Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
File: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (raw, json)
Hash identifier: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=
Subject key identifier: 54:F9:23:9D:EA:84:77:46:D9:60:DA:87:6D:DA:92:D0:C9:27:35:E8
Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C
Certificate serial: 70EA9BE0B64F4168AE2966638F4113D86BDA5A03
Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
Signing time: Fri 14 Mar 2025 10:00:43 +0000
ROA not before: Fri 14 Mar 2025 09:55:43 +0000
ROA not after: Fri 13 Mar 2026 10:00:43 +0000
asID: 149692
IP address blocks: 103.186.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ea:9b:e0:b6:4f:41:68:ae:29:66:63:8f:41:13:d8:6b:da:5a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C
Validity
Not Before: Mar 14 09:55:43 2025 GMT
Not After : Mar 13 10:00:43 2026 GMT
Subject: CN=54F9239DEA847746D960DA876DDA92D0C92735E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:36:ad:27:32:d5:98:72:76:9d:07:0e:9d:
c1:a9:4d:1c:ed:f6:68:84:d8:44:45:5c:89:4d:b1:
f3:12:e2:45:77:eb:58:7f:5d:09:5b:c1:09:9b:8c:
7c:dc:e1:ee:1a:e1:ff:e3:37:fe:8b:92:d2:41:6d:
d5:e5:71:72:87:9b:6f:8c:4c:1c:c5:79:62:d4:2c:
72:64:0d:49:bd:96:cd:3f:65:00:d2:f9:02:1e:77:
89:bc:83:d4:5f:3c:f8:e1:8b:2f:c2:1f:fb:b5:4d:
94:52:7b:37:14:4c:6a:4f:41:73:33:fe:7d:14:8b:
cb:2b:e4:84:45:99:02:5f:59:fe:1b:ec:21:1b:68:
44:22:d1:8a:3b:26:58:0d:9d:33:03:8b:03:c7:b8:
5d:15:4e:29:f6:7f:36:59:93:19:b2:41:d9:2b:b9:
75:f0:1d:68:cc:8d:cc:2b:fe:94:a8:2d:08:0f:31:
48:a4:75:1f:e1:73:d3:68:4b:dc:25:8a:ab:14:39:
bd:58:e4:43:c7:e4:f9:33:07:f9:5a:96:72:7b:d1:
16:15:40:79:8d:11:ec:ad:a6:ad:8d:22:e5:c3:c6:
a1:ae:79:de:8b:aa:42:91:df:b7:1b:00:d8:b8:95:
a0:72:ed:20:91:e8:8b:c5:ca:5b:a3:45:85:26:34:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:23:9D:EA:84:77:46:D9:60:DA:87:6D:DA:92:D0:C9:27:35:E8
X509v3 Authority Key Identifier:
keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.60.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f0:5a:4c:a2:d9:9e:6c:bd:db:da:ab:51:57:df:ea:6a:9d:
f0:fb:4b:34:30:a9:22:af:1f:a9:0e:72:8d:26:38:ed:66:54:
2a:0a:80:e1:63:c8:e5:99:25:de:23:45:03:c6:d1:1f:36:6b:
a5:40:b0:9f:6f:ec:37:58:da:6a:d4:1b:29:7d:fc:85:87:92:
fb:9c:03:7c:fd:32:4c:dc:e0:53:5e:a4:fe:e0:d7:04:d0:08:
80:a6:ff:37:23:ab:73:bf:91:e5:a2:36:c3:f0:c8:56:84:8b:
77:ca:4d:75:60:3c:dc:37:d7:bf:ef:d2:bd:e6:51:03:63:b3:
df:5f:a1:6b:7a:6f:b3:81:f7:2b:0e:13:9e:75:92:4f:0b:68:
b7:51:37:b3:25:35:a1:95:23:f8:b2:c1:ca:1b:fe:50:c7:6b:
37:97:b6:eb:82:b5:df:42:ec:97:e5:f6:0a:92:bc:0e:f8:32:
7a:32:49:1b:d5:8f:cb:a5:d7:48:e6:94:58:3a:2b:38:99:32:
87:e5:4e:01:3e:d8:af:85:f6:bc:b2:ce:d5:2c:1c:9c:9f:ce:
2b:f7:7c:4c:ef:fb:96:5b:4f:57:da:9b:d4:7a:8e:53:a4:90:
19:d0:e4:a4:57:c8:24:66:b1:51:ee:47:b4:dd:49:36:7e:54:
c1:56:95:1e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcOqb4LZPQWiuKWZjj0ET2GvaWgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1
RUI2QzY1QzAeFw0yNTAzMTQwOTU1NDNaFw0yNjAzMTMxMDAwNDNaMDMxMTAvBgNV
BAMTKDU0RjkyMzlERUE4NDc3NDZEOTYwREE4NzZEREE5MkQwQzkyNzM1RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDltzatJzLVmHJ2nQcOncGpTRzt
9miE2ERFXIlNsfMS4kV361h/XQlbwQmbjHzc4e4a4f/jN/6LktJBbdXlcXKHm2+M
TBzFeWLULHJkDUm9ls0/ZQDS+QIed4m8g9RfPPjhiy/CH/u1TZRSezcUTGpPQXMz
/n0Ui8sr5IRFmQJfWf4b7CEbaEQi0Yo7JlgNnTMDiwPHuF0VTin2fzZZkxmyQdkr
uXXwHWjMjcwr/pSoLQgPMUikdR/hc9NoS9wliqsUOb1Y5EPH5PkzB/lalnJ70RYV
QHmNEeytpq2NIuXDxqGued6LqkKR37cbANi4laBy7SCR6IvFylujRYUmNLkJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVPkjneqEd0bZYNqHbdqS0MknNegwHwYDVR0j
BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0
QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2
QzY1Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2Nzk4MjRmLTRlMDgtNDk3MC1i
YmE2LTI3YjQ3MjZjYTU4MC8wLzMxMzAzMzJlMzEzODM2MmUzNjMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7o8MA0GCSqG
SIb3DQEBCwUAA4IBAQCK8FpMotmebL3b2qtRV9/qap3w+0s0MKkirx+pDnKNJjjt
ZlQqCoDhY8jlmSXeI0UDxtEfNmulQLCfb+w3WNpq1BspffyFh5L7nAN8/TJM3OBT
XqT+4NcE0AiApv83I6tzv5HlojbD8MhWhIt3yk11YDzcN9e/79K95lEDY7PfX6Fr
em+zgfcrDhOedZJPC2i3UTezJTWhlSP4ssHKG/5Qx2s3l7brgrXfQuyX5fYKkrwO
+DJ6Mkkb1Y/LpddI5pRYOis4mTKH5U4BPtivhfa8ss7VLBycn84r93xM7/uWW09X
2pvUeo5TpJAZ0OSkV8gkZrFR7ke03Uk2flTBVpUe
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:21 2025 by rpki-client