Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa
File: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (raw, json)
Hash identifier: c1RIZ+QGr4pflPlxewXCP7v5jA9oA70azCfYZdqG/C0=
Subject key identifier: 0E:62:37:BC:70:C7:7F:C3:24:FC:31:8F:75:61:EA:73:2C:28:C3:49
Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Certificate serial: 45F0F7BF291585849661A5F62CEC55BDBBA1B11D
Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa
Signing time: Fri 24 Apr 2026 17:00:02 +0000
ROA not before: Fri 24 Apr 2026 16:55:02 +0000
ROA not after: Fri 23 Apr 2027 17:00:02 +0000
asID: 147124
IP address blocks: 103.175.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f0:f7:bf:29:15:85:84:96:61:a5:f6:2c:ec:55:bd:bb:a1:b1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Validity
Not Before: Apr 24 16:55:02 2026 GMT
Not After : Apr 23 17:00:02 2027 GMT
Subject: CN=0E6237BC70C77FC324FC318F7561EA732C28C349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:05:81:5c:1a:8d:08:42:4f:ae:e0:46:ef:
2c:b7:f4:32:1f:a1:eb:a9:df:b9:13:fe:6b:bb:fd:
12:78:b4:96:ad:60:17:03:b0:a8:76:b9:eb:4b:c9:
72:5d:d3:e3:3f:89:b1:63:37:e9:4f:40:fc:b7:e2:
5b:d2:09:67:cb:15:7d:94:dc:63:cc:32:c5:37:67:
80:b7:a9:5a:ba:59:3f:2b:54:8c:2d:94:f0:1d:7c:
fe:b1:20:7a:ee:9f:22:e3:eb:28:24:3c:c1:95:3c:
dd:97:b9:9e:ce:37:cd:5f:3c:a9:11:93:45:56:f8:
97:16:4f:20:6a:7e:86:fb:fe:60:e2:78:fc:a2:97:
f0:06:22:14:df:2c:1a:a3:47:c5:e3:95:5d:cc:d1:
58:0f:b3:1d:7f:de:03:bb:44:bf:5d:db:4b:12:b1:
21:8e:be:73:af:82:6b:57:2f:ee:49:05:97:02:e9:
3f:72:cb:1f:b3:f4:12:14:1f:94:49:a0:04:31:06:
96:de:ed:24:0b:84:17:b7:30:6a:1f:df:c4:c0:36:
e2:16:15:e1:3f:9a:c8:de:0c:ad:6d:0f:0d:fe:74:
33:58:a9:29:37:a7:27:9c:f4:d4:5e:6d:b7:bf:2c:
43:2d:90:e2:ad:e3:b7:f0:6e:ff:14:1d:31:36:9f:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:37:BC:70:C7:7F:C3:24:FC:31:8F:75:61:EA:73:2C:28:C3:49
X509v3 Authority Key Identifier:
keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.207.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a2:ad:f7:a8:a0:41:db:13:a1:d6:4c:15:2f:fb:df:94:72:
11:86:b7:38:b4:c6:b9:09:9b:9c:d5:8f:18:8f:4f:eb:ac:12:
44:d0:1e:f5:8a:5b:3d:25:60:7d:6a:a0:77:ad:86:2f:ad:90:
22:33:fa:47:61:55:3e:0d:05:bf:28:19:29:d5:1f:ee:a1:39:
4b:ab:6e:eb:7c:75:bb:81:7d:a4:8d:f6:f2:93:a1:5d:fb:b0:
af:c1:1d:98:40:eb:54:a4:13:0e:90:0a:62:98:d7:5e:a6:57:
17:b8:60:96:0a:d4:7b:13:9b:a1:ae:14:c6:67:8e:a7:63:db:
89:2f:f2:e9:06:69:d6:19:99:26:b6:45:15:c0:9c:26:11:4f:
a1:80:e0:12:bd:1c:97:f0:bc:76:fa:6a:53:62:a8:82:2c:94:
bc:a8:d1:8c:ee:6e:70:8f:11:b1:01:be:85:3d:74:72:c1:37:
a8:d8:6e:ee:2b:6e:c3:a4:e0:10:65:e7:c0:ae:49:e9:f4:da:
9f:79:75:e6:cd:c3:02:a4:d4:86:81:70:db:09:8f:21:a9:21:
86:46:7d:2e:41:13:be:50:d2:8b:22:7b:26:8f:5e:82:66:38:
86:33:8a:36:f0:8e:e8:c5:9d:86:87:7f:3b:fb:85:cc:6d:d9:
2b:3f:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:17 2026 by rpki-client