Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa
File: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (raw, json)
Hash identifier: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=
Subject key identifier: 3C:22:3B:1F:AD:7D:75:DA:87:D8:95:2C:92:3A:34:55:5B:77:54:23
Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E
Certificate serial: 4C0505F79D3E18D9FC23AE95DFA5754581965D53
Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa
Signing time: Thu 20 Mar 2025 17:00:01 +0000
ROA not before: Thu 20 Mar 2025 16:55:01 +0000
ROA not after: Thu 19 Mar 2026 17:00:01 +0000
asID: 150971
IP address blocks: 103.127.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:05:05:f7:9d:3e:18:d9:fc:23:ae:95:df:a5:75:45:81:96:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E
Validity
Not Before: Mar 20 16:55:01 2025 GMT
Not After : Mar 19 17:00:01 2026 GMT
Subject: CN=3C223B1FAD7D75DA87D8952C923A34555B775423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:49:2c:a1:45:5f:99:27:5a:f3:9c:fc:f6:
25:7e:fd:1b:3b:eb:3d:cc:27:6e:ec:fa:e3:c6:ad:
20:b7:65:f3:ca:0b:7f:e6:f4:f0:e3:58:7a:7a:4e:
54:58:58:60:27:c7:ba:fe:87:63:86:7a:28:4e:96:
f3:e8:ce:71:ea:77:39:3c:07:f7:bb:45:0f:8d:a4:
03:0e:00:18:64:de:0b:17:b8:29:75:63:06:13:5e:
cc:56:03:be:cc:3a:5d:5e:95:0e:f9:a0:d6:8a:22:
43:41:bd:dd:41:ab:9c:68:6d:40:25:fc:92:d1:d9:
90:f5:20:c5:ca:52:82:8b:eb:38:b4:fd:25:de:75:
03:38:cc:20:c5:3b:39:1b:b1:05:7d:a5:1c:e5:77:
d2:1a:bf:f2:df:16:c9:6c:81:98:db:4e:3e:bd:ef:
06:4f:a6:aa:da:18:97:d5:61:50:0c:1d:62:c9:e1:
1d:ab:a4:32:60:b4:d0:79:f5:2f:a4:b1:ea:55:89:
4a:d2:68:c8:74:a6:9f:65:14:e7:37:48:9b:03:8a:
31:f2:19:6d:30:de:ac:3a:b0:03:c3:f8:97:fa:cf:
bf:7a:60:48:ac:94:b7:76:3d:06:40:ce:f4:02:04:
dc:21:1e:c0:7f:30:7e:3f:0d:6c:63:ef:1d:82:61:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:22:3B:1F:AD:7D:75:DA:87:D8:95:2C:92:3A:34:55:5B:77:54:23
X509v3 Authority Key Identifier:
keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.106.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:d9:55:ba:13:e5:4b:f8:b1:69:7b:52:18:1f:3f:91:4d:36:
aa:d4:ce:22:c2:33:56:5c:bd:d4:3f:db:7f:68:79:f8:81:24:
9f:94:00:0d:92:c9:71:88:d1:33:e5:3c:86:76:26:bd:31:01:
87:75:d9:cf:2b:9c:88:1f:9c:e3:66:c7:e8:0e:99:21:0a:3c:
e7:eb:05:b9:74:4b:4c:16:34:1a:b7:e8:68:25:fd:03:47:e2:
9c:08:54:b2:63:fb:31:21:81:73:1c:0e:90:a0:b4:82:cf:e7:
10:78:36:be:fc:d0:59:c5:30:1d:42:4a:39:93:a0:01:5a:40:
30:2b:79:63:33:b8:3d:87:03:0b:e4:ff:c7:db:5f:ef:86:62:
bb:ac:8a:e0:e9:e4:55:b2:9e:40:28:da:7e:ef:d1:5b:65:4f:
e0:a8:91:c4:a5:3b:1a:55:a2:08:32:6a:5e:3a:c7:77:37:0e:
2d:4a:43:a5:42:3a:b3:99:bb:a3:bd:a6:95:62:a3:ac:c8:a3:
c1:b8:a0:bc:92:cd:5d:2f:4a:8a:13:6b:d2:90:2b:63:c7:14:
11:8f:8d:89:35:9c:80:ac:8b:31:3d:c6:5d:f5:a9:4b:2d:c8:
50:c9:b2:3d:52:ba:90:e8:36:a3:3d:ec:95:e7:de:16:7a:8b:
bc:13:3a:1c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTAUF950+GNn8I66V36V1RYGWXVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE
NjIyRkIyRTAeFw0yNTAzMjAxNjU1MDFaFw0yNjAzMTkxNzAwMDFaMDMxMTAvBgNV
BAMTKDNDMjIzQjFGQUQ3RDc1REE4N0Q4OTUyQzkyM0EzNDU1NUI3NzU0MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXf0ksoUVfmSda85z89iV+/Rs7
6z3MJ27s+uPGrSC3ZfPKC3/m9PDjWHp6TlRYWGAnx7r+h2OGeihOlvPoznHqdzk8
B/e7RQ+NpAMOABhk3gsXuCl1YwYTXsxWA77MOl1elQ75oNaKIkNBvd1Bq5xobUAl
/JLR2ZD1IMXKUoKL6zi0/SXedQM4zCDFOzkbsQV9pRzld9Iav/LfFslsgZjbTj69
7wZPpqraGJfVYVAMHWLJ4R2rpDJgtNB59S+ksepViUrSaMh0pp9lFOc3SJsDijHy
GW0w3qw6sAPD+Jf6z796YEislLd2PQZAzvQCBNwhHsB/MH4/DWxj7x2CYUqzAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUPCI7H619ddqH2JUskjo0VVt3VCMwHwYDVR0j
BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF
RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy
RkIyRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4ZDdhMDM4LWY4YTEtNGVkMC1h
MWFmLTU0OTUyZTU0M2M0My8wLzMxMzAzMzJlMzEzMjM3MmUzMTMwMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnf2owDQYJ
KoZIhvcNAQELBQADggEBALDZVboT5Uv4sWl7UhgfP5FNNqrUziLCM1ZcvdQ/239o
efiBJJ+UAA2SyXGI0TPlPIZ2Jr0xAYd12c8rnIgfnONmx+gOmSEKPOfrBbl0S0wW
NBq36Ggl/QNH4pwIVLJj+zEhgXMcDpCgtILP5xB4Nr780FnFMB1CSjmToAFaQDAr
eWMzuD2HAwvk/8fbX++GYrusiuDp5FWynkAo2n7v0VtlT+CokcSlOxpVoggyal46
x3c3Di1KQ6VCOrOZu6O9ppVio6zIo8G4oLySzV0vSooTa9KQK2PHFBGPjYk1nICs
izE9xl31qUstyFDJsj1SupDoNqM97JXn3hZ6i7wTOhw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:40 2025 by rpki-client