Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa
File: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (raw, json)
Hash identifier: Ek/nya2uP8n/SfqK53PuON/KdbJoR1rDisjUrHBvkZo=
Subject key identifier: 3F:C4:81:F0:A7:5F:34:9A:EE:2C:D9:81:31:E6:46:44:0C:22:F6:FB
Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial: 1FB9041753B442C8E0E26168A484666AB77874DD
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa
Signing time: Tue 28 Apr 2026 16:00:01 +0000
ROA not before: Tue 28 Apr 2026 15:55:01 +0000
ROA not after: Tue 27 Apr 2027 16:00:01 +0000
asID: 149368
IP address blocks: 103.180.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b9:04:17:53:b4:42:c8:e0:e2:61:68:a4:84:66:6a:b7:78:74:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
Validity
Not Before: Apr 28 15:55:01 2026 GMT
Not After : Apr 27 16:00:01 2027 GMT
Subject: CN=3FC481F0A75F349AEE2CD98131E646440C22F6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:08:c0:24:b6:a7:96:f4:5d:81:a3:df:7a:
6c:ba:2a:78:25:ba:28:f7:01:44:0b:83:d6:c7:55:
04:f6:49:d5:7a:9b:07:d6:52:f7:15:44:25:b8:9a:
f4:9b:52:a8:65:af:fd:8a:5a:b6:7f:70:99:64:9e:
77:d6:0d:f2:c8:1f:73:79:d2:d5:37:7b:62:b2:8a:
0b:44:6e:79:59:0f:85:4d:ba:7a:65:75:4b:f8:b3:
bf:35:ca:c0:21:e1:52:70:f7:eb:de:fc:b8:25:3c:
29:15:be:2b:6c:d6:21:aa:e5:29:51:cd:20:ac:72:
89:a9:a4:ad:5b:47:b9:ca:29:4b:7a:1f:df:6c:48:
18:d3:b2:23:53:31:16:a8:25:f0:b5:f8:b4:93:72:
5b:b1:44:92:e8:dd:04:a1:25:25:11:3d:29:10:b6:
0f:c6:d4:67:bf:81:0a:19:cf:11:b6:8d:c8:42:99:
e5:30:53:10:2d:e4:d8:6f:59:7a:16:59:30:fe:b7:
a4:d5:7b:d8:35:d2:17:49:68:be:50:d7:50:20:10:
b7:6a:98:34:bb:21:03:0b:33:d7:7f:75:6b:34:88:
2d:d0:a0:29:dd:e3:e1:9f:5e:e1:46:71:a2:3b:8d:
62:87:e7:67:db:c0:53:02:a8:cf:38:c7:01:64:f2:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C4:81:F0:A7:5F:34:9A:EE:2C:D9:81:31:E6:46:44:0C:22:F6:FB
X509v3 Authority Key Identifier:
keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.198.0/23
Signature Algorithm: sha256WithRSAEncryption
08:08:f6:c5:8f:63:b9:53:cc:6f:a3:bb:a6:3d:2c:1b:c8:a8:
1c:2b:c3:1f:7d:2b:31:1b:44:c7:0b:de:ad:0b:e1:7c:32:d0:
0a:0b:98:b9:f4:9b:1f:f6:0d:77:5f:35:15:c1:b6:44:01:35:
e3:b6:d4:c0:a2:a7:96:3b:91:f0:85:47:8f:eb:db:cb:7d:9f:
9d:6d:e0:28:01:68:26:dc:40:3c:50:c6:4e:d0:a7:8f:50:eb:
98:4d:11:cf:ae:6e:ff:40:a6:32:27:09:de:db:c6:8c:ec:64:
03:0c:2e:ca:61:31:8e:9f:5a:51:ce:d8:29:24:56:42:92:2f:
e8:0e:6e:f9:6f:44:94:05:78:f1:b4:62:67:e4:9e:c9:84:8a:
bd:4f:1b:27:20:69:61:e6:ec:a6:d2:b5:9b:c3:b8:15:6c:94:
d2:35:12:81:48:ae:fa:62:0b:17:79:01:37:ac:cc:10:bc:39:
6a:3a:5e:30:c8:48:ff:83:63:e0:46:65:12:28:ea:d6:6f:64:
3c:44:d3:f0:53:eb:4f:2e:2c:70:50:52:f8:66:0f:2e:23:78:
68:3d:a0:fa:31:db:1c:4c:f6:3b:a0:c1:2f:20:b8:f4:31:ec:
1d:47:44:c4:7d:ba:18:05:ca:fe:27:fd:cd:bb:1b:1f:ba:ed:
0d:9f:89:c6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUH7kEF1O0Qsjg4mFopIRmard4dN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5
RjVBNzBCNTAeFw0yNjA0MjgxNTU1MDFaFw0yNzA0MjcxNjAwMDFaMDMxMTAvBgNV
BAMTKDNGQzQ4MUYwQTc1RjM0OUFFRTJDRDk4MTMxRTY0NjQ0MEMyMkY2RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt4AjAJLanlvRdgaPfemy6Kngl
uij3AUQLg9bHVQT2SdV6mwfWUvcVRCW4mvSbUqhlr/2KWrZ/cJlknnfWDfLIH3N5
0tU3e2KyigtEbnlZD4VNunpldUv4s781ysAh4VJw9+ve/LglPCkVvits1iGq5SlR
zSCscomppK1bR7nKKUt6H99sSBjTsiNTMRaoJfC1+LSTcluxRJLo3QShJSURPSkQ
tg/G1Ge/gQoZzxG2jchCmeUwUxAt5NhvWXoWWTD+t6TVe9g10hdJaL5Q11AgELdq
mDS7IQMLM9d/dWs0iC3QoCnd4+GfXuFGcaI7jWKH52fbwFMCqM84xwFk8gAxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUP8SB8KdfNJruLNmBMeZGRAwi9vswHwYDVR0j
BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC
NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB
NzBCNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYzgwMWEwLTc5MTItNGIwMS1h
MjgxLTg4MDI0NjI0YTJkNC8wLzMxMzAzMzJlMzEzODMwMmUzMTM5MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntMYwDQYJ
KoZIhvcNAQELBQADggEBAAgI9sWPY7lTzG+ju6Y9LBvIqBwrwx99KzEbRMcL3q0L
4Xwy0AoLmLn0mx/2DXdfNRXBtkQBNeO21MCip5Y7kfCFR4/r28t9n51t4CgBaCbc
QDxQxk7Qp49Q65hNEc+ubv9ApjInCd7bxozsZAMMLsphMY6fWlHO2CkkVkKSL+gO
bvlvRJQFePG0YmfknsmEir1PGycgaWHm7KbStZvDuBVslNI1EoFIrvpiCxd5ATes
zBC8OWo6XjDISP+DY+BGZRIo6tZvZDxE0/BT608uLHBQUvhmDy4jeGg9oPox2xxM
9jugwS8guPQx7B1HRMR9uhgFyv4n/c27Gx+67Q2ficY=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:29 2026 by rpki-client