Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32332d3233203d3e2039333431.roa
File: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: /YVIuq4EdkOca4Njl8aBL+eFV4K+9dmBGogoU5nHqB4=
Subject key identifier: 7C:6D:B0:D3:00:9E:6A:A9:DC:A3:EB:FD:1D:86:91:76:FC:09:CD:6D
Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Certificate serial: 5B60CFCCCFE9D5774F368804F9E8A2EC2EF0ED4A
Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32332d3233203d3e2039333431.roa
Signing time: Tue 28 Apr 2026 07:02:02 +0000
ROA not before: Tue 28 Apr 2026 06:57:02 +0000
ROA not after: Tue 27 Apr 2027 07:02:02 +0000
asID: 9341
IP address blocks: 103.117.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:60:cf:cc:cf:e9:d5:77:4f:36:88:04:f9:e8:a2:ec:2e:f0:ed:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Validity
Not Before: Apr 28 06:57:02 2026 GMT
Not After : Apr 27 07:02:02 2027 GMT
Subject: CN=7C6DB0D3009E6AA9DCA3EBFD1D869176FC09CD6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:4d:36:a4:e3:7b:db:03:07:73:11:2c:ae:
4d:a0:78:2a:72:ad:7b:b3:56:94:33:22:ad:b5:e2:
ea:eb:e5:be:62:58:9e:a8:41:c6:31:d3:78:46:74:
12:92:ad:e6:58:52:25:48:38:b8:8a:3d:8f:d3:b0:
82:b9:0d:61:04:d0:4c:ee:ca:ef:7c:82:b6:45:7b:
0b:0a:7b:18:52:51:fb:63:55:3e:7b:8f:ba:9d:3b:
5a:4a:d8:01:73:a8:0b:ea:a1:c0:b4:24:09:cc:0f:
9f:c1:f9:df:b3:9c:04:e0:c0:e1:41:45:d0:f4:18:
f3:b4:0a:1b:65:35:83:f8:98:9d:64:1b:96:f7:25:
7b:9e:23:86:8a:b2:6c:94:36:08:ea:d1:bb:f7:97:
68:9a:16:55:f7:15:0a:0d:4b:bc:e6:48:ab:db:ec:
7a:df:25:df:ff:23:b2:64:dc:b7:7a:0e:e2:9c:f8:
ae:ce:54:c3:3f:88:c5:2d:72:b3:b1:97:41:ef:b5:
94:c0:8a:4b:16:4e:ea:48:9b:f2:89:b0:d4:10:16:
c8:a9:f0:21:87:a7:d8:1d:c4:cc:8b:4c:3f:a5:0b:
c0:59:45:71:89:80:64:d8:87:fa:db:36:f1:58:0d:
c9:44:88:98:c0:0f:37:e0:dd:5b:5e:98:e7:e6:89:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6D:B0:D3:00:9E:6A:A9:DC:A3:EB:FD:1D:86:91:76:FC:09:CD:6D
X509v3 Authority Key Identifier:
keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.30.0/23
Signature Algorithm: sha256WithRSAEncryption
53:b2:dd:ec:c3:8f:0d:1c:07:6b:da:31:49:43:d0:b9:02:21:
8a:c6:57:e5:9b:74:ca:5b:3b:5b:da:64:85:2f:8c:dc:9a:bf:
a5:4a:b3:36:52:d8:9f:fa:29:a0:b1:a1:8a:d7:e8:d0:1e:19:
49:f9:20:5e:c8:b5:9d:05:fb:3d:ee:56:72:d1:b3:a3:06:71:
cd:d7:f3:81:2c:68:54:74:d8:f7:1c:91:44:d0:8b:c7:3e:c2:
a5:fd:c9:c0:e7:ed:b0:01:47:90:65:16:41:aa:50:af:78:de:
fe:5c:9c:b2:5f:7c:9f:01:3f:a4:ef:cb:30:78:8d:8d:88:84:
63:55:aa:54:31:d3:b2:2e:d5:8d:29:d5:d5:a3:57:fb:8a:e9:
a2:b3:a2:e4:97:0f:a8:89:af:2d:3c:64:bf:71:d3:b1:3e:ab:
cb:69:af:93:cf:ca:e7:e4:d6:6a:3b:5d:ec:cd:9e:25:6d:d9:
5c:ce:57:c6:c7:51:81:7d:5e:d4:71:ee:20:32:c3:0b:e5:63:
e1:00:30:67:0c:ff:10:55:d4:30:75:81:08:30:79:3e:17:94:
17:d1:d4:45:cc:45:3f:3b:f2:cf:94:52:67:a7:35:7b:e0:5e:
9a:f9:4f:2a:4e:d3:99:46:93:3b:d1:f8:ce:2d:75:f0:4e:dd:
08:d6:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:48:13 2026 by rpki-client