Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa
File: 3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: m2fuvU7hIy4kpnbNny71ZJc7bVfjGj016Gr96Lr3L5I=
Subject key identifier: 32:34:CB:42:AF:76:CD:1D:42:6A:0C:4C:5F:90:99:CF:63:F5:75:EF
Certificate issuer: /CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C
Certificate serial: 694FE4BEE95812BB5EB5C68D244746E72A57232A
Authority key identifier: 75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa
Signing time: Wed 22 Apr 2026 07:00:01 +0000
ROA not before: Wed 22 Apr 2026 06:55:01 +0000
ROA not after: Wed 21 Apr 2027 07:00:01 +0000
asID: 131111
IP address blocks: 103.159.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4f:e4:be:e9:58:12:bb:5e:b5:c6:8d:24:47:46:e7:2a:57:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C
Validity
Not Before: Apr 22 06:55:01 2026 GMT
Not After : Apr 21 07:00:01 2027 GMT
Subject: CN=3234CB42AF76CD1D426A0C4C5F9099CF63F575EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:fe:c7:ae:ca:8a:cd:72:fa:24:bd:bb:87:
af:9f:ab:bf:36:15:a4:24:e4:b6:bd:d1:2e:55:c2:
48:1d:36:0f:29:75:a7:69:60:84:06:73:20:c4:01:
c7:d6:82:4f:9a:79:67:22:e2:8f:4d:63:0a:51:96:
f9:af:d2:f8:18:3c:96:e5:bb:1c:06:52:cc:7e:b1:
a9:4d:9b:c7:ab:62:1b:2d:0b:a5:9c:01:de:1f:33:
ec:1f:68:93:a6:70:5f:5b:4b:97:ae:37:d0:00:1d:
24:8e:7a:85:d4:ea:8c:e4:4d:e7:eb:dd:bb:8a:b6:
49:de:7a:6c:0a:a4:ae:1b:f8:07:8a:a8:4e:2d:be:
24:fc:c2:7b:a0:de:8d:0c:9f:f5:1b:7b:d4:ad:a0:
c8:aa:a1:87:c9:36:25:93:f1:20:cf:f3:0e:be:8d:
b0:c5:91:d5:38:c6:8c:51:b0:15:b7:89:1b:0e:1b:
2d:a4:e7:41:a2:8c:49:8a:3a:9e:8e:f1:cc:48:42:
87:cb:9f:1a:d8:18:c8:76:bb:7d:29:a9:c6:54:83:
1c:58:65:b0:9e:d3:b5:37:f9:9b:5c:bf:eb:07:d2:
cb:67:8c:ad:80:2c:44:de:94:8c:62:09:bc:9b:af:
91:91:21:fe:11:40:ba:0b:e6:3e:29:f0:3a:92:86:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:CB:42:AF:76:CD:1D:42:6A:0C:4C:5F:90:99:CF:63:F5:75:EF
X509v3 Authority Key Identifier:
keyid:75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.198.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:55:f5:6c:46:6c:22:7d:a7:fb:b2:8c:07:2f:d3:31:1f:d3:
e2:59:23:97:36:8f:dd:8c:cd:70:20:14:29:b6:4a:65:28:bd:
ee:97:83:41:bd:85:99:c8:17:b7:32:2e:42:7e:4b:b5:a8:f9:
f3:e9:62:64:ee:db:65:65:e6:18:a3:a2:1b:3b:e6:41:b2:fb:
48:d8:f5:66:68:14:8f:19:ed:38:8d:0d:49:95:90:62:1e:d5:
f0:a4:ab:45:4d:38:02:0c:8f:08:3b:21:65:18:42:c0:66:49:
e7:d4:39:ea:77:75:0a:77:c8:5f:7f:12:91:17:35:7d:3a:28:
61:92:3b:c5:3d:28:f1:9c:ac:80:1c:30:9e:fe:18:58:71:36:
18:e2:98:16:ec:0d:9f:55:63:8a:fb:0c:78:d1:f4:8f:5c:20:
af:6b:a3:9b:ca:02:77:0f:e8:87:2e:80:29:77:8d:b7:1a:75:
a6:50:31:42:2f:71:46:94:b6:6b:9b:64:8d:4f:99:7e:91:14:
a8:2a:0a:5d:ce:54:6f:66:a8:ec:46:03:d9:e4:64:ac:37:e0:
b8:8a:e6:21:1f:f3:c8:7f:22:75:8f:e1:54:3d:9b:ac:68:0d:
70:21:37:09:c8:8a:e9:fc:cd:42:0f:5a:39:72:24:76:32:00:
a1:8f:d1:b7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUaU/kvulYErtetcaNJEdG5ypXIyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU3NzdGQUZBNkRCMjUzRTNDQTE1RTJFMDkyMTZBQzZB
RjAxMDAxQzAeFw0yNjA0MjIwNjU1MDFaFw0yNzA0MjEwNzAwMDFaMDMxMTAvBgNV
BAMTKDMyMzRDQjQyQUY3NkNEMUQ0MjZBMEM0QzVGOTA5OUNGNjNGNTc1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyef7HrsqKzXL6JL27h6+fq782
FaQk5La90S5VwkgdNg8pdadpYIQGcyDEAcfWgk+aeWci4o9NYwpRlvmv0vgYPJbl
uxwGUsx+salNm8erYhstC6WcAd4fM+wfaJOmcF9bS5euN9AAHSSOeoXU6ozkTefr
3buKtkneemwKpK4b+AeKqE4tviT8wnug3o0Mn/Ube9StoMiqoYfJNiWT8SDP8w6+
jbDFkdU4xoxRsBW3iRsOGy2k50GijEmKOp6O8cxIQofLnxrYGMh2u30pqcZUgxxY
ZbCe07U3+Ztcv+sH0stnjK2ALETelIxiCbybr5GRIf4RQLoL5j4p8DqShon7AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUMjTLQq92zR1CagxMX5CZz2P1de8wHwYDVR0j
BBgwFoAUdXd/r6bbJT48oV4uCSFqxq8BABwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OTMxY2IwNy0xYjUyLTRjYWUtOWU4ZS00Njg5OTFlY2M3MzEvMC83NTc3N0ZBRkE2
REIyNTNFM0NBMTVFMkUwOTIxNkFDNkFGMDEwMDFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzU3NzdGQUZBNkRCMjUzRTNDQTE1RTJFMDkyMTZBQzZBRjAx
MDAxQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5MzFjYjA3LTFiNTItNGNhZS05
ZThlLTQ2ODk5MWVjYzczMS8wLzMxMzAzMzJlMzEzNTM5MmUzMTM5MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8YwDQYJ
KoZIhvcNAQELBQADggEBAJ5V9WxGbCJ9p/uyjAcv0zEf0+JZI5c2j92MzXAgFCm2
SmUove6Xg0G9hZnIF7cyLkJ+S7Wo+fPpYmTu22Vl5hijohs75kGy+0jY9WZoFI8Z
7TiNDUmVkGIe1fCkq0VNOAIMjwg7IWUYQsBmSefUOep3dQp3yF9/EpEXNX06KGGS
O8U9KPGcrIAcMJ7+GFhxNhjimBbsDZ9VY4r7DHjR9I9cIK9ro5vKAncP6IcugCl3
jbcadaZQMUIvcUaUtmubZI1PmX6RFKgqCl3OVG9mqOxGA9nkZKw34LiK5iEf88h/
InWP4VQ9m6xoDXAhNwnIiun8zUIPWjlyJHYyAKGP0bc=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:45:12 2026 by rpki-client