Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa
File: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: MbvMxox1+aTB+N8DScPhNKhY01PRvHjZkmk5r8zyiyw=
Subject key identifier: 74:BA:78:9C:CE:8E:70:26:D8:1D:6B:E3:F1:7E:91:46:B6:5E:D8:CC
Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
Certificate serial: 30EA0FE7DAA740EA2F29244BD01C776554AE35E4
Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa
Signing time: Wed 22 Apr 2026 05:01:58 +0000
ROA not before: Wed 22 Apr 2026 04:56:58 +0000
ROA not after: Wed 21 Apr 2027 05:01:58 +0000
asID: 131111
IP address blocks: 103.171.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ea:0f:e7:da:a7:40:ea:2f:29:24:4b:d0:1c:77:65:54:ae:35:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
Validity
Not Before: Apr 22 04:56:58 2026 GMT
Not After : Apr 21 05:01:58 2027 GMT
Subject: CN=74BA789CCE8E7026D81D6BE3F17E9146B65ED8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:3a:37:a3:f6:f1:e6:1c:65:27:80:4a:a6:
f0:c6:22:b0:b5:71:48:a1:65:23:86:15:96:e0:4e:
ba:7a:71:dd:14:12:0c:f2:aa:f6:d0:9e:f9:5b:3f:
c6:b3:3d:af:cd:06:07:bc:ee:d3:54:4f:ab:eb:8b:
76:e6:05:05:74:cf:fe:fc:ba:8d:84:3c:a6:8d:d7:
34:42:53:e3:85:03:03:8e:1f:00:7a:be:33:22:08:
87:cf:c8:fa:53:fd:51:93:a8:1d:58:af:40:cc:1f:
81:6b:4c:3b:ee:e6:72:6d:27:a2:82:4b:09:90:5b:
51:b2:9f:a7:74:95:57:93:0b:4a:b8:b2:5c:47:3f:
13:e0:a6:d6:5b:2a:23:8f:9b:24:a1:4b:4f:bb:1b:
78:6a:2f:c7:63:8f:79:f6:aa:74:bc:20:02:a1:58:
24:da:74:fa:9e:ce:d8:92:63:91:4f:e4:5c:2c:4c:
a1:35:12:cc:99:ef:75:20:50:e5:81:55:6f:4a:e1:
e2:68:e0:d3:c2:b7:62:34:f4:23:74:09:13:36:93:
72:cb:38:18:33:12:ae:a4:db:29:32:67:86:37:38:
8e:ad:8d:b8:90:5f:2b:46:7c:23:64:b2:3a:a0:46:
6a:10:f7:3b:0b:64:2a:84:e4:a8:4f:6d:2a:12:f8:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:78:9C:CE:8E:70:26:D8:1D:6B:E3:F1:7E:91:46:B6:5E:D8:CC
X509v3 Authority Key Identifier:
keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.30.0/23
Signature Algorithm: sha256WithRSAEncryption
74:9e:bc:1c:a5:db:31:d6:39:b3:e2:98:8c:a2:e7:3d:76:89:
68:e2:7b:d0:46:9b:dd:4a:a7:8a:48:16:a3:8e:61:0b:12:07:
32:35:e1:a0:50:44:aa:59:29:0d:d5:11:57:aa:a7:9b:57:5d:
8f:cb:01:a2:35:3e:1a:4b:55:d3:08:37:a9:a3:49:f9:04:7c:
b9:ec:28:7a:4c:c0:5e:ce:18:66:ac:0b:2f:a6:65:ac:3c:6c:
0a:f4:5d:2e:a4:e4:e6:f7:3a:28:2e:9a:a0:76:8f:68:d0:b5:
1f:9d:97:d3:23:0e:ba:42:f9:e1:8e:0b:fa:4f:e5:fd:14:c0:
73:12:45:aa:2e:a2:e1:4b:7a:24:9a:77:59:8e:05:7e:f0:4b:
f4:59:54:06:fd:d9:ae:ea:3b:95:48:10:ee:37:af:86:52:b9:
09:26:78:c8:1f:b3:22:a3:19:1d:a2:60:f7:7c:ac:85:7a:28:
d3:fb:55:a9:0f:09:9d:3b:1f:b6:43:db:0a:05:14:2e:f6:32:
0b:0b:5b:85:a6:1d:53:b3:6f:b2:e4:32:e4:a6:19:c1:67:f1:
f5:ed:ef:b8:6d:b8:30:f5:4d:18:72:4f:3a:2d:4f:ef:c8:3e:
b1:f5:b3:31:e7:2c:27:14:88:f4:90:32:6e:51:08:30:40:90:
6d:3d:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:02 2026 by rpki-client