Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa
File:                     3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (raw, json)
Hash identifier:          WUaJ7h9OGUroCFMLKpsBOtNDGLe4tSER8+Rod/YEgZo=
Subject key identifier:   ED:E1:9D:7C:4A:F1:82:0E:AA:27:67:E3:66:0E:BF:5C:06:BC:83:91
Certificate issuer:       /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE
Certificate serial:       7A9262A93E688B69975FAD1FEE7CFB19CAF18680
Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa
Signing time:             Mon 20 Apr 2026 12:00:02 +0000
ROA not before:           Mon 20 Apr 2026 11:55:02 +0000
ROA not after:            Mon 19 Apr 2027 12:00:02 +0000
asID:                     139962
IP address blocks:        103.147.118.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:92:62:a9:3e:68:8b:69:97:5f:ad:1f:ee:7c:fb:19:ca:f1:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE
        Validity
            Not Before: Apr 20 11:55:02 2026 GMT
            Not After : Apr 19 12:00:02 2027 GMT
        Subject: CN=EDE19D7C4AF1820EAA2767E3660EBF5C06BC8391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5a:c5:5c:ac:a8:27:4a:63:5c:c5:9a:98:ae:
                    a3:a4:c3:3c:7b:c7:e8:7d:05:5b:52:06:6a:7d:8b:
                    0c:17:fc:a0:83:af:99:0c:46:14:b0:f5:23:1b:a7:
                    c4:a9:8e:1a:2b:16:a4:36:0c:32:2a:54:d3:25:11:
                    27:b9:a0:49:d3:9f:7d:a0:c6:d7:f0:92:07:25:67:
                    5d:e5:b7:09:96:b0:7f:18:fc:9b:c9:8e:e2:ba:4f:
                    99:4d:d6:7b:0f:2c:9c:77:48:7a:58:62:4c:b7:02:
                    5a:34:d9:8c:4e:5f:71:df:fd:d2:20:5f:7a:b4:95:
                    9e:15:72:bb:87:e9:6a:3a:82:50:3a:6f:82:62:10:
                    74:bb:4e:f1:73:80:e3:a5:5d:4f:0c:1a:b4:7f:81:
                    db:e5:0f:9d:04:5f:6b:f8:61:0e:69:92:a0:8f:e9:
                    63:a2:7f:61:dc:b9:ee:36:8c:8c:42:9d:63:44:3c:
                    4d:a2:d7:f1:29:25:d9:82:e9:42:a5:05:b6:07:22:
                    2b:3c:26:f2:6f:57:40:33:ab:ff:4c:b2:a7:5e:da:
                    bb:cd:ce:93:bd:e7:17:15:7c:2e:e0:76:09:af:2b:
                    81:c7:b3:72:6d:75:4b:f2:16:7b:90:a6:1c:e8:ab:
                    31:2f:72:67:f0:31:40:77:95:4a:6d:5e:19:23:b7:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:9D:7C:4A:F1:82:0E:AA:27:67:E3:66:0E:BF:5C:06:BC:83:91
            X509v3 Authority Key Identifier:
                keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:87:f4:d2:be:d1:f9:a0:78:3b:a2:67:e2:63:a4:da:55:5e:
         87:e2:70:b6:c0:e4:ed:11:bf:4e:7c:7b:aa:c0:0c:9b:78:fe:
         4a:9a:1f:bc:73:46:d9:06:02:ec:ed:9b:ba:19:40:d0:1c:a7:
         04:39:8e:a0:aa:88:f5:0a:50:31:ab:40:46:bd:a9:25:53:d1:
         e1:38:ef:a4:5b:3c:16:bc:a7:5d:86:8a:88:78:41:18:4a:32:
         7a:b7:c6:76:51:24:1d:3d:a8:73:6a:cc:95:84:a6:65:63:6a:
         e0:97:f8:46:fc:bb:11:62:08:e0:96:d0:83:79:36:09:05:f2:
         96:bd:9d:90:e7:df:ae:68:9c:d8:04:a3:89:2e:24:81:23:b9:
         09:df:4f:da:36:f6:11:fa:57:e1:0e:ef:79:1f:08:5a:5a:9b:
         ef:20:c0:58:90:40:47:f3:71:07:e3:05:c9:9b:29:45:69:a1:
         a0:91:a7:2c:64:b2:63:ea:b4:77:ae:82:a5:f8:1a:19:f5:64:
         c2:93:ac:b3:fd:94:a0:fb:1e:ec:94:ac:e6:2f:cb:52:a9:c3:
         7d:01:cb:7f:07:ab:16:b3:09:55:4b:cf:a7:f3:9c:73:cf:57:
         df:ca:09:e8:6f:79:ed:c0:29:9e:d5:53:13:f7:94:e2:8a:d9:
         fc:04:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----