Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa
File: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (raw, json)
Hash identifier: srkfjNfCt6sqhxXV8ysfY0Xr23Q8kRD+tPn2H9YwgHM=
Subject key identifier: F1:34:60:56:7D:99:B0:74:6F:E2:E8:12:0E:DF:2C:A7:25:34:26:AB
Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A
Certificate serial: 463F1C60CF47512AF947B65D6A12EAF6D16631AB
Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa
Signing time: Fri 24 Apr 2026 08:00:00 +0000
ROA not before: Fri 24 Apr 2026 07:55:00 +0000
ROA not after: Fri 23 Apr 2027 08:00:00 +0000
asID: 138901
IP address blocks: 103.139.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3f:1c:60:cf:47:51:2a:f9:47:b6:5d:6a:12:ea:f6:d1:66:31:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A
Validity
Not Before: Apr 24 07:55:00 2026 GMT
Not After : Apr 23 08:00:00 2027 GMT
Subject: CN=F13460567D99B0746FE2E8120EDF2CA7253426AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:5d:12:ec:73:60:89:a1:5f:6c:0d:8e:ca:
08:13:d7:74:36:93:a4:9d:d9:29:a6:cf:a9:e6:a2:
ca:26:b1:e7:b6:fd:ba:2b:06:19:96:f0:78:60:e3:
c1:98:83:be:cb:1b:c9:79:96:0b:08:f9:d3:e6:09:
b1:2a:5a:25:dc:9b:b4:96:ac:aa:bb:c0:ce:68:b9:
fe:11:3b:7a:ee:4d:23:92:b9:33:d6:96:e0:4b:87:
8d:e3:20:86:dc:f0:ca:64:dd:33:f1:77:b1:c7:4f:
9f:37:63:e9:52:0c:0e:e3:d5:42:f4:48:dd:f2:d0:
1d:b6:ef:f4:19:14:30:c6:7f:8c:53:c5:d2:37:d9:
97:12:65:74:69:75:3b:6d:be:91:fd:03:3d:a8:72:
1d:de:97:02:78:27:03:71:2d:b4:d2:59:c9:56:ee:
80:36:c6:bc:18:41:18:76:de:c9:07:3f:0a:9e:c6:
3f:8d:52:74:18:66:b5:33:0f:9a:b7:e4:a8:b6:f2:
29:06:9d:00:42:bc:af:66:1c:b7:b7:1c:de:6e:93:
34:61:9c:1c:d3:f0:f6:4e:37:7b:98:7d:ec:86:e7:
8d:f4:18:a8:60:6e:4c:98:2d:38:6e:f1:71:58:74:
96:a5:e9:f6:a1:42:18:37:0d:16:e7:1e:2a:ee:9c:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:60:56:7D:99:B0:74:6F:E2:E8:12:0E:DF:2C:A7:25:34:26:AB
X509v3 Authority Key Identifier:
keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.188.0/23
Signature Algorithm: sha256WithRSAEncryption
be:6e:d8:ba:9a:94:bb:82:97:e1:a2:23:a4:5b:16:7d:26:6a:
ff:0c:7b:46:67:65:8f:a1:91:74:cd:ab:45:d9:37:84:8d:60:
2d:da:ae:4f:6a:d6:8e:4e:fb:f8:df:7d:e3:28:5e:0d:6b:81:
be:77:4f:39:9e:8d:08:3b:d8:bc:cc:89:7b:e1:4d:8b:d2:a5:
5b:3a:96:2a:fb:94:17:21:87:db:73:6e:97:33:f0:50:f4:5a:
02:bf:90:6a:e7:8c:8e:fb:cd:b7:60:26:3b:28:c7:af:15:d0:
c9:41:0c:ef:d2:cb:e1:58:df:44:bc:d1:ad:08:37:d6:18:50:
30:a7:49:be:f9:72:2f:e4:df:43:9c:26:15:50:d5:35:06:47:
49:df:d6:31:98:ad:83:31:0f:97:81:e1:54:50:79:f2:d3:54:
78:b9:af:fd:88:da:6a:5b:c4:2a:2d:1b:2d:7d:7b:53:98:b5:
72:04:c7:d8:e8:64:43:bb:a5:88:40:2a:9e:dc:69:8f:d4:14:
0a:6b:cd:9e:cd:94:16:66:d3:3a:3c:33:d2:2a:a4:22:89:84:
c7:9d:24:a0:1b:89:85:d1:b9:c6:11:51:df:86:21:00:35:54:
75:51:66:a4:f7:e6:a6:b6:92:5c:e2:fb:ec:be:76:7e:c9:19:
dd:c6:54:2d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURj8cYM9HUSr5R7ZdahLq9tFmMaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD
ODQxREYzQTAeFw0yNjA0MjQwNzU1MDBaFw0yNzA0MjMwODAwMDBaMDMxMTAvBgNV
BAMTKEYxMzQ2MDU2N0Q5OUIwNzQ2RkUyRTgxMjBFREYyQ0E3MjUzNDI2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMi10S7HNgiaFfbA2OyggT13Q2
k6Sd2Smmz6nmosomsee2/borBhmW8Hhg48GYg77LG8l5lgsI+dPmCbEqWiXcm7SW
rKq7wM5ouf4RO3ruTSOSuTPWluBLh43jIIbc8Mpk3TPxd7HHT583Y+lSDA7j1UL0
SN3y0B227/QZFDDGf4xTxdI32ZcSZXRpdTttvpH9Az2och3elwJ4JwNxLbTSWclW
7oA2xrwYQRh23skHPwqexj+NUnQYZrUzD5q35Ki28ikGnQBCvK9mHLe3HN5ukzRh
nBzT8PZON3uYfeyG5430GKhgbkyYLThu8XFYdJal6fahQhg3DRbnHirunJ6ZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU8TRgVn2ZsHRv4ugSDt8spyU0JqswHwYDVR0j
BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2
MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx
REYzQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViNzk5MDY4LTRlYzgtNGMzNi04
ZmE3LTNlNzJhZWJjZWViOC8wLzMxMzAzMzJlMzEzMzM5MmUzMTM4MzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzgzOTMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFni7wwDQYJ
KoZIhvcNAQELBQADggEBAL5u2LqalLuCl+GiI6RbFn0mav8Me0ZnZY+hkXTNq0XZ
N4SNYC3ark9q1o5O+/jffeMoXg1rgb53TzmejQg72LzMiXvhTYvSpVs6lir7lBch
h9tzbpcz8FD0WgK/kGrnjI77zbdgJjsox68V0MlBDO/Sy+FY30S80a0IN9YYUDCn
Sb75ci/k30OcJhVQ1TUGR0nf1jGYrYMxD5eB4VRQefLTVHi5r/2I2mpbxCotGy19
e1OYtXIEx9joZEO7pYhAKp7caY/UFAprzZ7NlBZm0zo8M9IqpCKJhMedJKAbiYXR
ucYRUd+GIQA1VHVRZqT35qa2klzi++y+dn7JGd3GVC0=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:20:32 2026 by rpki-client