Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
File:                     3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (raw, json)
Hash identifier:          oqEOfOj0LGIJ2S7tvorT3Y39ThuZKXcHQZxXMPWQMC8=
Subject key identifier:   FE:F6:3F:C4:29:8C:75:CD:32:92:37:F8:6F:AF:7A:52:00:0F:1D:5E
Certificate issuer:       /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial:       492F436CE5999FD9F0539C3B0E1BC684DCB312BB
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
Signing time:             Tue 28 Apr 2026 16:00:01 +0000
ROA not before:           Tue 28 Apr 2026 15:55:01 +0000
ROA not after:            Tue 27 Apr 2027 16:00:01 +0000
asID:                     149368
IP address blocks:        103.180.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2f:43:6c:e5:99:9f:d9:f0:53:9c:3b:0e:1b:c6:84:dc:b3:12:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
        Validity
            Not Before: Apr 28 15:55:01 2026 GMT
            Not After : Apr 27 16:00:01 2027 GMT
        Subject: CN=FEF63FC4298C75CD329237F86FAF7A52000F1D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:57:26:63:f9:93:fb:36:8f:f3:ad:ba:9c:
                    2f:cc:d5:00:eb:c5:1c:f0:94:d2:b8:59:97:61:f1:
                    59:94:2d:a3:87:33:44:23:96:f3:a5:fb:0c:79:ae:
                    52:c5:08:31:0c:96:2b:af:50:82:b3:03:eb:ad:df:
                    2c:88:2e:7b:28:29:d7:f9:f8:8b:a4:c8:0f:e5:0a:
                    be:53:99:0f:0a:3c:7c:bc:95:54:b2:79:fb:f6:80:
                    9e:85:3f:04:13:51:a2:9a:bc:b2:75:e9:45:1f:1e:
                    6f:0a:bc:88:da:3b:62:5b:dd:4e:cb:95:25:27:71:
                    3e:70:3c:91:a4:8b:f5:38:63:eb:19:aa:07:42:7a:
                    a5:38:e2:76:04:e9:5c:ab:12:f9:21:9a:22:3f:08:
                    09:03:78:f8:e2:b1:e3:ed:cc:a6:21:82:5f:8a:a4:
                    66:cb:80:90:0e:30:d5:54:a5:6e:97:65:8f:59:d5:
                    27:4c:29:de:c3:43:11:2f:bf:e5:e4:a7:93:02:46:
                    31:f0:b4:7e:a1:ff:d8:c5:f5:c5:db:66:3c:b7:1a:
                    eb:5c:1f:c9:a6:91:04:f2:90:8a:23:51:8f:d4:52:
                    97:98:bb:85:e4:f1:57:63:23:97:73:46:e2:0a:5b:
                    e0:de:02:c6:01:96:a4:55:b5:f4:ae:43:62:09:86:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F6:3F:C4:29:8C:75:CD:32:92:37:F8:6F:AF:7A:52:00:0F:1D:5E
            X509v3 Authority Key Identifier:
                keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:08:9f:73:67:f6:66:21:c1:47:6e:b0:b4:28:b3:e6:ec:6c:
         71:d7:69:c4:1c:f2:c3:75:2a:19:93:83:a3:4a:5c:65:ac:e3:
         59:90:a0:5a:9a:88:b7:14:4b:8b:5d:cb:ab:cf:ee:f5:41:30:
         2c:b7:60:96:f1:b8:91:ea:e5:42:6c:ae:e5:99:81:13:04:31:
         44:5e:93:9b:11:4b:68:ab:4f:e2:de:dc:1a:d6:c8:82:ed:26:
         60:b5:50:3a:38:5f:c6:5d:36:94:48:95:95:e3:cb:8e:41:5a:
         28:29:4a:dc:f3:ed:3e:c9:e6:64:f7:cc:58:cb:db:82:b0:43:
         46:78:5e:c9:35:de:f6:c9:67:11:9f:b1:40:86:18:cb:90:51:
         1e:0d:05:f4:73:3b:9f:97:dc:c0:b3:b9:2d:89:c6:fb:26:00:
         2c:c6:ad:ca:5b:a7:a3:be:a9:e5:12:6e:fb:5c:ef:60:a8:80:
         bc:60:f1:59:4a:e0:3c:d5:4b:db:51:34:fb:fa:96:17:ea:fc:
         eb:f7:8b:89:70:9e:e9:00:88:67:2c:b6:4b:87:0a:48:e4:b9:
         b8:71:17:72:80:10:78:6f:71:b9:2c:0c:4b:96:65:9b:93:bd:
         36:30:52:5c:50:e2:97:5f:35:1b:22:c6:63:aa:5e:51:da:c7:
         32:d4:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:28 2026 by rpki-client