Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa
File: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (raw, json)
Hash identifier: goaqWb8sOq3gsWsqh1dSLcfG8dDSdgN6lnCZ9C8daRo=
Subject key identifier: 1C:3D:50:F6:AB:DE:F5:58:84:2E:0F:D9:5D:D9:06:3E:F2:59:CE:99
Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
Certificate serial: 2D6A93E57A43C25F6A4D0AC9FD9C9D53E6A51B25
Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa
Signing time: Mon 20 Apr 2026 13:03:29 +0000
ROA not before: Mon 20 Apr 2026 12:58:29 +0000
ROA not after: Mon 19 Apr 2027 13:03:29 +0000
asID: 140472
IP address blocks: 103.144.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6a:93:e5:7a:43:c2:5f:6a:4d:0a:c9:fd:9c:9d:53:e6:a5:1b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
Validity
Not Before: Apr 20 12:58:29 2026 GMT
Not After : Apr 19 13:03:29 2027 GMT
Subject: CN=1C3D50F6ABDEF558842E0FD95DD9063EF259CE99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:c0:6c:24:5e:94:9c:23:5e:a8:16:91:05:
9f:3a:f6:7c:60:c3:c1:dd:cc:25:64:53:c2:99:15:
bb:1d:d4:94:6f:72:c9:42:7b:ab:5c:34:35:ca:9d:
cd:0d:5a:8b:ec:43:e3:eb:4a:3e:da:c3:d8:dd:c5:
c1:5f:90:9b:7f:19:5e:e3:54:78:48:a1:f2:7f:38:
87:86:f8:22:b5:66:2e:6d:ad:6f:b4:85:c3:03:49:
23:d2:ef:79:ff:b7:3d:1d:d8:a2:fd:76:bc:8a:6a:
57:ed:f7:ea:4b:d9:40:cd:33:7d:73:10:8b:5d:64:
5c:07:7f:19:f2:f1:bc:37:3a:54:8e:c2:8b:fb:42:
41:a4:a4:aa:9c:7d:ea:ff:39:34:e7:94:c5:17:32:
6b:44:02:1c:9e:4d:fe:55:93:af:11:f5:3e:2f:29:
92:8e:16:b1:92:cc:3e:38:fc:61:c5:87:72:8a:cb:
80:06:e4:ec:1b:dc:d3:f3:62:e0:39:ac:a5:41:f5:
94:71:70:18:ea:b5:6c:6e:0e:17:8b:d5:bc:3e:37:
5a:71:e1:bb:d4:47:c5:6e:30:8c:d1:b2:5e:d9:87:
aa:dd:ca:bd:df:19:6a:16:5e:2d:be:c5:dd:40:4f:
0e:db:ad:1f:d1:a3:c7:95:7d:01:1a:22:0f:80:17:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:50:F6:AB:DE:F5:58:84:2E:0F:D9:5D:D9:06:3E:F2:59:CE:99
X509v3 Authority Key Identifier:
keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.47.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:50:19:24:79:7b:6d:ee:cc:1a:c6:42:04:b1:71:b1:b2:3c:
9d:42:01:12:3b:47:40:04:94:40:43:8a:68:2b:1f:63:71:ba:
92:d3:ba:a3:ad:ba:53:42:94:89:d4:89:1c:82:a7:d4:2a:b5:
38:e8:83:10:9a:ad:5b:ad:40:be:cc:69:0d:97:1b:2a:4c:26:
f8:d5:87:2a:68:a6:60:1b:a4:33:04:f2:26:70:49:60:9a:fb:
27:98:cf:65:b3:59:cf:50:00:38:a6:5a:26:b3:35:33:9c:6c:
19:46:1c:e7:fe:29:04:51:a0:05:26:e7:cf:b6:10:da:6f:68:
4a:d9:fa:a9:16:3b:7a:76:23:9b:a1:78:83:a7:6d:4f:c3:bf:
59:51:91:49:26:20:17:bf:b8:bd:ea:46:ab:c3:09:89:fe:c4:
21:84:bf:c4:a4:c8:31:63:32:d4:c5:ea:93:c2:e1:0f:78:4e:
b7:b2:5b:88:7f:68:7d:94:b3:1c:98:48:7c:9c:c3:3f:d6:63:
09:7a:2a:a1:d3:c8:25:47:2e:dc:c5:cc:57:46:1e:3d:a5:42:
a7:66:6c:55:93:f7:70:8b:e4:29:f1:cd:1d:fc:ef:d1:14:4f:
2b:e5:6f:a2:0a:3b:e1:b8:1c:a0:31:68:e9:76:a9:9b:54:14:
7a:32:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:52 2026 by rpki-client