Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa
File: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (raw, json)
Hash identifier: KpBrl3SsA90z+h0ZRhj2GWaqtdI054GKKy3CTKCSEzw=
Subject key identifier: C8:17:6C:A6:F2:8B:52:C2:B7:45:29:47:71:96:EF:BB:8E:45:5F:BE
Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial: 21DF3BB2F712F952EEB7EFE03E3517258BAC6FF2
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa
Signing time: Thu 23 Apr 2026 01:56:39 +0000
ROA not before: Thu 23 Apr 2026 01:51:39 +0000
ROA not after: Thu 22 Apr 2027 01:56:39 +0000
asID: 63490
IP address blocks: 103.131.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:df:3b:b2:f7:12:f9:52:ee:b7:ef:e0:3e:35:17:25:8b:ac:6f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Validity
Not Before: Apr 23 01:51:39 2026 GMT
Not After : Apr 22 01:56:39 2027 GMT
Subject: CN=C8176CA6F28B52C2B74529477196EFBB8E455FBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:80:d3:ba:e9:c3:36:a7:06:76:16:2b:2f:
69:88:5d:5f:c2:c0:70:55:94:ca:dc:be:5d:d5:04:
cf:42:86:b4:dc:94:7a:4e:e2:f6:c9:38:bb:11:1f:
5f:37:2b:ee:bd:d1:8c:f5:a1:e8:b5:e9:2f:ae:2a:
e1:4b:58:c6:1a:42:4e:c3:8c:76:e2:30:42:ba:88:
6a:33:34:1e:d7:8c:f8:aa:62:b4:3d:19:7a:bb:d6:
ea:8c:d0:c5:90:58:a3:07:f2:02:51:f1:d3:c8:79:
4a:5e:e9:37:30:09:ea:cd:62:61:19:ed:2b:a4:82:
be:44:3d:fc:c6:8a:c1:02:15:f3:eb:ce:43:64:65:
72:b9:13:ce:86:f5:e3:26:4d:47:ed:50:e0:c4:00:
ae:87:3f:47:87:e2:bd:1c:52:65:e8:b6:20:bd:bf:
fb:25:7f:1d:4c:69:25:b5:82:a3:1b:9a:9c:55:0b:
b7:fd:19:8d:30:28:9d:ce:71:8e:80:45:5c:35:48:
14:9c:fd:4e:03:6e:78:1a:95:84:19:fa:93:af:c8:
74:13:72:a0:1c:69:5b:13:ae:f6:52:de:69:32:5b:
ac:b8:96:88:a2:73:cd:89:5c:d5:2d:ec:d9:8d:ea:
a8:62:46:5a:d3:8e:fe:4a:61:c5:99:85:1e:f6:02:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:17:6C:A6:F2:8B:52:C2:B7:45:29:47:71:96:EF:BB:8E:45:5F:BE
X509v3 Authority Key Identifier:
keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:eb:ed:a7:c3:7e:29:ae:f5:4b:2e:61:f4:85:87:15:05:16:
59:12:92:7f:9a:c3:f3:2b:6b:e3:a6:cc:91:2d:14:1f:f5:55:
30:07:8e:6d:eb:f0:de:35:24:96:a3:7c:a8:e6:16:0c:9a:fa:
06:fc:dc:77:bb:84:69:db:c5:c0:b8:10:6d:05:bd:7b:ba:c5:
e2:93:e1:b4:68:23:4a:a6:1d:f5:0b:d3:1a:5d:ab:cc:af:34:
2c:28:14:5f:17:b5:eb:b1:f8:c3:b0:ff:b6:8c:19:7a:5b:1e:
24:1d:93:9c:90:8e:85:3f:85:b8:ef:2a:a1:ae:42:7d:6d:b4:
87:f1:b6:c2:94:b0:a0:0a:c8:6b:ee:b7:ec:02:20:13:cd:f2:
67:65:17:52:71:b2:96:c0:0c:04:d0:68:29:4f:52:76:7f:ba:
2c:ff:f9:17:5b:64:48:c3:aa:7a:8a:18:f2:71:63:8f:83:ed:
75:9c:20:8d:c4:63:08:81:b4:c3:73:c5:d4:c2:91:aa:a3:00:
9a:e7:6f:38:99:14:48:49:bc:23:12:83:c4:54:aa:85:37:cb:
11:d1:28:f3:8a:83:fd:4f:20:73:6d:da:ab:a8:b4:38:df:35:
09:c7:0e:82:0c:10:ca:3e:54:f9:ce:5d:ca:15:56:a4:73:d3:
c0:16:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:13:35 2026 by rpki-client