Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa
File: 3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa (raw, json)
Hash identifier: /ROreap8AFnISAj9xUsxrjwEuGsxVVtg0V20Mrfx3v8=
Subject key identifier: 63:B8:9E:80:BB:BC:FA:33:B8:64:BB:8A:1B:14:66:21:26:E9:18:77
Certificate issuer: /CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F
Certificate serial: 1442A8211FDD3E2E434726A010EF886015315AA1
Authority key identifier: 17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa
Signing time: Tue 21 Apr 2026 12:00:01 +0000
ROA not before: Tue 21 Apr 2026 11:55:01 +0000
ROA not after: Tue 20 Apr 2027 12:00:01 +0000
asID: 131713
IP address blocks: 103.149.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:42:a8:21:1f:dd:3e:2e:43:47:26:a0:10:ef:88:60:15:31:5a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F
Validity
Not Before: Apr 21 11:55:01 2026 GMT
Not After : Apr 20 12:00:01 2027 GMT
Subject: CN=63B89E80BBBCFA33B864BB8A1B14662126E91877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:ba:51:4b:b1:ef:26:42:7b:f4:62:bb:b5:
71:18:7d:b2:d8:8d:38:1f:4d:f7:cc:18:29:2c:73:
3a:d8:6f:30:72:4c:35:50:fd:77:e1:b2:99:59:b6:
8b:bf:ca:b9:d7:9a:eb:a4:6c:bd:2f:1d:66:65:1b:
31:88:71:29:6c:e1:50:44:15:16:7b:76:1b:13:eb:
78:e5:df:a2:78:64:7b:f9:ef:e3:3d:29:40:f5:9e:
cb:cb:08:33:cd:15:4a:1a:cb:30:ee:d4:ef:b1:f3:
ff:75:cf:64:af:3a:df:b2:fe:92:04:76:ef:e2:94:
ab:e1:b1:60:bf:d5:cb:b5:3e:d7:57:4c:e5:32:3e:
8c:5b:18:c5:38:09:00:fd:d0:5c:89:06:64:64:c3:
78:4f:68:2f:f6:69:21:d9:2e:80:fd:f3:bf:f8:53:
9e:1f:fc:52:07:49:30:9d:76:68:8f:a0:1a:20:05:
18:8c:c5:53:23:4a:de:b3:d4:03:e5:59:c2:92:63:
ae:c0:8c:a7:d5:28:fc:ff:9b:05:2a:72:14:ab:e0:
4c:32:6b:f7:64:f5:4e:84:95:88:c9:c9:20:a5:9b:
88:3c:50:a6:a0:ea:1a:1b:9a:65:62:b0:d1:64:cc:
74:98:c4:37:b2:54:6b:2e:e7:17:8f:b3:fa:da:6f:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:9E:80:BB:BC:FA:33:B8:64:BB:8A:1B:14:66:21:26:E9:18:77
X509v3 Authority Key Identifier:
keyid:17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.140.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:2a:62:4f:44:8e:8b:63:16:b1:e5:d1:06:be:37:4d:be:37:
14:d4:44:e4:ad:50:cc:96:30:62:7e:9a:04:75:82:ee:e9:04:
15:52:d1:e7:f6:a4:71:2a:20:29:06:27:9d:f1:73:ac:ea:5f:
74:81:59:ee:88:91:76:f9:24:17:45:48:3d:f4:dd:4b:d5:de:
77:c6:0d:81:5c:c1:a6:5f:11:d7:45:62:cd:8a:d7:ee:1c:41:
e1:f9:1b:b6:2c:c5:28:10:71:3b:6f:bf:ec:6e:fd:8d:d1:66:
21:9e:89:5b:43:f0:4c:7f:ca:77:83:f8:18:b6:cf:30:4e:32:
c8:b6:ae:c8:93:2e:d6:d2:12:fd:fd:10:10:21:af:9c:df:1c:
98:a5:5e:04:b0:63:50:b4:62:d4:69:76:86:a0:36:f2:c5:9a:
bb:ab:26:23:06:85:68:0e:9d:fa:2a:22:2c:29:d9:dc:1b:43:
d0:bc:87:5d:bd:83:61:72:bf:24:e4:de:6b:6f:54:ff:6d:81:
57:5b:7c:89:28:74:45:1e:ba:54:c8:de:8d:77:d9:58:b9:ce:
fc:1c:10:7d:25:6d:e3:1e:07:f4:57:cf:66:f8:02:e9:1a:07:
e6:72:bc:62:da:a1:13:36:ef:f0:0f:87:0b:fc:ea:02:64:c1:
39:96:ef:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:19:40 2026 by rpki-client