Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa
File: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (raw, json)
Hash identifier: n+WF4SkhtuIHjq7mrNhhjQ3Hs9lZ64t7e+Y0Uzrmhsc=
Subject key identifier: 40:09:0C:D5:1B:07:55:BC:3E:D5:15:7E:06:F5:38:FA:E4:56:F7:E5
Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial: 729C63BA2E02C78054E838961F7CB1FA5480898F
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa
Signing time: Sat 25 Apr 2026 16:00:01 +0000
ROA not before: Sat 25 Apr 2026 15:55:01 +0000
ROA not after: Sat 24 Apr 2027 16:00:01 +0000
asID: 141665
IP address blocks: 103.162.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9c:63:ba:2e:02:c7:80:54:e8:38:96:1f:7c:b1:fa:54:80:89:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
Validity
Not Before: Apr 25 15:55:01 2026 GMT
Not After : Apr 24 16:00:01 2027 GMT
Subject: CN=40090CD51B0755BC3ED5157E06F538FAE456F7E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:54:ee:d1:d1:60:95:81:48:1d:6f:35:bb:
ab:94:bb:d6:6b:c6:b7:7b:28:0f:ae:a4:f8:e9:fa:
b1:36:e2:61:c3:e5:6a:3c:c7:14:69:5b:06:f5:8c:
c0:ae:ab:ae:ce:ab:3d:c3:2b:21:57:a6:3a:4c:3d:
ae:04:d9:2d:16:48:28:36:a2:3d:7d:e6:30:1d:91:
23:7c:ad:08:97:8b:83:3c:0a:82:ca:a9:9c:47:74:
5c:b2:a2:2f:96:29:26:80:37:58:f6:67:17:6b:c6:
eb:cc:97:d7:72:bf:9f:79:c1:f8:21:56:a7:90:31:
2f:53:19:a1:3f:c4:07:ab:99:71:1e:44:46:78:82:
00:eb:61:eb:2e:53:c2:06:fa:5d:29:9a:3a:fa:62:
f2:39:14:ad:33:89:bd:a0:f9:6a:f8:77:f5:3e:5e:
bb:f7:b7:3e:60:5d:af:e3:b6:90:1b:ed:0f:bb:e8:
06:93:ff:8d:9c:d5:c0:2e:fd:04:e5:9a:53:76:4e:
f5:92:81:7d:ec:0c:d6:3f:30:3d:75:bb:71:78:7d:
b8:72:31:ec:36:fb:fe:c3:96:51:f2:48:f4:18:8e:
bd:80:2d:ac:c3:ba:ea:77:b3:8f:97:bd:bb:2c:ff:
a9:ba:8a:4b:91:81:f4:18:61:3a:4d:32:6b:48:dd:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:09:0C:D5:1B:07:55:BC:3E:D5:15:7E:06:F5:38:FA:E4:56:F7:E5
X509v3 Authority Key Identifier:
keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:11:23:75:29:37:14:e9:b3:75:64:91:f7:65:73:13:4e:4d:
19:3c:a1:da:99:2b:91:ef:ad:a2:4c:c8:c5:a8:25:df:ae:9c:
93:ed:3e:5f:82:fc:cb:06:c9:11:b4:8d:ab:8e:7e:dd:ff:f7:
b3:b1:c6:e8:cc:86:18:25:9a:72:4f:76:9c:2c:29:b9:9c:04:
e7:bd:4f:18:88:95:1f:71:6d:34:e5:cc:3e:07:e5:0d:a2:0f:
54:61:bc:e6:fb:55:a5:1b:3d:b7:8d:19:f4:cd:9e:1a:bb:2f:
a9:28:2b:7d:ba:b1:18:ed:0e:29:23:ea:5b:1d:82:45:e0:8f:
4b:35:6f:eb:54:8d:70:fc:e3:06:2e:56:cd:b3:42:6e:be:a0:
ef:c1:3c:26:06:d8:01:18:31:19:cf:c5:e8:ad:44:b2:8e:c0:
fd:cf:5a:34:5d:a0:6e:fa:96:64:68:e3:d8:4d:4e:6e:e2:e4:
d5:4f:ac:3a:11:fd:98:92:ed:f7:9e:20:4b:6a:f5:2c:b8:31:
a0:58:dd:0d:a9:16:b3:9d:de:8b:fb:65:e2:9d:a2:a1:99:43:
8d:5f:11:a7:2e:e1:6d:5e:20:29:e4:c1:59:46:bc:eb:47:b1:
ce:2a:88:9d:4d:27:d1:b9:65:44:53:4f:89:0c:0a:60:e7:48:
a2:30:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:00 2026 by rpki-client