Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa
File: 3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: pX7t8trZHP4y6h/kmX7LSWT+E+mOOpBJ8RMyVzXrh7Q=
Subject key identifier: 94:79:60:56:2F:59:36:91:64:53:1C:92:D0:98:C4:78:33:C6:36:A2
Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial: 6C22B1D6E4830C3825F0CFF985A5248649882476
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa
Signing time: Mon 10 Mar 2025 08:00:00 +0000
ROA not before: Mon 10 Mar 2025 07:55:00 +0000
ROA not after: Mon 09 Mar 2026 08:00:00 +0000
asID: 138818
IP address blocks: 103.103.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:22:b1:d6:e4:83:0c:38:25:f0:cf:f9:85:a5:24:86:49:88:24:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Validity
Not Before: Mar 10 07:55:00 2025 GMT
Not After : Mar 9 08:00:00 2026 GMT
Subject: CN=947960562F59369164531C92D098C47833C636A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:25:a3:1d:44:b8:21:92:e4:09:b4:f1:ac:
ed:a3:bd:35:0d:29:65:53:c1:6e:cf:3f:d7:97:f0:
68:95:1d:55:9e:19:97:e2:10:7b:db:16:78:b6:f4:
cf:c2:98:76:52:7c:0c:89:40:cb:0d:8a:d6:fc:d3:
b2:05:9b:29:bd:36:46:20:20:66:ec:30:6a:29:ee:
51:d2:13:43:25:8f:f1:8f:4c:c2:26:4e:5b:5f:30:
d8:45:82:6a:8e:45:4f:6b:26:b2:d1:79:c0:98:4a:
5b:ba:fc:70:b7:71:95:12:04:fd:4a:33:8d:60:9f:
13:fc:d9:4f:84:4b:de:b0:e7:55:1a:97:1c:0d:fc:
b0:1d:fb:4c:40:2f:b9:33:18:97:e1:42:11:8c:f9:
52:ff:55:66:cf:13:15:5a:4c:77:e2:c3:b3:ed:30:
14:ca:63:55:19:10:3a:0e:b8:e7:03:f0:c9:61:65:
b8:46:8e:2a:5d:8b:e8:0c:c2:91:de:f5:46:1f:74:
9c:89:0c:c4:c1:25:e7:23:4b:a5:3c:24:7f:99:ed:
bf:7d:aa:01:6a:06:0e:63:ae:0c:87:a4:e9:e4:9e:
b2:49:21:7b:4d:10:38:53:cc:d3:fa:83:99:c0:84:
2f:7f:cf:e3:b0:68:d9:36:c8:bf:1d:10:f5:72:3a:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:79:60:56:2F:59:36:91:64:53:1C:92:D0:98:C4:78:33:C6:36:A2
X509v3 Authority Key Identifier:
keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133392e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:21:53:1f:f9:80:47:ee:0a:f3:49:bf:3c:62:37:56:b6:51:
be:82:68:81:d3:be:00:85:44:1a:ea:54:21:e2:22:d4:ae:d7:
03:4e:d4:ac:20:42:c9:f1:75:2e:7b:ba:e6:ac:33:79:88:15:
ef:54:89:ed:a8:c5:e7:74:0b:8f:dc:a5:c8:ba:0a:53:ff:e2:
76:aa:23:51:2e:c6:1a:0d:fc:e6:f9:8b:69:8c:a7:90:a2:2b:
9b:25:22:c7:0d:ee:a9:61:c0:12:fd:d9:ae:fa:9f:b5:e6:6d:
bb:88:5f:f1:39:56:a1:52:6d:96:74:1f:f0:84:01:3b:c7:39:
34:78:de:d5:aa:3b:65:67:ab:00:cc:8e:1c:79:32:58:f8:56:
15:c9:75:28:79:4d:7f:1e:63:f5:95:8f:75:62:71:5c:56:38:
64:5d:9d:b9:3b:6c:3b:79:d5:30:b2:58:97:c8:f1:af:47:02:
6e:d2:87:8e:eb:47:1b:37:c2:73:fb:05:3d:48:89:0a:68:c6:
40:f7:c5:b5:54:43:7f:9f:52:4d:15:4e:f3:0c:86:69:80:e5:
7c:15:50:5e:3c:c9:19:77:40:82:3c:6f:aa:aa:11:4c:76:64:
45:73:75:f7:92:20:91:13:12:86:ea:ef:80:cc:9f:2f:0a:90:
d1:24:9a:da
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbCKx1uSDDDgl8M/5haUkhkmIJHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB
ODRCOUE2QjAeFw0yNTAzMTAwNzU1MDBaFw0yNjAzMDkwODAwMDBaMDMxMTAvBgNV
BAMTKDk0Nzk2MDU2MkY1OTM2OTE2NDUzMUM5MkQwOThDNDc4MzNDNjM2QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ySWjHUS4IZLkCbTxrO2jvTUN
KWVTwW7PP9eX8GiVHVWeGZfiEHvbFni29M/CmHZSfAyJQMsNitb807IFmym9NkYg
IGbsMGop7lHSE0Mlj/GPTMImTltfMNhFgmqORU9rJrLRecCYSlu6/HC3cZUSBP1K
M41gnxP82U+ES96w51UalxwN/LAd+0xAL7kzGJfhQhGM+VL/VWbPExVaTHfiw7Pt
MBTKY1UZEDoOuOcD8MlhZbhGjipdi+gMwpHe9UYfdJyJDMTBJecjS6U8JH+Z7b99
qgFqBg5jrgyHpOnknrJJIXtNEDhTzNP6g5nAhC9/z+OwaNk2yL8dEPVyOoZLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUlHlgVi9ZNpFkUxyS0JjEeDPGNqIwHwYDVR0j
BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC
MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC
OUE2Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhZGZjYjQ0LWFlN2EtNDQyMy1h
ZTdkLTA4NjQ4YmYxZGViMS8wLzMxMzAzMzJlMzEzMDMzMmUzMTMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ4swDQYJ
KoZIhvcNAQELBQADggEBADwhUx/5gEfuCvNJvzxiN1a2Ub6CaIHTvgCFRBrqVCHi
ItSu1wNO1KwgQsnxdS57uuasM3mIFe9Uie2oxed0C4/cpci6ClP/4naqI1EuxhoN
/Ob5i2mMp5CiK5slIscN7qlhwBL92a76n7XmbbuIX/E5VqFSbZZ0H/CEATvHOTR4
3tWqO2VnqwDMjhx5Mlj4VhXJdSh5TX8eY/WVj3VicVxWOGRdnbk7bDt51TCyWJfI
8a9HAm7Sh47rRxs3wnP7BT1IiQpoxkD3xbVUQ3+fUk0VTvMMhmmA5XwVUF48yRl3
QII8b6qqEUx2ZEVzdfeSIJETEobq74DMny8KkNEkmto=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:08:02 2025 by rpki-client