Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa
File: 3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier: LwEVwTRD2AK4Tw4lFN0WphWbm7CqtzxPcQzi5BO1hHk=
Subject key identifier: AA:86:DE:B2:AF:3F:E0:6A:C3:42:30:70:37:DF:9D:D2:E3:1A:F7:C6
Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708
Certificate serial: 2EF3F3D0CA44F8B76E1E79F7CE0D8756A7020B03
Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa
Signing time: Mon 20 Apr 2026 17:31:04 +0000
ROA not before: Mon 20 Apr 2026 17:26:04 +0000
ROA not after: Mon 19 Apr 2027 17:31:04 +0000
asID: 154410
IP address blocks: 103.160.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f3:f3:d0:ca:44:f8:b7:6e:1e:79:f7:ce:0d:87:56:a7:02:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708
Validity
Not Before: Apr 20 17:26:04 2026 GMT
Not After : Apr 19 17:31:04 2027 GMT
Subject: CN=AA86DEB2AF3FE06AC342307037DF9DD2E31AF7C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:77:af:2f:19:39:49:88:e2:e7:19:a9:85:
02:cc:0c:3d:7f:95:bb:20:18:5d:2e:d2:76:ed:2a:
3f:b6:09:53:78:55:11:0e:87:01:60:f1:f6:08:ba:
e4:49:e9:c5:87:be:c7:42:b8:86:a8:bb:ad:8c:87:
f7:37:ad:31:3a:5f:1a:49:34:22:39:ed:8c:3a:a7:
6e:be:47:71:03:b4:63:ee:b1:96:a1:ab:9e:94:98:
cf:5b:4e:62:de:50:e6:3b:fe:55:ce:15:20:f8:dc:
f2:11:0c:0c:5d:da:86:6d:64:af:2d:52:a2:70:6b:
d3:d6:29:20:b1:99:3d:26:c2:6a:84:c5:e2:37:3f:
79:04:2a:5c:fd:2b:46:bc:93:cb:cc:63:93:11:8b:
3f:00:fe:f9:28:3b:85:7c:d6:95:a0:c0:cf:b0:4d:
3b:4d:34:0f:a7:e8:92:99:ae:ad:8e:27:1b:24:03:
f7:14:16:7c:fb:ad:3b:0f:45:0f:54:03:3d:71:41:
99:fd:e1:5d:ea:58:09:78:85:20:cb:e5:49:dd:2b:
70:c4:47:31:41:c8:a4:f2:60:9a:29:c8:66:92:ed:
c9:a8:44:20:a5:3e:a4:47:1c:76:43:2c:48:44:4e:
ff:59:ae:ff:b7:ec:3f:22:fe:13:01:9d:46:63:44:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:86:DE:B2:AF:3F:E0:6A:C3:42:30:70:37:DF:9D:D2:E3:1A:F7:C6
X509v3 Authority Key Identifier:
keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.18.0/23
Signature Algorithm: sha256WithRSAEncryption
40:bd:49:cb:fd:f3:f5:3e:38:75:ae:e3:f4:77:b3:00:df:68:
47:c9:aa:19:ab:0d:f7:c2:d3:0e:dc:f2:f3:a9:0f:c8:fe:6e:
cc:00:f4:e3:5d:56:3f:97:0d:55:32:d3:d9:99:43:92:d6:9f:
c3:2d:59:a6:96:ba:f4:7d:f5:d1:c3:10:c0:30:16:c9:40:84:
93:7d:9a:d9:76:0a:01:7d:96:82:9f:b7:80:97:1a:13:01:d6:
b3:cc:f8:b6:0f:20:e3:f3:81:90:df:95:f1:52:7a:d7:27:ec:
a0:97:87:50:cf:42:78:d0:bc:05:0c:4f:64:00:ae:af:d1:2e:
48:bc:cc:a9:ac:f2:e6:80:a2:35:72:84:b7:79:6e:d4:56:22:
53:34:c8:1f:dd:77:c4:df:82:5a:6d:8f:06:94:7f:44:34:d4:
12:43:35:5f:1b:0f:c7:36:34:55:77:8a:20:8f:58:5f:1e:8a:
06:6f:2a:1e:bb:34:07:fc:be:a9:7c:73:e3:59:3b:0d:ed:79:
64:4d:09:a7:bb:5f:8f:48:05:0f:d5:8b:65:84:e5:2a:3e:6f:
0c:37:1b:d7:ce:e3:90:18:7b:a4:30:48:55:d6:2b:22:f4:e3:
0f:66:96:be:11:d9:9d:88:95:a9:a4:00:ea:51:19:6c:18:a8:
98:5e:dc:ad
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULvPz0MpE+LduHnn3zg2HVqcCCwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4
NTRDMDcwODAeFw0yNjA0MjAxNzI2MDRaFw0yNzA0MTkxNzMxMDRaMDMxMTAvBgNV
BAMTKEFBODZERUIyQUYzRkUwNkFDMzQyMzA3MDM3REY5REQyRTMxQUY3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVHevLxk5SYji5xmphQLMDD1/
lbsgGF0u0nbtKj+2CVN4VREOhwFg8fYIuuRJ6cWHvsdCuIaou62Mh/c3rTE6XxpJ
NCI57Yw6p26+R3EDtGPusZahq56UmM9bTmLeUOY7/lXOFSD43PIRDAxd2oZtZK8t
UqJwa9PWKSCxmT0mwmqExeI3P3kEKlz9K0a8k8vMY5MRiz8A/vkoO4V81pWgwM+w
TTtNNA+n6JKZrq2OJxskA/cUFnz7rTsPRQ9UAz1xQZn94V3qWAl4hSDL5UndK3DE
RzFByKTyYJopyGaS7cmoRCClPqRHHHZDLEhETv9Zrv+37D8i/hMBnUZjRJr1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqobesq8/4GrDQjBwN9+d0uMa98YwHwYDVR0j
BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx
NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD
MDcwOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkNzQzYzdjLTA3ZTYtNDYxMS1i
NDAzLWQ4YzVmMDEyNGE3OC8wLzMxMzAzMzJlMzEzNjMwMmUzMTM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTM0MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6ASMA0GCSqG
SIb3DQEBCwUAA4IBAQBAvUnL/fP1Pjh1ruP0d7MA32hHyaoZqw33wtMO3PLzqQ/I
/m7MAPTjXVY/lw1VMtPZmUOS1p/DLVmmlrr0ffXRwxDAMBbJQISTfZrZdgoBfZaC
n7eAlxoTAdazzPi2DyDj84GQ35XxUnrXJ+ygl4dQz0J40LwFDE9kAK6v0S5IvMyp
rPLmgKI1coS3eW7UViJTNMgf3XfE34JabY8GlH9ENNQSQzVfGw/HNjRVd4ogj1hf
HooGbyoeuzQH/L6pfHPjWTsN7XlkTQmnu1+PSAUP1YtlhOUqPm8MNxvXzuOQGHuk
MEhV1isi9OMPZpa+EdmdiJWppADqURlsGKiYXtyt
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:13:15 2026 by rpki-client