Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa
File: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (raw, json)
Hash identifier: bZ7VwXIRq3KJ7OVGRCfKG6eOMk5t6agAsXWGxcWt10w=
Subject key identifier: 69:8E:DD:D8:EF:65:7D:17:63:A3:9B:CB:A1:1C:22:A1:C9:EE:CD:F9
Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Certificate serial: 71B493C54876AFBD38FACFCF5F196BE155944222
Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa
Signing time: Fri 24 Apr 2026 17:00:02 +0000
ROA not before: Fri 24 Apr 2026 16:55:02 +0000
ROA not after: Fri 23 Apr 2027 17:00:02 +0000
asID: 147124
IP address blocks: 103.175.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b4:93:c5:48:76:af:bd:38:fa:cf:cf:5f:19:6b:e1:55:94:42:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Validity
Not Before: Apr 24 16:55:02 2026 GMT
Not After : Apr 23 17:00:02 2027 GMT
Subject: CN=698EDDD8EF657D1763A39BCBA11C22A1C9EECDF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:c9:8b:9a:7d:c8:96:b1:d9:ad:ef:9a:12:
9b:f5:e2:93:68:6a:af:66:49:20:63:2a:14:cf:71:
8f:be:b4:98:c6:e2:a1:02:b6:b7:ab:3a:16:c4:38:
ba:59:7a:26:85:72:ea:4f:64:d7:e9:82:60:0e:cb:
a0:0d:6d:63:80:33:61:96:4e:1b:89:60:1a:27:a1:
a8:e6:6e:13:e7:7e:75:1e:d7:0c:a4:3e:c5:f4:28:
58:07:4b:ad:81:6b:f8:a5:24:98:6c:1f:6b:54:cf:
3a:65:b1:aa:fa:9e:c1:bb:06:0e:29:84:4a:69:e5:
f5:b3:3d:f8:f2:cf:11:67:b8:27:3d:f2:c6:63:5c:
05:92:5f:c8:7c:87:47:2b:da:40:9f:20:b8:4c:e5:
01:ec:44:8d:94:5c:cd:bc:23:6e:c3:d9:3f:d1:08:
17:31:5f:df:aa:57:9f:dc:93:3a:e9:e1:4a:36:2a:
1a:db:79:98:82:70:f6:56:c0:a6:03:43:00:15:1c:
b0:1b:7a:c3:ed:5d:3e:4c:c8:d1:dd:34:a1:c6:0d:
04:ff:6a:db:52:0a:5e:1c:8f:a3:b6:e9:5c:59:f3:
02:a4:05:dd:1d:89:35:26:45:cf:39:dc:6b:fb:9e:
6b:14:c6:83:a8:a7:b2:52:0e:63:47:dd:af:38:a2:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:DD:D8:EF:65:7D:17:63:A3:9B:CB:A1:1C:22:A1:C9:EE:CD:F9
X509v3 Authority Key Identifier:
keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.206.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d5:61:95:f2:d2:22:e1:9e:44:33:76:66:c5:5c:77:38:22:
16:b8:bb:33:57:fe:0e:27:ff:0d:77:ad:b7:d9:67:79:b6:e6:
48:8c:bc:c3:33:4b:3f:a6:69:3d:ec:2c:7d:72:04:99:ba:14:
3b:a8:98:a3:1a:d0:07:f0:87:d1:8b:b9:19:72:d9:d8:a6:f6:
e5:38:d4:ad:f7:0f:e8:fb:1e:07:14:98:98:8a:b4:f5:7d:c6:
a9:16:97:87:cc:10:ef:8a:93:8d:c6:cd:8c:d7:e9:b0:1a:55:
c9:fd:1f:97:79:22:70:9a:9d:16:a8:d0:7f:c6:97:47:37:76:
7d:95:81:73:e9:57:a7:43:50:72:5f:1d:65:f4:e2:c7:c0:ec:
23:89:7d:4c:ac:95:0c:8c:8c:98:1b:ed:e2:ea:c4:6f:50:1a:
39:33:0a:e9:cb:10:4d:a1:57:2a:60:1e:ab:b1:29:78:e4:e7:
18:c2:94:c0:c8:e0:14:90:fe:87:4e:2b:87:66:66:c1:b9:5f:
2f:2e:24:29:1e:9e:55:7d:f5:a0:6c:c8:59:e9:a7:71:62:e2:
14:eb:26:b7:ee:97:4e:e2:39:ec:3f:95:ab:e2:e7:f8:9b:4f:
96:de:b1:0b:e5:d2:58:4f:88:ca:2a:a5:cb:e2:8a:8a:a5:68:
bc:1e:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:51 2026 by rpki-client