Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa
File: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: JLVbzG+6TByK1kGnlQhvTrp+ROq8qO1MM98CIy59mVM=
Subject key identifier: 77:E3:FB:25:00:57:A3:C6:EF:E9:D2:4B:C9:40:B8:A6:33:5A:EC:B4
Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial: 2D0D467B8BC15C19C7B21D95EA761B9C25AED58A
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa
Signing time: Fri 24 Apr 2026 08:01:17 +0000
ROA not before: Fri 24 Apr 2026 07:56:17 +0000
ROA not after: Fri 23 Apr 2027 08:01:17 +0000
asID: 9341
IP address blocks: 103.190.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0d:46:7b:8b:c1:5c:19:c7:b2:1d:95:ea:76:1b:9c:25:ae:d5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Validity
Not Before: Apr 24 07:56:17 2026 GMT
Not After : Apr 23 08:01:17 2027 GMT
Subject: CN=77E3FB250057A3C6EFE9D24BC940B8A6335AECB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:f2:0e:8a:f7:38:3b:37:cd:73:5c:fa:fc:
a8:4c:8c:00:b4:38:6d:3d:4b:a0:60:e6:c4:58:7b:
7c:fd:79:89:66:86:80:03:03:c0:4c:c4:ea:f1:b5:
5e:bf:04:6f:80:6b:08:81:28:85:9a:6e:00:f0:2f:
98:08:68:2c:09:2b:7f:03:8b:b1:ca:65:57:ab:9d:
cf:8a:de:dc:f7:7b:ee:73:c2:14:93:8a:3c:a9:f6:
b8:89:36:d3:c7:12:fd:31:b7:53:aa:b7:4d:d9:a7:
e7:2a:08:bc:c4:73:79:1b:d5:30:66:00:12:d7:27:
58:89:58:6f:25:25:ef:74:8b:2f:8c:9a:d6:1a:f8:
68:97:51:d3:b7:5b:eb:81:9e:c3:3b:ea:4e:83:d4:
bf:ec:a3:a1:c9:7d:70:95:b5:b5:a3:19:30:bc:d6:
20:26:a7:6a:8d:a4:66:bd:fb:c7:eb:35:23:ef:f5:
c7:8d:89:e7:3d:3a:a8:b1:f2:10:8d:48:5e:12:05:
06:5e:6b:a6:62:77:2c:f3:50:71:84:ad:dc:4b:09:
04:aa:34:5a:04:c9:e6:9a:b6:30:bb:a9:77:93:aa:
1c:82:4e:65:22:8f:91:ed:ca:0f:69:b9:22:4c:53:
86:76:85:8d:75:74:d6:75:fc:b1:73:63:cb:2b:c5:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:FB:25:00:57:A3:C6:EF:E9:D2:4B:C9:40:B8:A6:33:5A:EC:B4
X509v3 Authority Key Identifier:
keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.51.0/24
Signature Algorithm: sha256WithRSAEncryption
86:18:96:72:cf:d4:4f:37:4e:90:90:e0:a7:7b:d4:75:7b:38:
4f:ca:41:f8:85:ac:27:9a:39:92:2d:40:57:8d:0b:e2:9f:54:
23:42:6b:2a:82:05:5e:d6:1e:9b:b2:ff:7e:f6:c0:42:9c:56:
3d:63:c8:6c:cd:54:9c:1c:fa:12:3f:98:d1:f3:51:57:2d:68:
38:17:15:36:3b:f4:b7:c4:21:12:40:38:1c:21:78:0c:a3:cd:
c0:76:6a:d3:41:fe:f7:36:1b:01:d4:aa:e7:69:21:c1:24:b2:
62:6c:3a:bf:95:9e:06:74:55:ae:79:20:13:3b:cc:47:81:0e:
4d:ce:06:e3:60:06:36:b3:8b:f6:b5:6c:07:9e:b8:07:f0:76:
3e:f5:a8:cc:98:81:f1:6a:44:17:7e:aa:34:37:5e:d0:f4:2f:
e1:09:34:8d:a8:77:1e:0b:d2:f8:f7:68:91:5c:b7:b5:bf:40:
e8:db:b5:99:f4:cc:51:c4:cb:48:3a:81:b0:bc:d9:f8:ea:75:
8c:b1:bf:73:59:9e:d3:8f:8b:ec:96:00:37:fe:73:76:5f:94:
5e:00:95:62:b7:7e:81:22:a2:f8:ff:20:a6:2d:31:ef:81:db:
5d:fc:5f:86:35:1d:54:be:0f:f8:4e:f2:89:ec:96:d1:6d:a4:
24:2d:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:09 2026 by rpki-client