Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
File: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: Y7jOCq1CV/nPdxexSlzIqs6HfeXjS7lM/A2Z89fzB0A=
Subject key identifier: 94:C7:40:FD:86:44:F9:AF:82:FF:08:3C:35:B7:7C:D9:62:81:1C:FF
Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial: 7BDF593A98F406D08FC089C3EA2E92CDAE6F3C27
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
Signing time: Fri 24 Apr 2026 08:01:17 +0000
ROA not before: Fri 24 Apr 2026 07:56:17 +0000
ROA not after: Fri 23 Apr 2027 08:01:17 +0000
asID: 9341
IP address blocks: 103.190.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:df:59:3a:98:f4:06:d0:8f:c0:89:c3:ea:2e:92:cd:ae:6f:3c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Validity
Not Before: Apr 24 07:56:17 2026 GMT
Not After : Apr 23 08:01:17 2027 GMT
Subject: CN=94C740FD8644F9AF82FF083C35B77CD962811CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:60:1e:29:1d:9d:76:bf:c3:ca:f0:26:f6:
52:19:bd:6e:c9:b0:c9:6f:94:72:77:33:63:d4:c9:
e4:26:36:49:77:29:02:fa:96:d0:ee:5c:62:e1:36:
e9:06:f9:48:e8:fa:c8:af:9c:15:ab:84:85:26:9f:
0d:ab:fe:d5:e3:9d:13:39:61:5d:c0:03:bc:22:44:
9a:26:87:ca:11:cd:ab:3d:94:82:82:92:86:7c:aa:
b4:03:ea:9e:e3:f2:e2:74:a8:1b:f8:a4:27:2d:90:
6b:47:2b:ec:91:36:ff:14:9a:53:ef:c5:c1:2f:09:
ce:6b:b3:bb:8a:f9:06:1e:65:fc:dc:ed:ee:63:bd:
19:b7:d3:79:90:56:f2:84:8b:3f:3c:9a:c0:49:36:
b7:b0:f0:8a:4b:8b:55:3a:6f:7f:1e:5b:e9:98:90:
65:27:3e:18:25:85:24:53:27:c0:59:b6:01:b6:07:
04:f6:1e:b6:c4:1e:b9:12:ef:54:12:52:5d:ab:46:
ca:d1:9e:3e:4a:83:bc:36:0b:c7:02:b2:dd:1c:df:
7a:4d:b7:b9:e3:d0:70:9f:cf:f0:b3:95:ab:60:00:
17:2a:f0:1b:16:70:d5:a9:51:d6:56:3d:aa:18:3e:
46:b8:c9:d8:d0:4a:b7:ca:a5:73:c0:9a:f2:32:e7:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:40:FD:86:44:F9:AF:82:FF:08:3C:35:B7:7C:D9:62:81:1C:FF
X509v3 Authority Key Identifier:
keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.50.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:73:08:05:b3:41:86:d5:9c:0c:55:de:52:ca:66:1c:8b:41:
be:51:73:95:34:54:2a:b5:4a:3f:a3:36:cc:16:95:82:d4:3c:
e3:4c:97:c8:4a:dd:59:64:05:c0:5c:9d:ef:c8:61:12:17:ce:
6a:40:0c:e8:6d:5e:b4:58:68:f3:ca:02:f6:36:66:3f:18:46:
8f:94:dc:9a:72:fe:3d:94:9b:f4:30:95:a4:ed:dc:75:46:a1:
a6:99:1c:4e:1e:54:ee:44:f2:88:73:87:0d:d8:d1:89:5c:a8:
b4:1d:04:82:39:df:91:85:bb:6c:20:64:6b:21:f2:61:e4:aa:
fb:9f:00:9b:53:81:14:67:a3:75:3a:2a:ca:24:e2:b0:f0:aa:
9c:f2:f4:1e:9a:9d:dc:b5:87:08:1a:99:a8:31:66:48:22:28:
b8:1f:cd:c8:03:eb:cb:69:54:41:7b:e5:70:ee:b0:37:bb:ee:
2c:5b:96:3d:61:fa:dd:1f:41:51:b5:7e:8c:fa:67:53:88:30:
c4:03:0d:c4:b0:8e:a5:4d:85:60:8c:83:37:57:a5:07:d0:d7:
44:73:6f:bd:8c:df:5c:7e:85:d2:ed:47:7c:0d:bd:8e:27:6f:
00:a7:24:0f:aa:4e:46:d2:7c:bd:fe:23:a7:bd:e7:1a:a1:f9:
69:49:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:37 2026 by rpki-client