:1b:10:13:ac:db:92:5a:
5a:4d:31:a1:4d:26:ec:85:46:dc:87:d7:b3:f0:45:
5c:f5:25:10:2f:ad:25:5a:fb:c8:80:44:b9:4d:25:
04:42:54:30:3d:78:55:02:7c:60:b7:0f:dc:80:8a:
7c:b5:7e:f3:3e:02:36:f3:4a:40:19:2e:d3:0e:b1:
f1:3c:53:fe:af:e6:41:67:4c:3c:1f:53:c9:85:3a:
16:5e:61:d0:f5:a5:74:94:c6:bc:4d:55:f7:61:8f:
ed:88:33:59:e0:a0:7a:eb:46:d3:de:64:ba:e3:be:
e4:44:cc:01:72:d6:d9:d3:71:f0:1f:3e:5b:8d:62:
4d:f7:ee:25:d2:93:a5:82:62:fb:39:21:ea:e5:dc:
c7:be:9b:e9:10:5b:c4:33:43:3a:e5:d0:cc:83:df:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:D3:05:E4:D9:5B:1F:89:DF:AD:C8:57:74:0B:DF:98:5D:7C:48
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.50.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:57:d2:87:01:37:df:65:6f:5f:99:67:66:de:00:92:93:55:
90:ab:62:13:98:fd:26:a9:e4:e3:37:45:90:47:3f:f4:11:50:
d4:30:fb:07:5f:db:1f:c2:ae:3f:8f:d0:e0:a4:a6:5f:31:5c:
47:1f:3c:c6:84:ef:06:3f:79:e7:9e:67:c5:41:db:64:74:a3:
f4:72:bb:d9:11:14:c7:d5:00:b1:11:33:83:19:17:7c:11:b6:
fa:91:5b:cf:7a:13:a3:40:2a:90:38:c5:48:33:27:49:54:eb:
24:2f:e5:98:72:2c:1e:a9:86:44:5b:42:68:43:87:e3:1a:93:
05:c3:17:e5:2f:92:3a:fe:63:d2:69:02:ce:31:df:36:88:cb:
17:d0:fe:b9:f5:14:fd:b1:26:bd:9f:f5:1f:43:d3:09:7c:33:
16:a9:f4:de:86:db:77:7c:df:2a:57:89:ee:51:2f:b3:57:3d:
04:8f:ff:2e:97:ab:55:44:54:ff:70:cf:a1:2d:74:51:fa:ce:
ae:1f:cf:c2:67:18:3e:df:aa:e8:47:84:36:cb:8e:8f:fb:cd:
60:35:50:10:1c:5e:ea:82:cf:99:c1:06:6a:e5:3d:ad:c5:b4:
f7:17:7c:bc:2b:2a:32:b0:1c:7d:89:05:6f:40:c1:d3:71:72:
64:61:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:37 2026 by rpki-client