Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa
File: 3130332e33392e35312e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier: O/ACMVEjZ9hmh26QTuNCKo6I9bjzHrA/jQEgBr8JrQU=
Subject key identifier: E3:7D:61:22:05:C9:A1:70:0D:16:FF:18:5E:95:7D:10:25:85:EE:1B
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 48398FE9BEB822FB81DA868E1A7E69EB0B2FA6F9
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa
Signing time: Sun 26 Apr 2026 17:02:45 +0000
ROA not before: Sun 26 Apr 2026 16:57:45 +0000
ROA not after: Sun 25 Apr 2027 17:02:45 +0000
asID: 63501
IP address blocks: 103.39.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:39:8f:e9:be:b8:22:fb:81:da:86:8e:1a:7e:69:eb:0b:2f:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Apr 26 16:57:45 2026 GMT
Not After : Apr 25 17:02:45 2027 GMT
Subject: CN=E37D612205C9A1700D16FF185E957D102585EE1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:91:4f:4a:2a:e0:78:51:9c:24:38:b8:ca:
e8:a2:93:26:50:34:5e:ec:38:27:14:d7:d3:06:9e:
b2:d6:76:94:45:39:84:4a:a9:94:5d:f0:a5:ca:fb:
f0:29:ca:fc:47:0a:59:ff:ea:6a:ff:c1:ac:d2:71:
ac:75:f8:ef:64:50:81:93:22:cf:79:ba:ae:d9:dc:
ac:f6:43:44:09:df:f0:e9:95:71:80:53:18:c0:b7:
f1:80:d0:8a:f6:b8:1a:e4:93:da:4a:7e:95:ff:21:
d0:3c:4e:8f:65:ef:11:8a:28:16:b3:87:7a:d9:ab:
ae:f7:dd:99:b7:63:76:03:49:e8:3b:3b:c3:47:9f:
15:e8:78:de:53:49:41:88:21:03:45:4e:71:59:dd:
91:e0:84:e5:3e:6f:bd:74:43:9e:f2:76:38:f0:c1:
b4:ad:4f:f1:b4:ea:ab:db:cc:2d:bf:76:86:34:4c:
b8:ca:a2:5f:27:14:a0:4e:03:46:1f:41:03:ae:68:
d3:24:20:c6:53:e5:e5:a9:9c:c7:47:8b:10:ef:fa:
d9:36:fe:95:d2:a6:04:2d:67:3c:72:35:60:77:24:
03:dd:9e:c7:8b:c9:b2:e8:24:cb:cf:33:b7:54:a9:
ea:7e:34:1c:9c:44:49:8e:08:e2:20:a2:9f:02:7e:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7D:61:22:05:C9:A1:70:0D:16:FF:18:5E:95:7D:10:25:85:EE:1B
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35312e302f32342d3234203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:d4:62:5a:33:e7:de:36:c0:65:f5:ea:9e:1b:c9:be:a5:0a:
c9:9d:aa:4e:bb:ba:ff:ae:ed:cd:32:25:1a:cf:26:7b:20:92:
0a:89:e5:04:d6:ee:a7:6e:02:e8:4e:2a:41:51:e6:d0:61:57:
a2:ba:f0:20:81:f4:6e:e7:19:1c:31:0d:c4:29:64:81:b5:cf:
4f:40:90:49:dd:5d:cb:fa:a1:bd:fc:f8:f5:f4:89:c8:c2:c5:
d0:69:8c:4e:55:ac:27:5b:d4:07:ab:0f:7a:7c:03:7d:e6:17:
05:42:89:a9:98:6c:8c:3a:0e:c3:2f:0f:83:ab:e1:a8:ca:8c:
18:d5:62:33:63:ad:a9:e7:0b:4e:ee:12:71:61:ba:88:51:c5:
df:85:69:85:71:d8:5f:a3:41:91:54:91:d0:83:13:b0:c4:12:
e7:07:6e:12:30:28:66:19:a4:5e:61:6b:4d:5e:1d:71:b1:b0:
84:6d:8a:41:b3:3c:7c:15:56:8c:09:3a:d5:1c:05:b7:f2:41:
f2:fb:b1:bd:3c:dd:f3:78:38:5f:7a:67:a6:d3:6a:a7:e3:3f:
fa:b6:8f:7b:0c:f7:ab:ca:aa:1d:92:bf:ef:89:03:79:4e:8b:
45:7f:a0:81:a4:41:ae:a1:f2:b4:61:d9:c7:48:19:e1:f0:07:
0b:01:c2:6c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSDmP6b64IvuB2oaOGn5p6wsvpvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNjA0MjYxNjU3NDVaFw0yNzA0MjUxNzAyNDVaMDMxMTAvBgNV
BAMTKEUzN0Q2MTIyMDVDOUExNzAwRDE2RkYxODVFOTU3RDEwMjU4NUVFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcnpFPSirgeFGcJDi4yuiikyZQ
NF7sOCcU19MGnrLWdpRFOYRKqZRd8KXK+/ApyvxHCln/6mr/wazScax1+O9kUIGT
Is95uq7Z3Kz2Q0QJ3/DplXGAUxjAt/GA0Ir2uBrkk9pKfpX/IdA8To9l7xGKKBaz
h3rZq6733Zm3Y3YDSeg7O8NHnxXoeN5TSUGIIQNFTnFZ3ZHghOU+b710Q57ydjjw
wbStT/G06qvbzC2/doY0TLjKol8nFKBOA0YfQQOuaNMkIMZT5eWpnMdHixDv+tk2
/pXSpgQtZzxyNWB3JAPdnseLybLoJMvPM7dUqep+NBycREmOCOIgop8Cfj0LAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU431hIgXJoXANFv8YXpV9ECWF7hswHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJzMwDQYJKoZIhvcN
AQELBQADggEBAM/UYloz5942wGX16p4byb6lCsmdqk67uv+u7c0yJRrPJnsgkgqJ
5QTW7qduAuhOKkFR5tBhV6K68CCB9G7nGRwxDcQpZIG1z09AkEndXcv6ob38+PX0
icjCxdBpjE5VrCdb1AerD3p8A33mFwVCiamYbIw6DsMvD4Or4ajKjBjVYjNjrann
C07uEnFhuohRxd+FaYVx2F+jQZFUkdCDE7DEEucHbhIwKGYZpF5ha01eHXGxsIRt
ikGzPHwVVowJOtUcBbfyQfL7sb083fN4OF96Z6bTaqfjP/q2j3sM96vKqh2Sv++J
A3lOi0V/oIGkQa6h8rRh2cdIGeHwBwsBwmw=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:44 2026 by rpki-client