Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          NVXWwiHpVQYjyYK/GpoGcu49hNICx/pUwczINdOc/Nw=
Subject key identifier:   06:1A:11:48:EE:97:8C:06:81:4F:3F:03:D4:11:93:DA:B3:F0:14:2C
Certificate issuer:       /CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Certificate serial:       6B5284620ECF1AD52445ED29E9E067C60329253D
Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 28 Apr 2026 07:02:02 +0000
ROA not before:           Tue 28 Apr 2026 06:57:02 +0000
ROA not after:            Tue 27 Apr 2027 07:02:02 +0000
asID:                     9341
IP address blocks:        103.117.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:52:84:62:0e:cf:1a:d5:24:45:ed:29:e9:e0:67:c6:03:29:25:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9
        Validity
            Not Before: Apr 28 06:57:02 2026 GMT
            Not After : Apr 27 07:02:02 2027 GMT
        Subject: CN=061A1148EE978C06814F3F03D41193DAB3F0142C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:07:51:b3:39:6e:f8:b1:3a:f7:99:4e:56:
                    8b:b5:6e:b2:e9:61:47:75:ec:50:f7:d0:1a:0b:c3:
                    f8:56:1f:02:a5:ed:6d:50:cc:5b:80:4f:79:48:e4:
                    63:63:73:19:5e:18:c6:e4:be:b7:65:9b:8e:a2:0d:
                    ae:60:1b:2b:bc:de:de:45:9a:9b:5c:44:d4:19:91:
                    57:5d:35:77:c2:11:35:0a:14:cb:62:5a:07:64:ac:
                    e1:76:83:42:05:f8:65:b8:44:04:27:fa:ab:be:b2:
                    69:d7:b3:94:14:10:fa:a1:b0:7a:2f:5c:7c:3a:5e:
                    9b:6c:f7:96:f9:a5:ba:10:9b:39:07:1e:3a:70:5b:
                    ed:a4:fb:14:7c:3f:57:1e:8a:e0:7b:01:4b:8b:e0:
                    d1:5f:3a:85:59:00:5c:f0:ef:c4:3c:2c:d2:1a:3b:
                    c8:12:9e:77:cf:4f:51:b0:10:37:80:74:6c:0c:ce:
                    1b:1d:c1:79:16:17:7e:9e:9f:ff:10:39:a5:33:1e:
                    65:d6:e5:55:e7:0a:76:5e:c5:76:e8:36:64:37:9d:
                    07:6f:21:fe:8b:f5:83:13:90:6f:34:3b:e3:a8:ff:
                    fd:dc:97:47:3c:20:a6:07:ba:7f:73:4d:d9:c1:84:
                    22:c7:29:1a:c8:9f:41:06:a0:f7:c1:c6:b4:0c:4b:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1A:11:48:EE:97:8C:06:81:4F:3F:03:D4:11:93:DA:B3:F0:14:2C
            X509v3 Authority Key Identifier:
                keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:57:54:5c:97:db:33:1d:8f:58:82:30:74:fb:27:dc:6e:
         19:c0:76:d7:5e:6b:2c:28:6c:33:1e:68:38:37:ca:aa:be:be:
         3f:ca:40:f0:06:66:c3:07:08:ae:ce:e7:7d:0a:4e:fe:f3:d9:
         9f:d0:44:60:86:5a:50:fd:c6:83:34:7c:40:27:c4:ee:29:27:
         63:d5:07:a4:4e:76:90:7f:1e:96:c3:52:7c:df:a3:fb:24:82:
         1b:cf:ca:2b:f4:bd:f0:ae:ed:ae:2d:99:33:b2:f4:f1:e1:d3:
         b6:63:0a:63:ae:86:59:a2:30:41:f9:27:f7:71:e5:5b:b1:00:
         e7:02:9c:dd:a8:35:f0:17:41:95:6e:ba:aa:c2:97:90:ab:91:
         1c:7d:54:d5:95:03:c1:9f:35:87:fc:fb:d6:31:df:01:2c:11:
         1f:07:d7:a8:c3:50:20:32:c3:41:13:74:17:4b:37:c8:31:71:
         96:d3:e8:12:58:88:08:fb:33:67:14:81:a2:8e:62:35:5e:41:
         26:a1:f5:ff:6f:cf:fa:e8:a3:3f:dc:54:2c:51:dd:ab:58:98:
         9f:df:81:89:2c:71:1e:24:60:01:d0:ff:40:80:77:e1:2d:da:
         14:83:fa:f9:b0:32:50:82:d1:7b:36:40:84:48:47:92:b5:0a:
         39:7b:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:26:00 2026 by rpki-client