Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa
File:                     3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (raw, json)
Hash identifier:          TPQV31WpuVldFb9soN5OyfEnuMNqarTqg57A3amCVWA=
Subject key identifier:   4C:3B:64:1F:0B:08:BD:3E:6C:BD:FD:5C:0D:81:14:DE:1B:59:0E:F4
Certificate issuer:       /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial:       423F126338FC2B7731E593EE1446CF317AF81AE5
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa
Signing time:             Sat 25 Apr 2026 16:00:01 +0000
ROA not before:           Sat 25 Apr 2026 15:55:01 +0000
ROA not after:            Sat 24 Apr 2027 16:00:01 +0000
asID:                     141665
IP address blocks:        103.162.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3f:12:63:38:fc:2b:77:31:e5:93:ee:14:46:cf:31:7a:f8:1a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
        Validity
            Not Before: Apr 25 15:55:01 2026 GMT
            Not After : Apr 24 16:00:01 2027 GMT
        Subject: CN=4C3B641F0B08BD3E6CBDFD5C0D8114DE1B590EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:f5:7d:a0:4d:5a:2d:17:0e:3b:8c:31:f4:
                    8a:dc:bf:a6:e6:83:13:92:bd:ae:68:6a:0a:c2:95:
                    60:e5:a3:ab:86:e3:a3:69:82:9f:98:68:0e:2f:4c:
                    cb:64:cb:e0:91:5c:1f:6a:bd:a4:00:e8:c0:fd:8a:
                    d7:02:2b:ec:9d:fd:bc:c4:ca:0c:b1:f9:2d:c9:a9:
                    5e:fa:82:68:7e:e7:ae:41:cc:78:7c:0a:30:19:af:
                    c1:70:f1:45:c7:67:32:f7:56:38:f9:59:d3:f3:b1:
                    8d:1d:0f:4e:67:3a:e0:c3:e3:0e:e5:56:53:f5:f2:
                    2b:79:46:9d:cb:ed:f9:c9:28:f0:4e:4a:2e:0a:f6:
                    50:f7:55:a1:56:84:44:13:87:7a:9e:b1:fb:85:ca:
                    7e:dd:1d:60:4c:89:9d:f7:24:c9:16:dd:25:7d:a6:
                    16:3f:1c:7d:a9:d0:29:cc:c5:8e:3b:83:e5:db:c7:
                    be:59:b6:d3:a1:dc:1c:be:62:bb:35:02:92:7b:b3:
                    b7:d4:92:78:fa:18:1c:c7:d8:fb:ec:12:74:d9:99:
                    bf:91:d3:29:cd:43:fc:eb:f7:ee:aa:e3:1a:d6:3c:
                    d0:48:8c:15:a7:34:f9:05:4d:3e:a7:c9:d9:53:12:
                    7e:f5:fe:a2:2b:4b:6b:ae:c3:b3:5d:89:1c:2e:e4:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:64:1F:0B:08:BD:3E:6C:BD:FD:5C:0D:81:14:DE:1B:59:0E:F4
            X509v3 Authority Key Identifier:
                keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:10:43:92:80:56:38:01:cf:ed:4d:95:37:44:b7:67:69:82:
         f2:3c:81:38:71:7c:b7:2f:6a:d0:e3:87:21:38:ca:f2:f2:10:
         1a:3f:77:66:a2:77:60:ff:47:e7:d4:36:05:d8:17:59:42:af:
         ef:90:ed:0a:b8:57:f6:a4:51:1d:05:4d:96:ee:06:29:60:ef:
         67:2f:88:09:59:7d:0e:7b:d1:05:8d:c0:30:4d:a3:73:b0:60:
         26:d4:6f:76:ee:3b:2d:3c:71:8a:32:7b:50:f0:ae:67:d0:6c:
         70:c2:87:89:0d:5a:7d:64:fa:6c:4e:9e:e6:f9:00:d6:0c:66:
         d6:1d:0a:8e:9e:98:fa:82:4d:1e:0f:eb:a7:86:4f:8f:36:ce:
         ed:d2:5d:e6:f3:38:67:f2:04:54:14:b9:86:da:39:c4:b4:bc:
         94:8b:7c:28:cc:c2:78:59:01:4f:b6:ea:6d:39:e0:08:8c:a6:
         9e:e1:a7:c5:6c:1a:b4:a5:0e:a2:8b:07:5e:39:48:80:d0:9f:
         19:0b:eb:56:51:de:f4:91:2a:7c:f6:87:e7:39:45:f4:01:70:
         e4:39:ee:44:01:28:72:91:c6:62:55:d5:1d:a8:3a:44:22:8e:
         67:94:47:6e:32:89:d8:1c:60:02:60:a6:46:87:7d:25:41:ef:
         bf:d7:fb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:21:54 2026 by rpki-client