Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
File: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (raw, json)
Hash identifier: 1bfP/dAtULl3DSAO+vN45f7sQZ3JXGkNJGPLQXMnSgY=
Subject key identifier: FC:08:52:72:76:18:40:FB:AC:11:3A:58:F8:43:6C:27:19:3F:D1:82
Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial: 5639F725B811B289B8C43604DB6AA5392C8CEB36
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
Signing time: Sat 25 Apr 2026 16:00:01 +0000
ROA not before: Sat 25 Apr 2026 15:55:01 +0000
ROA not after: Sat 24 Apr 2027 16:00:01 +0000
asID: 141665
IP address blocks: 103.162.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:39:f7:25:b8:11:b2:89:b8:c4:36:04:db:6a:a5:39:2c:8c:eb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
Validity
Not Before: Apr 25 15:55:01 2026 GMT
Not After : Apr 24 16:00:01 2027 GMT
Subject: CN=FC085272761840FBAC113A58F8436C27193FD182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:b1:16:b1:35:29:5a:47:f4:59:1c:24:7b:
a5:d5:50:e9:bf:af:91:65:62:4c:0d:e6:b9:e9:88:
68:f1:9f:61:56:05:f5:bc:fd:23:e9:75:20:7f:be:
6d:00:77:7b:00:9d:95:11:ca:e3:38:78:ad:63:62:
09:4c:05:f3:87:8c:55:44:7e:75:35:21:f8:d7:f3:
97:14:ab:67:0f:93:6a:81:0f:ec:29:f4:ef:a8:52:
50:e7:c3:71:fd:94:37:3c:4b:1e:f5:69:73:da:f5:
21:c0:52:71:6e:e6:be:00:40:b0:22:ad:37:73:e4:
cb:f1:86:3c:10:da:74:b4:08:9a:20:a3:b2:6b:57:
b1:f0:6c:6a:00:85:ed:71:a7:b6:46:f0:6f:2e:fc:
e8:31:a0:5a:4d:23:5c:1a:3d:a9:b4:7e:85:d8:88:
f4:fc:b2:17:a2:db:2e:3b:f4:77:ce:24:ad:16:26:
be:1f:d6:bf:b8:da:f9:34:4a:7d:67:2a:85:f0:3a:
46:a8:da:06:7c:0d:f4:5a:f6:a1:48:67:b1:14:2f:
a4:40:de:15:a3:d2:02:13:95:31:cf:58:a1:e9:0b:
4f:a7:c7:d9:bf:30:44:e7:c7:f0:c3:e6:89:20:ec:
be:df:37:39:96:b4:d3:83:59:29:53:06:7e:09:f5:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:52:72:76:18:40:FB:AC:11:3A:58:F8:43:6C:27:19:3F:D1:82
X509v3 Authority Key Identifier:
keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.222.0/24
Signature Algorithm: sha256WithRSAEncryption
47:67:b2:bc:62:35:0b:e6:dd:dc:37:5d:26:a7:bf:a3:80:06:
8e:44:7f:8a:45:09:38:57:e7:a6:14:60:2b:e2:6b:8c:c8:31:
b5:a4:3c:11:70:94:2d:f7:18:25:8a:86:76:d1:55:0d:45:98:
ac:54:3f:77:31:ec:63:36:24:a9:44:96:90:c1:1b:82:29:74:
69:c5:fe:4a:e7:66:47:2e:dc:f4:24:f2:25:e8:e8:dd:42:01:
68:92:9c:d1:f4:5a:80:06:47:a3:11:9b:c7:b6:8d:85:5a:c9:
30:bf:1a:c1:be:29:9c:f7:4a:24:ca:22:84:91:af:42:3c:27:
a8:7c:21:69:97:81:e9:3a:94:58:6d:57:c0:63:1a:03:ee:75:
37:7b:8b:5e:41:3d:a7:18:c0:72:d0:c8:7b:25:50:99:9b:f5:
f2:9c:ff:c0:67:30:1a:dd:18:41:e2:bf:bb:ba:8d:a9:95:79:
24:84:e0:6c:43:7e:a2:3f:67:7c:b0:10:68:0f:2a:78:97:4e:
f7:23:45:55:a5:24:79:02:15:1b:fe:3f:7d:61:fa:b6:1b:b5:
7e:a1:60:5d:7f:9c:36:e7:ea:d0:9e:45:e6:0c:a3:6e:90:84:
89:f2:86:72:b5:a6:8b:21:e6:2d:76:fd:e4:b6:6c:db:5e:d2:
ef:00:24:af
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVjn3JbgRsom4xDYE22qlOSyM6zYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZC
MDQ3M0Y1RTAeFw0yNjA0MjUxNTU1MDFaFw0yNzA0MjQxNjAwMDFaMDMxMTAvBgNV
BAMTKEZDMDg1MjcyNzYxODQwRkJBQzExM0E1OEY4NDM2QzI3MTkzRkQxODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvO7EWsTUpWkf0WRwke6XVUOm/
r5FlYkwN5rnpiGjxn2FWBfW8/SPpdSB/vm0Ad3sAnZURyuM4eK1jYglMBfOHjFVE
fnU1IfjX85cUq2cPk2qBD+wp9O+oUlDnw3H9lDc8Sx71aXPa9SHAUnFu5r4AQLAi
rTdz5MvxhjwQ2nS0CJogo7JrV7HwbGoAhe1xp7ZG8G8u/OgxoFpNI1waPam0foXY
iPT8shei2y479HfOJK0WJr4f1r+42vk0Sn1nKoXwOkao2gZ8DfRa9qFIZ7EUL6RA
3hWj0gITlTHPWKHpC0+nx9m/METnx/DD5okg7L7fNzmWtNODWSlTBn4J9T2dAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU/AhScnYYQPusETpY+ENsJxk/0YIwHwYDVR0j
BBgwFoAU5E1N5wHZMnE1NqCE92iUprBHP14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjRmMGZmYS1lMDMxLTRlZTEtYmYwZi02NGJhY2ZjZjI5NDIvMC9FNDRENERFNzAx
RDkzMjcxMzUzNkEwODRGNzY4OTRBNkIwNDczRjVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZCMDQ3
M0Y1RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2NGYwZmZhLWUwMzEtNGVlMS1i
ZjBmLTY0YmFjZmNmMjk0Mi8wLzMxMzAzMzJlMzEzNjMyMmUzMjMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnot4wDQYJ
KoZIhvcNAQELBQADggEBAEdnsrxiNQvm3dw3XSanv6OABo5Ef4pFCThX56YUYCvi
a4zIMbWkPBFwlC33GCWKhnbRVQ1FmKxUP3cx7GM2JKlElpDBG4IpdGnF/krnZkcu
3PQk8iXo6N1CAWiSnNH0WoAGR6MRm8e2jYVayTC/GsG+KZz3SiTKIoSRr0I8J6h8
IWmXgek6lFhtV8BjGgPudTd7i15BPacYwHLQyHslUJmb9fKc/8BnMBrdGEHiv7u6
jamVeSSE4GxDfqI/Z3ywEGgPKniXTvcjRVWlJHkCFRv+P31h+rYbtX6hYF1/nDbn
6tCeReYMo26QhInyhnK1posh5i12/eS2bNte0u8AJK8=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:52 2026 by rpki-client