Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa
File: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: AwY2pjxpm2ePVNovrSMlwJfs9IDP1KnxXA1MDp05/cU=
Subject key identifier: A1:F4:F6:1A:6E:D0:9C:0C:D3:A3:8F:04:49:01:BC:B7:77:3D:88:1E
Certificate issuer: /CN=1762D22131EE967D86536D2B475A9A8C08CE6003
Certificate serial: 6AC8623A9F5A8BE07E8AD43D13AE2DB47B250EC8
Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa
Signing time: Wed 22 Apr 2026 05:00:00 +0000
ROA not before: Wed 22 Apr 2026 04:55:00 +0000
ROA not after: Wed 21 Apr 2027 05:00:00 +0000
asID: 131111
IP address blocks: 103.159.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c8:62:3a:9f:5a:8b:e0:7e:8a:d4:3d:13:ae:2d:b4:7b:25:0e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003
Validity
Not Before: Apr 22 04:55:00 2026 GMT
Not After : Apr 21 05:00:00 2027 GMT
Subject: CN=A1F4F61A6ED09C0CD3A38F044901BCB7773D881E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:05:7d:e8:1b:06:dc:f7:04:fd:fc:d6:d7:
33:91:35:87:e5:6e:fc:a0:33:a2:93:40:4b:88:b5:
18:53:a5:4e:65:37:f1:61:5a:9c:82:d9:0a:69:ce:
66:0d:0d:69:63:cf:c0:a1:37:0c:37:72:bc:cf:6a:
cd:6d:9a:8a:2c:de:ea:ff:9f:3c:b6:f7:1a:21:1e:
af:ab:21:0b:06:46:3a:39:8b:d3:a3:26:c1:c0:e0:
9f:b4:89:45:b0:4d:d0:f5:f0:e9:06:85:93:35:5f:
64:4f:07:28:18:20:32:62:81:3f:19:05:21:62:d1:
f2:c7:34:4e:f5:c2:e0:ff:14:6a:79:df:fe:ed:2c:
b7:d2:74:9b:63:19:97:0e:41:ab:4d:8f:ae:87:3c:
12:df:88:61:e0:c9:d8:6a:03:30:2f:89:f8:42:24:
15:b1:ca:c7:cc:f6:6f:8d:15:f4:29:cb:76:20:e5:
b8:74:68:3e:3a:05:8c:ff:b6:f9:26:36:d5:0e:84:
85:f0:e0:2f:47:76:68:09:6c:b4:33:e2:e3:87:88:
4a:c1:79:c2:59:57:34:22:ae:7b:91:2e:fc:30:30:
31:fe:e2:9f:c4:70:ea:3c:53:d4:50:e1:82:ea:c9:
54:23:b5:4a:b8:38:59:b6:72:eb:a5:9a:0f:25:72:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:F6:1A:6E:D0:9C:0C:D3:A3:8F:04:49:01:BC:B7:77:3D:88:1E
X509v3 Authority Key Identifier:
keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.204.0/23
Signature Algorithm: sha256WithRSAEncryption
22:e1:fe:b7:79:1a:bb:10:d7:a9:7c:3a:11:c4:55:2f:d7:61:
a7:86:54:df:a0:38:fb:d3:cb:7e:40:fa:b4:33:16:b2:96:4d:
de:e5:d0:19:0c:c8:12:27:db:ff:bf:5f:91:cb:94:87:39:5b:
17:0b:04:15:d8:c9:79:6e:94:7f:0a:ac:2f:4a:dd:d5:e1:3b:
dc:c5:d6:d4:d4:54:4f:1b:2e:a4:93:eb:19:4d:81:c7:b0:74:
f9:1f:07:f4:7b:87:c6:61:12:3d:de:ca:12:01:8a:d2:3e:55:
e7:7d:7d:2e:59:ff:cc:a5:a8:5c:47:05:97:1c:b4:64:74:18:
2c:3a:11:62:96:f0:a7:3a:98:1b:f6:db:41:79:a3:f4:b6:ac:
5b:22:63:b5:d1:2d:a2:98:6e:3f:b8:a9:aa:20:31:bf:38:4f:
78:5a:29:6b:34:e5:88:8a:cf:d8:ab:32:8d:4b:87:dd:33:c1:
4b:82:a7:35:41:18:33:28:69:a5:77:49:fc:b9:72:cf:98:15:
98:4b:30:16:69:a3:c4:1b:e3:fd:e6:7d:90:34:47:cd:b1:25:
ba:2d:a2:0c:89:80:2d:67:7a:02:a5:74:13:64:ee:db:85:49:
f3:82:0c:1e:0a:93:2d:e6:32:a0:6a:67:81:f0:f5:18:54:81:
6a:90:a1:75
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUashiOp9ai+B+itQ9E64ttHslDsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMw
OENFNjAwMzAeFw0yNjA0MjIwNDU1MDBaFw0yNzA0MjEwNTAwMDBaMDMxMTAvBgNV
BAMTKEExRjRGNjFBNkVEMDlDMENEM0EzOEYwNDQ5MDFCQ0I3NzczRDg4MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/QV96BsG3PcE/fzW1zORNYfl
bvygM6KTQEuItRhTpU5lN/FhWpyC2QppzmYNDWljz8ChNww3crzPas1tmoos3ur/
nzy29xohHq+rIQsGRjo5i9OjJsHA4J+0iUWwTdD18OkGhZM1X2RPBygYIDJigT8Z
BSFi0fLHNE71wuD/FGp53/7tLLfSdJtjGZcOQatNj66HPBLfiGHgydhqAzAvifhC
JBWxysfM9m+NFfQpy3Yg5bh0aD46BYz/tvkmNtUOhIXw4C9HdmgJbLQz4uOHiErB
ecJZVzQirnuRLvwwMDH+4p/EcOo8U9RQ4YLqyVQjtUq4OFm2cuulmg8lcjEJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUofT2Gm7QnAzTo48ESQG8t3c9iB4wHwYDVR0j
BBgwFoAUF2LSITHuln2GU20rR1qajAjOYAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MjBmYTE0YS1hYWFjLTQwZjQtOWM4NC02OTI1Nzg2OGYyY2IvMC8xNzYyRDIyMTMx
RUU5NjdEODY1MzZEMkI0NzVBOUE4QzA4Q0U2MDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMwOENF
NjAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMGZhMTRhLWFhYWMtNDBmNC05
Yzg0LTY5MjU3ODY4ZjJjYi8wLzMxMzAzMzJlMzEzNTM5MmUzMjMwMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8wwDQYJ
KoZIhvcNAQELBQADggEBACLh/rd5GrsQ16l8OhHEVS/XYaeGVN+gOPvTy35A+rQz
FrKWTd7l0BkMyBIn2/+/X5HLlIc5WxcLBBXYyXlulH8KrC9K3dXhO9zF1tTUVE8b
LqST6xlNgcewdPkfB/R7h8ZhEj3eyhIBitI+Ved9fS5Z/8ylqFxHBZcctGR0GCw6
EWKW8Kc6mBv220F5o/S2rFsiY7XRLaKYbj+4qaogMb84T3haKWs05YiKz9irMo1L
h90zwUuCpzVBGDMoaaV3Sfy5cs+YFZhLMBZpo8Qb4/3mfZA0R82xJbotogyJgC1n
egKldBNk7tuFSfOCDB4Kky3mMqBqZ4Hw9RhUgWqQoXU=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:27 2026 by rpki-client