Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa
File:                     3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (raw, json)
Hash identifier:          Xt4hyW+BmbNnO6Gglm72cvRBidiVeub7Z/GWqb51oJQ=
Subject key identifier:   9E:E6:2E:BF:F6:72:4E:21:12:14:0B:9F:E2:C0:84:C2:2C:EE:70:A9
Certificate issuer:       /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C
Certificate serial:       03F093F68DE1EF03C6FA74D6DAAC79A3BC7B5BB3
Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa
Signing time:             Wed 29 Apr 2026 05:00:01 +0000
ROA not before:           Wed 29 Apr 2026 04:55:01 +0000
ROA not after:            Wed 28 Apr 2027 05:00:01 +0000
asID:                     149371
IP address blocks:        103.180.246.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f0:93:f6:8d:e1:ef:03:c6:fa:74:d6:da:ac:79:a3:bc:7b:5b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C
        Validity
            Not Before: Apr 29 04:55:01 2026 GMT
            Not After : Apr 28 05:00:01 2027 GMT
        Subject: CN=9EE62EBFF6724E2112140B9FE2C084C22CEE70A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:5f:a0:d3:fc:92:8a:87:29:4a:05:73:33:
                    7f:95:f6:c9:5c:ae:19:a9:d4:4a:94:29:42:f9:71:
                    bf:d0:8f:7c:c8:1c:d6:4d:63:fb:f0:2a:9b:22:f9:
                    96:74:6b:d0:7c:ee:9f:cf:56:d9:74:d5:86:61:42:
                    ff:f7:d0:4b:83:21:26:3c:99:45:c0:c4:5c:e3:46:
                    0f:99:e9:c3:0e:12:4a:8a:a9:47:eb:ee:b0:cf:d7:
                    f3:8e:83:14:22:c3:2c:7a:1e:83:1a:7d:d4:58:3f:
                    93:01:a6:96:38:82:40:88:89:af:0f:d4:e3:02:0d:
                    59:f8:53:48:aa:32:95:83:8d:37:12:5a:fd:63:cb:
                    9b:10:5b:bf:68:a1:bd:1b:92:ab:f5:4e:66:b9:fa:
                    33:70:33:09:ef:81:24:3e:b8:73:0f:80:9d:67:b4:
                    28:15:06:2c:4b:a0:c2:b4:fa:2b:a9:95:62:7c:95:
                    8d:9c:12:f1:2d:0d:3d:cb:5d:42:34:4e:ed:c0:22:
                    95:9a:2b:36:02:e2:07:c8:fc:40:9e:fb:89:e7:f3:
                    5b:fb:d3:07:a3:08:5b:9f:e2:70:97:b5:3b:b0:76:
                    a1:82:e9:0d:f8:a8:7e:1c:13:02:7b:3a:45:ef:cd:
                    cb:4a:a3:ef:91:d0:7a:e2:54:81:0f:96:a3:57:39:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E6:2E:BF:F6:72:4E:21:12:14:0B:9F:E2:C0:84:C2:2C:EE:70:A9
            X509v3 Authority Key Identifier:
                keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:e4:c2:9b:15:78:6f:56:8c:d5:90:bb:e4:47:24:a5:4e:
         b2:59:19:32:35:ae:fd:42:8f:8b:0e:a4:89:5b:16:6e:69:39:
         a7:3f:30:e3:56:e1:34:8e:93:43:a3:7c:c3:d5:dd:4b:04:d8:
         dd:d8:d8:8d:28:ef:eb:01:f1:64:d5:88:65:85:0b:fd:7f:59:
         c0:17:44:02:08:42:89:35:c7:37:83:86:51:f1:59:87:b5:e3:
         98:c3:48:16:95:06:93:d1:8c:bd:e5:11:9b:a5:b7:a5:a2:96:
         b7:71:19:46:31:f5:5d:e0:e9:8e:d8:82:1a:9e:8b:64:ce:4b:
         bf:db:7c:30:80:f3:94:5c:38:ad:a9:78:59:a7:02:34:61:1d:
         cb:7e:aa:55:d0:fe:41:25:93:16:8c:03:8d:de:f5:7f:4c:87:
         11:9d:1a:81:bb:07:5c:bc:e2:c2:c8:5f:a4:c9:63:80:22:23:
         14:75:e1:39:f5:db:e5:69:d2:c0:04:c7:4a:4a:5a:ff:a9:17:
         d5:8a:4d:69:84:77:06:78:15:ae:eb:1c:77:95:c5:1d:d5:e2:
         f3:74:c1:d0:34:27:12:91:73:05:7d:a4:f8:6b:18:25:a3:c7:
         fe:0a:7d:30:b2:f4:50:aa:96:9d:3a:14:8d:6b:99:72:8b:01:
         f0:55:59:1f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUA/CT9o3h7wPG+nTW2qx5o7x7W7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2
NEJCOTM1QzAeFw0yNjA0MjkwNDU1MDFaFw0yNzA0MjgwNTAwMDFaMDMxMTAvBgNV
BAMTKDlFRTYyRUJGRjY3MjRFMjExMjE0MEI5RkUyQzA4NEMyMkNFRTcwQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ml+g0/ySiocpSgVzM3+V9slc
rhmp1EqUKUL5cb/Qj3zIHNZNY/vwKpsi+ZZ0a9B87p/PVtl01YZhQv/30EuDISY8
mUXAxFzjRg+Z6cMOEkqKqUfr7rDP1/OOgxQiwyx6HoMafdRYP5MBppY4gkCIia8P
1OMCDVn4U0iqMpWDjTcSWv1jy5sQW79oob0bkqv1Tma5+jNwMwnvgSQ+uHMPgJ1n
tCgVBixLoMK0+iuplWJ8lY2cEvEtDT3LXUI0Tu3AIpWaKzYC4gfI/ECe+4nn81v7
0wejCFuf4nCXtTuwdqGC6Q34qH4cEwJ7OkXvzctKo++R0HriVIEPlqNXOdyRAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUnuYuv/ZyTiESFAuf4sCEwizucKkwHwYDVR0j
BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux
REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC
OTM1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwZGU2YzgyLWQ5MmItNDA4NS04
ODkzLWQ2NDc3OTFjMjc3Zi8wLzMxMzAzMzJlMzEzODMwMmUzMjM0MzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntPYwDQYJ
KoZIhvcNAQELBQADggEBABR85MKbFXhvVozVkLvkRySlTrJZGTI1rv1Cj4sOpIlb
Fm5pOac/MONW4TSOk0OjfMPV3UsE2N3Y2I0o7+sB8WTViGWFC/1/WcAXRAIIQok1
xzeDhlHxWYe145jDSBaVBpPRjL3lEZult6WilrdxGUYx9V3g6Y7Yghqei2TOS7/b
fDCA85RcOK2peFmnAjRhHct+qlXQ/kElkxaMA43e9X9MhxGdGoG7B1y84sLIX6TJ
Y4AiIxR14Tn12+Vp0sAEx0pKWv+pF9WKTWmEdwZ4Fa7rHHeVxR3V4vN0wdA0JxKR
cwV9pPhrGCWjx/4KfTCy9FCqlp06FI1rmXKLAfBVWR8=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:45:11 2026 by rpki-client