Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e392e302f32342d3234203d3e20313530393339.roa
File: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (raw, json)
Hash identifier: lS+76Yng+Nf71APDfp+acN9is7RVGOrp5V+MOIxK5wo=
Subject key identifier: 80:BA:CE:B0:69:6D:2D:88:97:32:A9:9C:6C:42:65:55:6B:B2:A9:26
Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Certificate serial: 87B1EDE0801118E4925C0BE62FD4F4EDEDDEE0
Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e392e302f32342d3234203d3e20313530393339.roa
Signing time: Tue 21 Apr 2026 10:00:01 +0000
ROA not before: Tue 21 Apr 2026 09:55:01 +0000
ROA not after: Tue 20 Apr 2027 10:00:01 +0000
asID: 150939
IP address blocks: 103.105.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
87:b1:ed:e0:80:11:18:e4:92:5c:0b:e6:2f:d4:f4:ed:ed:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Validity
Not Before: Apr 21 09:55:01 2026 GMT
Not After : Apr 20 10:00:01 2027 GMT
Subject: CN=80BACEB0696D2D889732A99C6C4265556BB2A926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:d7:b7:6f:ea:ec:a1:8d:60:76:71:9f:86:
1f:ea:b2:da:0e:85:d8:80:d6:f0:47:e2:ab:01:9e:
33:e0:6b:dd:3c:62:15:e9:a3:46:d5:62:4b:a1:e3:
cd:1d:9f:f8:01:f3:39:f6:14:2f:1d:cc:78:9f:59:
ba:c2:a1:00:61:a7:e3:53:9a:68:d6:dc:6e:06:19:
44:4f:80:45:3c:0b:9c:d2:77:e4:a7:74:0e:35:0b:
7e:0c:56:a1:63:e5:a5:b1:6a:c0:13:bf:d1:88:1d:
94:b8:52:2b:e1:20:2c:a1:6c:f2:43:a1:07:b6:47:
40:ea:a7:a8:a5:74:18:e2:bd:10:41:88:93:5c:00:
0a:97:84:36:0c:84:35:90:4d:56:bb:03:9b:9e:4e:
85:97:fb:cb:f3:21:e7:06:e3:63:0b:11:d1:53:95:
11:03:ed:12:57:c3:c7:8a:d4:d4:2a:ed:3b:0e:e6:
df:71:10:f2:eb:85:bb:01:e4:01:6f:36:9a:25:84:
bc:2c:ad:5b:c5:fe:e0:85:44:c9:a4:cd:83:3c:90:
80:c3:26:01:c5:57:6b:36:70:f6:6f:09:7c:87:a6:
f9:8a:f8:80:46:17:fc:68:aa:ac:c9:2c:d2:8a:c5:
57:05:21:4f:7a:62:04:07:68:22:e1:5f:8c:74:82:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:CE:B0:69:6D:2D:88:97:32:A9:9C:6C:42:65:55:6B:B2:A9:26
X509v3 Authority Key Identifier:
keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e392e302f32342d3234203d3e20313530393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.9.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c0:dd:3d:3f:2d:92:6c:7f:d5:49:65:14:7d:ee:7e:5a:c0:
99:de:3a:4b:b9:21:3d:8f:d4:66:43:a6:6a:c3:16:fb:81:a7:
a0:2e:d5:6a:98:47:d1:ad:f2:5f:16:8f:66:70:9a:23:cc:9e:
93:f8:3f:43:13:96:cf:46:83:b7:fb:e5:bc:f1:f3:80:ce:9d:
f5:2b:61:f3:e9:a2:be:78:b1:e4:ca:76:3f:9d:3b:43:b3:e0:
f9:98:66:f5:7c:90:85:25:b3:28:40:e3:b1:c6:17:f3:aa:1b:
cc:0a:24:c5:8a:4b:28:7f:78:41:73:05:69:d7:fe:51:bb:dd:
04:f4:d5:b3:d9:16:6f:68:84:af:13:10:35:9e:80:c1:79:83:
ba:30:3e:06:b4:6f:5d:8a:21:e6:0a:17:d0:9f:1b:48:9a:43:
8c:ac:ff:49:d6:b8:02:20:4f:a3:05:ea:20:9e:3f:54:61:0a:
f5:16:96:33:87:08:42:44:dd:c4:f7:3e:7a:a5:37:89:46:11:
e6:bc:63:07:7e:6e:ef:ad:38:fb:ba:ee:25:22:0f:91:6d:d8:
2b:d5:ef:37:41:07:5c:b9:30:b2:dc:18:41:96:98:4f:3a:f1:
5b:0e:7d:71:57:e8:e7:dc:d1:01:f6:1d:d8:59:60:ba:00:e9:
87:78:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:35 2026 by rpki-client