Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa
File:                     3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (raw, json)
Hash identifier:          29WM1B0Q64vJzmD8zF5sT6tB7JSSGq859Qnwkzziyp4=
Subject key identifier:   E0:A2:5C:A4:2B:7D:70:9C:21:99:85:C9:96:06:92:12:C6:E5:EE:06
Certificate issuer:       /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Certificate serial:       2E019FDEF781C12ED96FD67B841E8F221EF8EF11
Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa
Signing time:             Tue 21 Apr 2026 10:00:01 +0000
ROA not before:           Tue 21 Apr 2026 09:55:01 +0000
ROA not after:            Tue 20 Apr 2027 10:00:01 +0000
asID:                     150939
IP address blocks:        103.105.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:01:9f:de:f7:81:c1:2e:d9:6f:d6:7b:84:1e:8f:22:1e:f8:ef:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
        Validity
            Not Before: Apr 21 09:55:01 2026 GMT
            Not After : Apr 20 10:00:01 2027 GMT
        Subject: CN=E0A25CA42B7D709C219985C996069212C6E5EE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:7b:a1:71:3f:76:09:d8:89:ef:27:20:21:
                    d3:0d:c5:b0:84:a6:86:62:98:31:e4:3a:74:73:ae:
                    0c:91:59:c7:49:ee:22:34:19:4a:cc:ac:3f:26:80:
                    08:aa:11:86:e8:d1:fd:6e:31:80:8f:35:bd:99:f4:
                    26:2e:83:4c:81:f2:0c:a5:fd:35:8a:c0:7e:6a:99:
                    d1:a6:0b:0c:11:be:e2:95:a0:ca:c2:3f:bc:fb:c0:
                    23:b4:e8:be:f0:a3:6b:42:a0:10:c2:1c:47:bc:45:
                    27:81:8a:6a:18:25:09:63:ca:64:eb:d0:70:d7:95:
                    1b:86:2c:23:39:f9:29:97:56:e6:9a:6a:e5:f9:b7:
                    0a:7e:18:7b:d7:b6:07:34:26:aa:e6:ac:84:f9:67:
                    13:53:15:f8:27:7f:5c:6d:e2:2d:e2:db:e7:63:5d:
                    e9:02:2d:06:37:63:17:d9:b6:ec:7f:81:40:c6:7b:
                    e9:af:6e:17:59:8b:e0:4f:6b:9b:b4:52:e6:a1:7d:
                    fd:91:53:94:3c:d9:cc:e7:81:18:95:26:0b:e1:af:
                    ff:fe:52:4b:54:d7:3a:a2:d3:d4:90:ac:b2:6b:4a:
                    b2:5a:e2:32:a6:77:7a:91:c9:30:15:4c:20:eb:0f:
                    58:a3:93:6b:7d:a0:a2:3c:f6:9c:a1:85:11:de:01:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:5C:A4:2B:7D:70:9C:21:99:85:C9:96:06:92:12:C6:E5:EE:06
            X509v3 Authority Key Identifier:
                keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:c4:99:fd:0a:a9:a2:0f:c0:9f:64:83:d9:a1:af:a9:ec:
         92:03:2e:ec:f1:d1:0a:4c:2a:a6:db:44:ed:ad:db:f3:1d:72:
         26:3e:d7:b5:c6:13:7b:f1:05:3b:c6:9e:6a:c4:c4:20:27:2f:
         d0:4e:bd:48:cf:d8:25:13:11:e6:9a:d7:73:ed:79:62:a2:9a:
         38:16:0b:38:0a:f9:c9:3d:7a:35:37:1e:1d:89:61:57:9b:43:
         94:e0:4d:56:cf:fe:e1:f4:63:f5:d9:8f:70:d6:2e:86:3d:cf:
         65:bd:74:72:86:81:50:f8:00:9b:dd:14:2a:0e:e6:bc:04:a8:
         32:6a:85:7d:04:00:78:59:d5:f9:92:62:3f:49:23:0b:28:5a:
         29:3a:8e:f5:37:64:22:73:d8:a0:46:dc:d0:5e:3d:36:55:da:
         e9:50:c3:ed:62:6c:bb:44:b0:dd:83:c0:ba:85:09:00:6e:9e:
         b7:2d:3a:ef:24:d1:ca:4e:c6:be:24:b9:60:85:85:00:0d:a7:
         a6:b4:33:aa:1c:a7:af:6f:65:e0:d4:49:aa:9a:1c:39:08:46:
         48:69:fc:da:6d:8b:41:4c:76:b8:29:bc:0c:95:6e:3d:98:e3:
         82:1d:f1:12:d6:4d:1d:6a:69:74:c2:2e:f8:4a:7e:2d:46:f5:
         02:e7:d9:ff
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULgGf3veBwS7Zb9Z7hB6PIh747xEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw
Q0M4OUI5ODAeFw0yNjA0MjEwOTU1MDFaFw0yNzA0MjAxMDAwMDFaMDMxMTAvBgNV
BAMTKEUwQTI1Q0E0MkI3RDcwOUMyMTk5ODVDOTk2MDY5MjEyQzZFNUVFMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZXuhcT92CdiJ7ycgIdMNxbCE
poZimDHkOnRzrgyRWcdJ7iI0GUrMrD8mgAiqEYbo0f1uMYCPNb2Z9CYug0yB8gyl
/TWKwH5qmdGmCwwRvuKVoMrCP7z7wCO06L7wo2tCoBDCHEe8RSeBimoYJQljymTr
0HDXlRuGLCM5+SmXVuaaauX5twp+GHvXtgc0JqrmrIT5ZxNTFfgnf1xt4i3i2+dj
XekCLQY3YxfZtux/gUDGe+mvbhdZi+BPa5u0Uuahff2RU5Q82czngRiVJgvhr//+
UktU1zqi09SQrLJrSrJa4jKmd3qRyTAVTCDrD1ijk2t9oKI89pyhhRHeAUSLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU4KJcpCt9cJwhmYXJlgaSEsbl7gYwHwYDVR0j
BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1
MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4
OUI5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2N2E3ZjBlLThkMDctNDVkZS04
MjUyLTNiZmZjMDVlNTY0OS8wLzMxMzAzMzJlMzEzMDM1MmUzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdpCDANBgkqhkiG
9w0BAQsFAAOCAQEALLjEmf0KqaIPwJ9kg9mhr6nskgMu7PHRCkwqpttE7a3b8x1y
Jj7XtcYTe/EFO8aeasTEICcv0E69SM/YJRMR5prXc+15YqKaOBYLOAr5yT16NTce
HYlhV5tDlOBNVs/+4fRj9dmPcNYuhj3PZb10coaBUPgAm90UKg7mvASoMmqFfQQA
eFnV+ZJiP0kjCyhaKTqO9TdkInPYoEbc0F49NlXa6VDD7WJsu0Sw3YPAuoUJAG6e
ty067yTRyk7GviS5YIWFAA2nprQzqhynr29l4NRJqpocOQhGSGn82m2LQUx2uCm8
DJVuPZjjgh3xEtZNHWppdMIu+Ep+LUb1AufZ/w==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:33 2026 by rpki-client