Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa
File: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (raw, json)
Hash identifier: XcVS0IVjnUo6Lv+VLWMAGE+AXc84ClGlCn/NsJ3V7nk=
Subject key identifier: 9F:68:82:FA:C5:C9:D3:C1:31:F2:D7:54:60:60:84:A7:BD:1A:88:64
Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9
Certificate serial: 10D6B965D5A49095CB6B65EFE81A82467721E9E5
Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa
Signing time: Sat 25 Apr 2026 10:00:01 +0000
ROA not before: Sat 25 Apr 2026 09:55:01 +0000
ROA not after: Sat 24 Apr 2027 10:00:01 +0000
asID: 45724
IP address blocks: 103.231.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d6:b9:65:d5:a4:90:95:cb:6b:65:ef:e8:1a:82:46:77:21:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9
Validity
Not Before: Apr 25 09:55:01 2026 GMT
Not After : Apr 24 10:00:01 2027 GMT
Subject: CN=9F6882FAC5C9D3C131F2D754606084A7BD1A8864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8b:36:94:dc:27:63:fa:09:2c:d9:93:69:d4:
2b:88:86:de:36:21:bb:f2:d8:4a:d8:8a:52:2a:93:
4e:2a:f6:60:ce:77:89:5c:e4:6a:61:c4:a5:ac:b2:
fd:3e:80:e5:87:7e:cc:cb:b1:74:b0:e7:06:0d:26:
85:2c:0c:ca:94:2c:8b:d1:37:89:1b:93:3f:0c:47:
6a:a0:5b:68:65:81:69:6e:59:de:5a:d1:d3:c1:9b:
38:52:6d:dd:e3:47:1a:88:2e:20:f0:45:d6:b0:ef:
9c:5f:26:72:11:0a:ed:e1:cf:a0:40:98:f1:aa:71:
84:5a:53:91:a6:8a:32:5f:0e:50:c3:cf:f8:91:7c:
31:7f:7a:73:2f:f8:1a:bb:09:7b:2c:6b:c0:58:03:
67:81:06:d5:4d:76:47:37:a4:94:5f:1d:9d:5a:11:
b6:ad:6b:9e:da:f7:2d:9e:ee:f9:b1:cc:e0:a6:1a:
87:f2:0b:f2:8c:64:c3:26:af:ae:e8:86:e6:0e:90:
48:51:b4:57:ca:a9:cd:63:9c:07:b2:93:09:0d:2f:
96:04:ce:e1:39:a4:cd:1f:64:a4:cc:88:25:6b:fe:
bd:a9:05:ce:aa:36:dc:c8:45:b5:4e:48:6e:e4:48:
6e:f5:2b:15:28:f7:12:e0:86:4a:ab:8f:75:59:90:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:68:82:FA:C5:C9:D3:C1:31:F2:D7:54:60:60:84:A7:BD:1A:88:64
X509v3 Authority Key Identifier:
keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:59:1a:11:c9:29:55:70:9e:a5:ab:fa:16:2a:1a:d8:49:27:
1a:90:9d:6c:a2:79:29:c8:d6:b5:ee:24:cc:5f:d5:a4:d6:70:
bf:7e:0b:ca:20:0a:d6:64:6f:39:d4:a5:7e:8b:77:34:18:d8:
44:25:b4:27:5b:b1:89:61:83:77:74:b1:64:a1:0f:19:3a:b1:
02:a4:05:49:1b:ea:2e:67:cf:fa:81:3a:94:91:a5:b8:04:de:
cc:76:9c:1c:70:e8:1e:b6:9a:61:29:e2:17:92:c2:5a:89:43:
31:59:9a:10:9b:eb:e5:dd:ab:93:a6:af:57:0e:bb:10:a7:95:
75:5a:e9:f0:b6:95:2b:74:dc:00:35:e2:19:c6:7d:1f:60:2a:
d2:5a:67:0e:81:2b:72:3b:9c:d8:3f:f0:ea:2d:7b:ee:9c:23:
36:94:63:cf:bb:0a:ce:95:cc:5e:62:7f:82:ae:1d:de:41:18:
b1:aa:80:1a:17:8e:90:52:aa:aa:98:3c:09:26:03:3a:28:9e:
ac:c9:ba:62:0e:2b:05:2c:77:d0:4a:e1:c5:2e:e7:ea:f5:49:
7d:b2:89:9c:1e:5b:40:71:1f:7c:88:4b:dc:cc:ee:50:13:10:
27:03:8a:1f:e3:1f:46:02:6b:f0:82:b6:b5:3b:de:16:ec:75:
b1:54:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:45:14 2026 by rpki-client