Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa
File:                     3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (raw, json)
Hash identifier:          6N9RtbQTL/MugVRbRaKjHStLwErYc+yEzkgStRBwnXU=
Subject key identifier:   44:35:1D:F9:A3:37:8F:D1:C2:BB:83:CF:53:3C:D4:0A:9E:5F:5A:0F
Certificate issuer:       /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial:       0310838BF382ED9A6916B4E49F8D8D199528C280
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa
Signing time:             Tue 28 Apr 2026 17:01:03 +0000
ROA not before:           Tue 28 Apr 2026 16:56:03 +0000
ROA not after:            Tue 27 Apr 2027 17:01:03 +0000
asID:                     149368
IP address blocks:        103.180.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:10:83:8b:f3:82:ed:9a:69:16:b4:e4:9f:8d:8d:19:95:28:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
        Validity
            Not Before: Apr 28 16:56:03 2026 GMT
            Not After : Apr 27 17:01:03 2027 GMT
        Subject: CN=44351DF9A3378FD1C2BB83CF533CD40A9E5F5A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:61:0c:0c:29:c8:18:4e:ca:4e:9e:a9:47:
                    6c:63:0b:35:53:c1:7d:93:23:6f:4b:4c:88:5e:c2:
                    58:27:70:61:a1:55:c7:8d:cf:5a:f5:10:f8:1b:d6:
                    2f:c7:cf:91:c1:66:2e:4a:7c:fd:1f:32:92:3b:41:
                    49:0e:67:08:9f:b6:39:b1:b4:45:27:85:cb:1d:73:
                    a5:6d:51:76:4e:04:d7:48:00:7a:f9:58:1a:f2:37:
                    1f:fd:f2:dc:80:b6:49:c3:aa:6a:59:40:b9:fb:cd:
                    4e:62:91:7b:ba:e4:69:eb:99:81:e3:4b:b8:3b:44:
                    2e:f8:dd:78:a6:0c:40:8b:ed:3a:b9:e1:a2:d8:b6:
                    82:a2:81:0b:de:c8:3a:a0:a0:3f:8f:ac:60:09:14:
                    22:c1:89:aa:06:e4:13:e7:4e:25:79:25:b4:45:5a:
                    77:dc:6c:28:3d:e1:2d:fa:e3:78:f6:7f:0f:7d:f1:
                    58:30:7a:fa:74:c4:ca:e3:ee:61:a2:7c:8a:e4:9a:
                    ff:4c:54:62:5b:3e:cd:4e:fc:dc:69:e8:17:f9:6e:
                    20:5b:85:18:5f:ef:97:46:56:d2:b9:23:3a:f8:63:
                    69:07:23:a0:03:f8:b7:82:10:b4:42:aa:58:4e:e6:
                    6e:a9:b9:3c:9c:d9:b1:17:f5:8a:02:51:82:d2:49:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:35:1D:F9:A3:37:8F:D1:C2:BB:83:CF:53:3C:D4:0A:9E:5F:5A:0F
            X509v3 Authority Key Identifier:
                keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:a0:f6:bc:38:a9:3e:bb:a9:53:46:82:76:a7:ed:b7:8f:
         c5:8f:74:10:e4:1e:f5:c1:80:8d:77:1e:4e:fb:a3:9e:08:e2:
         c2:a2:7f:af:06:5f:cc:85:1d:95:66:8b:f4:e7:1f:40:ff:84:
         ed:f7:60:eb:d3:0f:89:11:52:87:72:d7:d4:ba:ca:68:fb:09:
         3f:5e:41:d0:1d:64:55:ad:37:67:f1:30:bc:f7:f7:13:bb:d0:
         af:58:2b:e5:93:c4:16:49:c2:fe:9c:9d:f6:c0:c5:85:a3:86:
         ec:5a:37:9f:ee:14:68:b4:b1:86:89:38:7c:a8:6e:fc:21:7b:
         3a:9b:bf:28:ff:60:ba:ac:fa:be:11:c1:a4:73:8e:b1:ed:b7:
         87:a7:9e:94:8d:57:39:09:16:8e:71:81:24:2e:b4:98:e2:13:
         07:80:df:e7:f3:a7:3d:cc:27:70:cf:9c:ca:d3:45:d9:29:0b:
         9b:d1:a3:5a:93:df:72:48:dc:78:75:f1:b9:dd:f6:5f:52:9e:
         70:45:3a:45:c2:6d:90:71:1a:f6:7a:a0:55:c1:b5:76:a2:04:
         92:17:55:d2:b3:84:56:04:32:95:bd:9a:a3:2e:6b:0a:0c:f7:
         3e:06:73:b4:c3:54:be:2e:b8:23:bf:41:6c:16:d2:25:e3:ce:
         a0:9c:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:28 2026 by rpki-client