Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa
File: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: MHwMJicbcW6i31YbTB9tQ/mFa4Hu+SiE8fq1jWMiEvI=
Subject key identifier: 5C:50:E3:CD:53:36:E0:BA:92:39:41:71:B3:25:8A:1B:BA:E9:65:8A
Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
Certificate serial: 3ACF2B8DF50072B52ACE19B06B107083116C1B20
Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa
Signing time: Mon 27 Apr 2026 08:20:00 +0000
ROA not before: Mon 27 Apr 2026 08:15:00 +0000
ROA not after: Mon 26 Apr 2027 08:20:00 +0000
asID: 38496
IP address blocks: 103.112.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:cf:2b:8d:f5:00:72:b5:2a:ce:19:b0:6b:10:70:83:11:6c:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
Validity
Not Before: Apr 27 08:15:00 2026 GMT
Not After : Apr 26 08:20:00 2027 GMT
Subject: CN=5C50E3CD5336E0BA92394171B3258A1BBAE9658A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:0e:5d:55:f9:39:48:be:f6:0a:57:6e:5a:
87:46:65:90:93:a9:84:07:f1:1a:7f:7b:8c:4a:27:
d0:2e:79:c0:62:58:58:fb:4c:a6:cf:ea:5f:19:6c:
f0:32:dd:33:ea:49:ec:d5:3f:75:eb:eb:6a:61:e4:
c7:94:c4:62:24:2c:1b:ab:98:59:1e:ed:2a:04:d6:
37:89:e5:5f:67:15:8d:56:8f:bc:b6:91:c7:8a:90:
55:db:88:dc:e8:8c:23:d4:d9:07:d9:20:91:ed:c1:
f6:03:1c:13:46:d5:56:2d:06:2c:15:8b:f6:05:1d:
4c:56:84:c1:98:9e:d6:69:8f:e4:e7:dc:d8:ec:a8:
12:39:06:85:11:3e:9c:ea:53:5d:7b:fa:fd:8b:5f:
08:b5:20:fd:f4:23:07:46:fb:8b:cb:cb:f3:6a:9b:
d4:37:7a:b2:95:15:2d:cf:a6:72:e5:69:8a:94:d2:
58:f7:74:3e:5a:dc:38:73:b3:08:8c:77:c6:e5:da:
7a:48:71:2f:16:e6:8d:94:77:d3:a2:83:9f:a7:0f:
2d:f9:a1:0f:64:e8:39:73:05:94:3b:a0:fe:1b:ba:
17:dc:52:89:b5:d0:6f:f6:02:79:ac:8d:a0:36:39:
bf:50:52:5a:9c:c4:3e:c9:a0:38:81:97:b7:1f:6d:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:E3:CD:53:36:E0:BA:92:39:41:71:B3:25:8A:1B:BA:E9:65:8A
X509v3 Authority Key Identifier:
keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.223.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:a8:fa:7f:90:cd:45:37:24:50:c9:de:c0:3d:a4:f9:1a:66:
b8:72:7e:08:8a:17:c0:22:9d:b2:0d:32:ac:44:95:ac:62:8f:
9f:ed:c0:7b:45:66:25:95:c6:6c:bb:12:ee:20:81:18:32:42:
01:60:b5:38:9e:ee:db:de:41:ae:45:68:1e:2e:1b:47:21:87:
fc:e2:ba:0f:f4:75:96:e5:5a:7e:d4:33:96:8c:25:15:47:d4:
36:6c:bb:8e:cb:eb:67:f7:a2:ec:b2:bb:2c:38:6b:96:33:e2:
2f:d7:33:27:77:a2:ae:a8:f9:e6:92:37:ba:29:34:8e:1c:e7:
bc:86:be:40:86:77:e0:a9:6b:8b:eb:0b:70:b3:f0:24:f8:ce:
75:50:af:b9:1b:f2:c0:a6:fe:f1:20:97:2d:98:0a:ab:f5:5c:
a5:e3:bb:63:5e:1f:be:9f:44:73:dd:d8:f4:cf:36:3d:58:1a:
64:03:18:9b:c4:d3:70:74:69:7c:a2:73:c6:95:bb:39:73:f5:
2d:2e:4f:35:56:b9:a7:a0:59:1f:ac:1e:64:31:63:0b:34:3b:
c4:6a:93:fb:44:80:32:ae:4b:c4:52:26:df:56:14:d5:b6:37:
09:bf:cb:f3:61:7c:fa:0f:6c:d6:4b:d4:84:12:c2:12:c4:60:
4d:5d:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:20:56 2026 by rpki-client