Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa
File: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (raw, json)
Hash identifier: 0RBwGz7XrJkMHoIR3kvObTdxhbT9b7hPdproDE3qE5I=
Subject key identifier: A1:CB:C3:DA:CC:C1:6E:A1:FD:6C:E7:76:4C:3D:9E:98:52:E7:CE:65
Certificate issuer: /CN=94F615F011BBB2C259625D478AF937086CA8D2EF
Certificate serial: 250566E5A1D782D3AB3265C547F2A9EE7F95082C
Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa
Signing time: Fri 24 Apr 2026 07:03:20 +0000
ROA not before: Fri 24 Apr 2026 06:58:20 +0000
ROA not after: Fri 23 Apr 2027 07:03:20 +0000
asID: 150967
IP address blocks: 103.96.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:05:66:e5:a1:d7:82:d3:ab:32:65:c5:47:f2:a9:ee:7f:95:08:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF
Validity
Not Before: Apr 24 06:58:20 2026 GMT
Not After : Apr 23 07:03:20 2027 GMT
Subject: CN=A1CBC3DACCC16EA1FD6CE7764C3D9E9852E7CE65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:d7:d3:47:44:41:03:5d:c7:5f:94:aa:7a:
13:92:dc:9c:9a:94:75:ac:6b:d0:99:f7:4b:b1:82:
07:d3:55:7b:94:0d:68:54:90:f5:a9:aa:3d:8b:68:
c2:45:ba:5c:1f:b8:45:27:f2:56:b1:14:6f:5f:f5:
50:1f:53:2d:ed:19:a4:76:bc:bc:52:6b:f0:5f:73:
b0:40:dd:95:e7:cf:b1:7c:fd:88:5e:9d:63:1d:2b:
8a:3c:07:dc:20:a7:69:b6:cd:6d:1f:85:4a:11:da:
36:b9:e1:f5:30:b4:c1:7c:38:e0:a2:8c:59:2b:1c:
84:03:00:61:2e:e2:2e:b9:91:1a:58:fc:38:db:e5:
59:da:94:6b:04:b7:d8:3c:b1:27:53:5a:c1:ac:25:
ba:45:ae:2b:d3:dc:f9:54:95:c0:70:92:cf:3a:19:
6d:0b:1f:62:79:b9:4e:b6:3f:6f:7d:8c:b3:46:79:
e2:14:b7:14:4d:51:9a:a3:cf:6c:e7:93:75:a5:4e:
0c:e5:98:48:79:02:d6:99:84:6a:26:4d:a1:07:71:
31:14:4f:78:a7:2f:f3:21:a2:f0:cb:96:f9:64:8a:
6d:fc:20:c9:2a:43:01:ea:b1:70:a1:70:14:20:34:
0f:8e:03:88:52:f8:5c:bb:53:3a:1e:1d:5a:e8:3f:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:C3:DA:CC:C1:6E:A1:FD:6C:E7:76:4C:3D:9E:98:52:E7:CE:65
X509v3 Authority Key Identifier:
keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.54.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:07:22:4e:a0:3b:90:6c:d3:8f:b3:1d:08:82:d8:45:d9:1c:
6d:b4:3d:95:ba:c2:5a:1b:1c:f3:46:cb:ab:2c:e4:a5:a2:19:
15:69:f7:3e:ed:22:2f:80:fe:b5:05:5a:57:b1:88:8e:40:cd:
9b:15:49:9a:01:be:e4:f9:4e:38:83:0c:56:72:9b:cf:32:26:
04:d0:e0:d7:72:93:86:35:6a:3c:d5:27:46:66:30:63:21:44:
fb:c1:b2:0c:d6:f7:71:82:99:4e:47:16:91:bb:af:31:6c:c7:
ad:b8:e6:c2:0f:cd:17:15:8d:c0:47:39:f6:15:3a:e2:f7:85:
1f:24:00:53:b4:3d:a9:42:bb:f5:b9:a2:31:0a:6d:7b:43:6d:
f2:79:fa:7a:1e:dd:5c:59:d3:82:40:a2:bb:29:b6:56:82:21:
ad:ab:18:fc:d1:aa:df:5a:bb:dc:63:f5:d2:21:30:8b:c0:29:
c9:95:f4:db:0f:6f:e8:ed:f5:0a:00:6c:49:64:5f:58:18:bf:
ea:78:12:0b:09:08:ed:f9:eb:22:9c:69:15:d1:5b:eb:2c:4b:
84:c9:f8:b7:34:46:2c:08:72:e1:f8:f1:d0:67:45:fe:b7:6c:
34:10:c8:95:72:4c:3d:12:c8:25:1c:fb:73:3d:39:9b:15:aa:
76:b2:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:32:58 2026 by rpki-client