Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
File: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (raw, json)
Hash identifier: o2k/YqKJpu6fRM5PwZHEpUVDxvbKGktAVqmKXIkfZgA=
Subject key identifier: 98:2D:3B:97:EA:38:31:D7:CC:DC:AD:F4:29:5A:2E:A9:82:B7:60:BA
Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial: 1D8531AB3D4E15CFBB0B718951E73E8745B8E110
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
Signing time: Mon 20 Apr 2026 10:00:01 +0000
ROA not before: Mon 20 Apr 2026 09:55:01 +0000
ROA not after: Mon 19 Apr 2027 10:00:01 +0000
asID: 142395
IP address blocks: 103.172.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:85:31:ab:3d:4e:15:cf:bb:0b:71:89:51:e7:3e:87:45:b8:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Validity
Not Before: Apr 20 09:55:01 2026 GMT
Not After : Apr 19 10:00:01 2027 GMT
Subject: CN=982D3B97EA3831D7CCDCADF4295A2EA982B760BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:4b:44:5f:46:7e:71:32:89:d9:d5:41:4f:
f7:9c:77:4d:6a:04:85:0e:79:f7:48:f5:5b:bf:e8:
b1:7a:73:d4:ce:ff:24:c0:39:af:cf:cd:7b:08:1b:
a0:5a:1a:b4:13:d2:82:3d:38:fa:df:66:4b:c9:e7:
98:04:b1:53:23:a6:16:1a:33:3f:b2:a3:b9:84:f5:
06:84:02:a5:42:95:a4:ef:2d:39:f2:3e:ce:cf:6c:
8f:80:e4:f3:89:81:12:e1:c5:76:33:0d:1f:7f:2b:
ea:dc:c1:0a:85:36:2e:23:04:62:03:12:43:55:16:
ca:e6:14:ed:1a:3e:b8:2c:40:bf:20:ba:12:fe:1e:
a9:06:84:1f:8a:19:7f:7f:7f:1c:5f:e8:0a:31:b7:
39:88:b8:bc:72:58:94:c0:1b:43:ee:e5:2e:e0:7e:
7e:50:39:5d:12:89:a0:a5:7a:f1:f2:bb:56:f1:a5:
c4:69:47:12:db:1a:b0:5d:82:f1:0d:1b:f0:11:79:
4b:e5:0f:75:68:80:6e:63:d7:81:da:31:9a:af:9d:
75:51:07:b8:0f:03:24:cb:d5:fc:dd:5a:95:26:6e:
df:31:5e:32:ca:d9:fd:50:1f:b5:86:f0:a0:23:0a:
c3:a1:4b:ee:81:0a:6d:86:09:3f:81:43:c7:49:21:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:3B:97:EA:38:31:D7:CC:DC:AD:F4:29:5A:2E:A9:82:B7:60:BA
X509v3 Authority Key Identifier:
keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.118.0/23
Signature Algorithm: sha256WithRSAEncryption
15:b8:d7:1e:24:cd:3d:43:50:ae:65:4e:98:33:73:81:c7:5a:
ef:3c:18:9c:51:ab:b9:34:35:a2:a2:fa:c8:94:ed:82:26:84:
47:ee:8a:dd:48:e5:d0:14:42:c3:67:c7:71:20:9e:95:f8:7d:
4c:ad:b2:41:93:e9:8c:b2:62:92:da:f1:e1:fd:70:5f:5e:a8:
db:9c:99:67:e6:25:40:32:1d:2f:f5:aa:de:e9:ad:38:3f:be:
45:4d:15:14:22:eb:a1:4d:85:d6:88:91:04:73:e7:a5:95:ab:
4b:d8:e7:e2:fc:b0:05:06:dc:89:83:6b:85:29:77:c6:f5:49:
ba:8a:74:20:44:8e:2b:17:28:2f:2c:8b:5f:0a:59:8a:8d:8c:
28:5c:98:0a:03:25:94:db:c8:a0:57:24:7e:67:54:4f:7a:df:
ec:6b:2c:91:ad:ac:68:9b:f3:86:d6:13:49:c6:e1:ca:bf:57:
e2:dd:b8:04:50:a5:47:a8:ee:c8:b6:2f:6e:6f:83:34:64:7c:
59:23:53:d2:9f:f8:8c:32:76:ed:0d:fa:42:13:8b:0a:f3:18:
01:8d:57:6d:cb:70:43:26:3c:af:00:a1:76:de:9d:d5:71:28:
bd:58:1f:4f:e3:1d:b3:a2:de:d1:0f:0c:e7:20:6a:0e:75:11:
48:92:d4:58
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUHYUxqz1OFc+7C3GJUec+h0W44RAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4
OTI1RkY2RTAeFw0yNjA0MjAwOTU1MDFaFw0yNzA0MTkxMDAwMDFaMDMxMTAvBgNV
BAMTKDk4MkQzQjk3RUEzODMxRDdDQ0RDQURGNDI5NUEyRUE5ODJCNzYwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82ktEX0Z+cTKJ2dVBT/ecd01q
BIUOefdI9Vu/6LF6c9TO/yTAOa/PzXsIG6BaGrQT0oI9OPrfZkvJ55gEsVMjphYa
Mz+yo7mE9QaEAqVClaTvLTnyPs7PbI+A5POJgRLhxXYzDR9/K+rcwQqFNi4jBGID
EkNVFsrmFO0aPrgsQL8guhL+HqkGhB+KGX9/fxxf6AoxtzmIuLxyWJTAG0Pu5S7g
fn5QOV0SiaClevHyu1bxpcRpRxLbGrBdgvENG/AReUvlD3VogG5j14HaMZqvnXVR
B7gPAyTL1fzdWpUmbt8xXjLK2f1QH7WG8KAjCsOhS+6BCm2GCT+BQ8dJIeQNAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmC07l+o4MdfM3K30KVouqYK3YLowHwYDVR0j
BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx
QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1
RkY2RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNGU5N2QzLTcxYzMtNGQwYS04
YjA0LTcwODhmZTM4MmJjMy8wLzMxMzAzMzJlMzEzNzMyMmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrHYwDQYJ
KoZIhvcNAQELBQADggEBABW41x4kzT1DUK5lTpgzc4HHWu88GJxRq7k0NaKi+siU
7YImhEfuit1I5dAUQsNnx3EgnpX4fUytskGT6YyyYpLa8eH9cF9eqNucmWfmJUAy
HS/1qt7prTg/vkVNFRQi66FNhdaIkQRz56WVq0vY5+L8sAUG3ImDa4Upd8b1SbqK
dCBEjisXKC8si18KWYqNjChcmAoDJZTbyKBXJH5nVE963+xrLJGtrGib84bWE0nG
4cq/V+LduARQpUeo7si2L25vgzRkfFkjU9Kf+Iwydu0N+kITiwrzGAGNV23LcEMm
PK8AoXbendVxKL1YH0/jHbOi3tEPDOcgag51EUiS1Fg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:58 2026 by rpki-client