Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa
File: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (raw, json)
Hash identifier: uD8Z7VvW3X7QFGP+tK/dUybJXkDMS07pG94+mOxjD9g=
Subject key identifier: EF:60:BE:B4:3A:7E:2B:79:7C:3D:15:4E:C1:1D:D6:23:04:C7:16:D2
Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F
Certificate serial: 4EE15531BD014622D27585626A5B81DF49365B38
Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa
Signing time: Sun 19 Apr 2026 10:00:00 +0000
ROA not before: Sun 19 Apr 2026 09:55:00 +0000
ROA not after: Sun 18 Apr 2027 10:00:00 +0000
asID: 139377
IP address blocks: 103.142.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e1:55:31:bd:01:46:22:d2:75:85:62:6a:5b:81:df:49:36:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F
Validity
Not Before: Apr 19 09:55:00 2026 GMT
Not After : Apr 18 10:00:00 2027 GMT
Subject: CN=EF60BEB43A7E2B797C3D154EC11DD62304C716D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:85:0e:61:74:15:b4:28:9b:54:28:87:83:
ed:f8:58:cd:61:f9:f3:2d:97:71:e0:e2:ff:79:e1:
39:2c:8a:82:c1:c9:b3:a2:c0:e6:2f:4a:ee:a5:f4:
39:ad:bd:1c:10:35:03:3b:50:71:29:90:19:24:41:
59:e1:8a:ee:ec:68:c2:d0:8d:7c:f9:bc:20:20:04:
92:2b:6d:bb:5e:66:d7:20:57:fc:b1:d5:fc:a1:46:
6a:10:26:f9:da:b7:e5:7e:f2:d0:8e:f0:f8:3c:46:
53:e4:cd:a7:ca:34:96:47:d8:f4:1c:ea:c3:10:be:
45:0e:40:31:1a:b4:2e:0e:77:08:0c:ff:6e:4d:71:
92:ee:8d:c8:2d:a8:b8:9b:0c:8b:8d:a0:72:3a:87:
7b:58:f9:33:13:2f:52:10:6e:a5:1d:01:c6:76:1e:
22:99:bc:a8:30:67:c2:24:cf:1a:b5:0f:da:7c:eb:
89:bc:1d:03:41:36:ea:d4:86:38:0d:eb:84:ef:aa:
e3:4f:ce:18:d6:6f:7b:b4:c0:ff:4d:cf:70:37:3b:
af:b0:76:1a:b8:ae:32:66:b3:c7:ef:f5:39:db:8a:
4e:6f:66:e6:1b:1f:1a:a8:83:13:95:c9:59:2f:e9:
95:66:3f:68:b4:61:f6:9d:d5:9c:a7:78:78:ea:07:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:60:BE:B4:3A:7E:2B:79:7C:3D:15:4E:C1:1D:D6:23:04:C7:16:D2
X509v3 Authority Key Identifier:
keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8a:6c:2a:60:39:ab:59:77:50:64:44:89:7f:5e:18:c6:3f:
ca:4b:25:e0:2a:4a:54:01:52:80:7c:34:30:75:44:2b:e0:65:
38:2a:28:79:eb:f4:fb:f9:34:6a:9b:fc:90:17:dc:66:fb:62:
7e:02:47:97:52:0c:1c:ab:97:5c:a8:e9:c2:6d:67:5f:23:7c:
62:b7:68:86:6f:6f:89:71:f5:5d:43:6c:20:bf:ed:4b:30:94:
08:63:46:52:c3:e4:7d:0a:60:bf:2f:cb:0c:b8:be:c4:4d:9a:
86:c5:8a:42:30:a4:93:d7:2a:d8:f6:62:0d:f6:80:c5:03:1d:
3e:8d:90:81:5e:bc:e2:a9:a3:93:3c:1f:76:8f:14:39:94:6d:
90:83:bc:4d:c9:de:8c:f4:1c:f7:a4:e1:c7:b2:1c:b3:5b:64:
02:ee:90:ac:70:da:35:ef:13:af:66:d4:ea:8a:b1:5c:2f:ca:
6b:31:d3:3f:96:b7:c9:6e:6a:85:ad:24:a4:d6:a9:86:f3:c3:
14:36:bb:21:c1:80:b4:87:b8:39:f2:14:98:28:4a:0e:28:34:
60:f2:78:9e:fe:e8:20:11:2b:f1:8d:7f:10:c6:fa:4b:84:4e:
6b:cc:1d:c7:aa:e1:a2:40:c5:a0:25:f5:14:88:bf:34:31:d8:
cf:69:00:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:30 2026 by rpki-client