Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa
File: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: 5yLcXk58rrEbW81S/YzUiu1DSwOapOgY98yvtKPxV4c=
Subject key identifier: 04:D7:1C:CA:38:A3:D2:C4:B0:D0:B2:69:BF:A2:D9:05:99:78:5A:39
Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52
Certificate serial: 3639FAD954029758E04C79D13DDF780FD863F856
Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa
Signing time: Wed 22 Apr 2026 06:00:01 +0000
ROA not before: Wed 22 Apr 2026 05:55:01 +0000
ROA not after: Wed 21 Apr 2027 06:00:01 +0000
asID: 131111
IP address blocks: 103.160.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:39:fa:d9:54:02:97:58:e0:4c:79:d1:3d:df:78:0f:d8:63:f8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52
Validity
Not Before: Apr 22 05:55:01 2026 GMT
Not After : Apr 21 06:00:01 2027 GMT
Subject: CN=04D71CCA38A3D2C4B0D0B269BFA2D90599785A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:b7:98:a1:c4:e1:f0:ac:ac:fc:b5:4d:b2:
c7:af:fa:a9:97:8c:a1:63:d8:55:78:cb:3d:9b:6d:
18:19:cf:41:eb:a9:30:3c:24:4f:03:32:e6:ad:d1:
ba:05:3c:41:c4:a8:71:d9:3c:a8:ee:bf:41:d6:01:
c3:05:8d:7d:e3:75:49:64:a6:ea:2d:fd:0e:c5:ca:
f7:ab:64:d6:3e:fd:24:73:6b:e6:1f:c5:38:1f:08:
8f:e6:a2:b2:09:18:aa:66:18:5e:6e:95:85:8f:bb:
6f:cb:b3:96:de:95:6a:89:ee:67:bd:87:c5:18:c8:
4f:d5:68:0a:65:ee:31:a0:b1:09:7a:9b:39:b9:98:
41:4d:0c:ab:4e:6b:5e:c8:85:02:46:bf:bb:d0:af:
39:3d:28:f8:0d:73:bb:7d:aa:cd:2b:b5:72:17:a7:
e3:88:86:c7:d6:e9:af:74:d4:f7:ca:a2:19:c1:54:
52:9a:7c:bf:48:ec:e4:21:2a:2f:b7:b7:9f:04:bd:
4a:6f:6f:b8:48:48:9c:c4:aa:31:b3:fc:e9:3c:fc:
fa:c7:58:08:93:27:6d:5d:a3:2e:f4:69:fa:34:33:
85:72:da:d7:a7:61:9e:67:e8:cb:d4:16:47:78:27:
fc:ab:70:45:e1:71:29:b3:a0:51:af:44:1e:e6:d3:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:1C:CA:38:A3:D2:C4:B0:D0:B2:69:BF:A2:D9:05:99:78:5A:39
X509v3 Authority Key Identifier:
keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.12.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:a3:ba:f9:18:dc:12:25:68:bb:b4:2d:c4:3a:ad:dc:36:d9:
90:22:bd:0e:d8:f5:cc:6c:72:3a:4a:85:f1:38:6b:04:e2:c4:
da:ec:64:d1:6f:36:ce:5a:fb:c6:7b:70:30:3a:98:29:69:89:
a5:b3:19:ce:ad:63:1b:18:ec:1b:43:71:37:6b:24:e6:5f:08:
03:1c:4e:36:ba:17:54:86:00:fa:3d:31:aa:87:71:16:5f:d1:
5a:36:4c:a7:e0:c4:d4:15:bf:64:d2:72:31:c7:19:4a:90:20:
df:3b:0f:ac:85:89:0c:61:cf:6f:d5:7b:11:e4:fd:25:5b:cf:
68:ec:30:80:5e:02:b5:a0:f6:db:4b:ee:c6:dd:01:01:9f:bb:
cb:f6:94:5c:40:ed:e7:15:86:c8:b1:20:5d:a5:b4:40:e0:87:
8f:41:23:89:38:bc:39:7a:9e:6b:f8:4f:5f:e8:92:ce:e2:54:
b1:78:1a:1e:2e:ea:df:81:80:8d:cc:67:b7:0e:97:69:b3:e9:
21:58:10:07:78:7b:d8:70:5d:4a:34:e9:5d:52:58:b3:19:73:
0a:1a:02:89:43:97:72:49:1f:92:a3:e3:94:56:c5:31:48:d5:
55:da:c3:a3:84:62:b3:bb:fe:92:d6:d6:ff:ca:9c:aa:36:9e:
e8:f4:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:53 2026 by rpki-client