Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          hJ5VVkYfPl8aeNRjNrQ4uCI70AynHN8COLMjevO9FVk=
Subject key identifier:   B4:73:A7:A7:F4:D2:99:B9:F0:DA:D3:8C:8A:95:68:5C:4B:A4:AB:AA
Certificate issuer:       /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
Certificate serial:       5E4EAFCAF822F4B54E98177FCD46C1BD5BF8744A
Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa
Signing time:             Sun 26 Apr 2026 19:57:56 +0000
ROA not before:           Sun 26 Apr 2026 19:52:56 +0000
ROA not after:            Sun 25 Apr 2027 19:57:56 +0000
asID:                     154410
IP address blocks:        103.211.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4e:af:ca:f8:22:f4:b5:4e:98:17:7f:cd:46:c1:bd:5b:f8:74:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
        Validity
            Not Before: Apr 26 19:52:56 2026 GMT
            Not After : Apr 25 19:57:56 2027 GMT
        Subject: CN=B473A7A7F4D299B9F0DAD38C8A95685C4BA4ABAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:a9:06:c9:a3:b7:1b:07:93:0f:15:1b:34:
                    94:9c:29:ea:f3:02:f2:74:7a:99:51:5e:92:41:8f:
                    40:8d:1f:ac:fa:43:fe:65:ac:5d:2e:3b:65:84:c5:
                    3f:a2:6c:47:31:c5:91:17:5d:0a:51:7c:c8:f6:66:
                    19:6d:28:eb:a8:52:18:6a:c9:39:6b:b1:bd:dc:c4:
                    ae:d3:f7:53:b4:3e:de:de:66:f2:d6:44:a3:16:6f:
                    da:a3:68:6b:c9:f6:cb:2a:65:9e:f1:f0:ed:4a:bf:
                    06:18:45:93:47:e6:fe:41:07:27:24:e3:e8:60:26:
                    9e:df:fd:64:b7:d0:68:7a:10:e6:9b:ec:19:15:56:
                    78:d7:aa:97:72:b0:e0:14:16:06:a4:86:a4:da:03:
                    3c:07:70:cd:1e:b4:3c:88:d3:17:4a:31:d7:3d:f9:
                    59:fa:98:78:c2:25:0b:14:88:aa:90:75:0b:c4:58:
                    c0:ba:79:53:b8:4a:e6:f6:14:ab:25:e3:a8:ab:9c:
                    29:3f:3e:63:67:87:f5:16:b7:89:13:44:20:1e:aa:
                    c2:5e:cd:b2:50:67:ab:c4:b0:c2:45:d3:6b:25:87:
                    2b:ef:cb:c9:da:02:21:b8:91:48:ff:24:bb:c1:0c:
                    4b:bc:28:d0:e1:89:19:23:4b:fb:35:76:7c:b7:2d:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:73:A7:A7:F4:D2:99:B9:F0:DA:D3:8C:8A:95:68:5C:4B:A4:AB:AA
            X509v3 Authority Key Identifier:
                keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:eb:85:9f:fc:f2:94:f1:63:74:88:1c:ce:e1:97:50:92:7f:
         55:9c:b7:43:d8:f8:03:74:3b:0c:b3:75:f6:2d:54:23:f6:fb:
         74:c3:6d:b7:5c:0d:06:07:3f:af:05:de:92:89:9a:bc:b6:7d:
         9a:52:c3:76:5f:6b:d0:00:c4:de:46:a5:63:a9:b2:04:1b:76:
         14:af:e0:fb:4a:92:39:9f:c9:14:53:bc:49:86:70:d2:8d:c7:
         4c:db:ed:cd:e5:26:e6:a7:22:ff:df:bc:d9:f0:61:3e:c5:05:
         93:4f:b5:e6:15:df:9a:8e:b7:69:fe:35:f4:60:2e:7c:17:c4:
         3f:0d:14:62:e2:6f:a5:73:f7:cf:88:0e:cc:06:e6:19:5a:f7:
         4f:7a:f0:26:21:b3:13:e3:80:69:b5:8f:e7:2a:5d:36:26:40:
         c6:eb:38:ef:52:32:f8:9e:8b:10:8d:85:7e:38:55:1d:c4:82:
         cc:3d:0d:3d:37:45:0a:cc:dd:d2:2f:83:66:45:a7:70:2d:09:
         6f:72:08:aa:67:e4:b5:40:ec:71:da:f1:8e:24:43:b6:a8:2c:
         5b:79:4b:4a:7e:56:fc:ac:45:5d:45:c2:3c:cc:9b:69:06:5b:
         54:f1:4e:69:13:de:fa:16:1d:09:2d:db:20:68:51:c5:91:90:
         0f:0d:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:51:06 2026 by rpki-client