Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa
File: 3130332e332e3231342e302f32342d3234203d3e20313431313436.roa (raw, json)
Hash identifier: 2iD5GIJe9YEvKfZmawAQKsOncCxYv9Zj2psicXugxEc=
Subject key identifier: 9F:DB:5E:3D:A6:BC:8B:95:25:0E:91:2D:55:58:4C:FC:06:4E:3A:6B
Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial: 599A2D25C64593BF255EB773212F119A8D8AB7EE
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa
Signing time: Wed 22 Apr 2026 09:00:11 +0000
ROA not before: Wed 22 Apr 2026 08:55:11 +0000
ROA not after: Wed 21 Apr 2027 09:00:11 +0000
asID: 141146
IP address blocks: 103.3.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9a:2d:25:c6:45:93:bf:25:5e:b7:73:21:2f:11:9a:8d:8a:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Validity
Not Before: Apr 22 08:55:11 2026 GMT
Not After : Apr 21 09:00:11 2027 GMT
Subject: CN=9FDB5E3DA6BC8B95250E912D55584CFC064E3A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:db:46:8b:a6:1d:47:f8:1b:f4:1b:98:df:
a4:9e:bf:20:72:ef:f5:b2:b0:bf:aa:fa:c1:3f:9a:
bb:ae:30:c1:2b:1d:e9:43:25:83:1f:e0:b4:f7:11:
8b:85:eb:bf:49:5d:63:e2:f0:a1:48:dc:9c:f2:71:
33:22:37:ed:21:06:7f:88:bc:d0:4f:b9:b2:f5:26:
6e:0c:21:ec:7e:cd:bc:1f:e9:42:f6:a6:2f:d0:54:
78:d1:a6:f3:93:df:53:99:74:d5:5b:a1:0e:70:04:
8e:45:f7:4e:72:8b:e6:65:5e:02:38:d4:fa:ce:e0:
13:9f:b8:af:90:79:b5:02:5e:5a:85:ff:77:e3:37:
1c:39:09:6d:8b:fa:83:9f:b0:e5:70:10:91:bc:b3:
7a:72:c2:8e:2f:a7:df:64:62:47:3a:be:0c:01:06:
f1:7c:b8:ac:2b:3c:f6:47:10:1d:7c:86:1e:26:66:
c6:ea:1d:5f:c9:1c:dd:c4:1c:8f:23:2d:97:3b:49:
44:78:60:e8:2e:39:78:75:5b:55:92:2b:d0:ad:04:
73:b7:b3:d8:20:d9:2d:78:4d:87:79:e6:52:b2:48:
d8:8e:84:db:f4:b5:d3:17:40:b1:58:af:44:8b:52:
e6:05:c8:ec:f1:61:9c:45:e3:73:95:09:6e:6e:fa:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:5E:3D:A6:BC:8B:95:25:0E:91:2D:55:58:4C:FC:06:4E:3A:6B
X509v3 Authority Key Identifier:
keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231342e302f32342d3234203d3e20313431313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.214.0/24
Signature Algorithm: sha256WithRSAEncryption
90:53:28:12:10:d4:34:1a:1f:a0:5e:cf:7c:e5:e0:c5:aa:b9:
2f:4a:99:f1:c6:4d:33:db:1f:34:db:5b:17:24:fd:d1:e2:c1:
f5:54:92:bf:1f:5a:0f:20:2b:ef:8f:1f:48:c4:24:43:e1:9b:
6d:b6:b2:a7:55:09:f7:5d:07:0d:bb:de:a3:c0:37:2e:79:f9:
ab:56:69:49:4b:b1:2a:b9:e2:3e:0c:7c:5c:d0:db:a0:12:46:
a9:61:26:53:66:50:c4:3d:d2:73:97:47:85:30:1d:75:9b:ac:
35:01:1a:67:a7:ec:b6:2f:e6:40:2a:54:b4:72:45:d4:d1:fc:
3b:f3:67:cf:22:2c:99:e7:92:c0:b8:7d:40:18:2f:be:f5:1b:
f3:c3:b0:ad:a2:d2:8b:11:85:75:b6:cf:2e:b9:9f:ea:13:70:
76:72:51:c3:2f:4a:ab:0a:d5:c4:62:3b:59:1a:c1:71:94:4b:
43:cd:98:ae:22:a3:53:15:30:cd:0c:af:c7:d8:16:8e:54:f0:
8b:36:84:e3:43:48:9d:58:51:d0:36:d5:66:db:ad:5c:72:23:
44:92:ea:2a:6f:fa:ad:e7:9d:e4:78:cb:54:6a:97:25:da:20:
17:3b:af:c3:07:28:a3:60:61:b4:ec:49:ff:4d:ec:06:8d:ce:
36:45:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:13 2026 by rpki-client