Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
File: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (raw, json)
Hash identifier: fzXYj+/Wlk2+pHJ1gJZrQ6X0Tnu8HMMmPoocnHTOJ8E=
Subject key identifier: 4E:F4:BF:F0:10:48:16:4B:6D:FE:4C:E3:E8:9B:4E:1C:56:69:5A:7E
Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
Certificate serial: 2BBBDB1BCF46F904C7C58F51342AB5DD9B6E6FE5
Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
Signing time: Fri 21 Mar 2025 19:00:01 +0000
ROA not before: Fri 21 Mar 2025 18:55:01 +0000
ROA not after: Fri 20 Mar 2026 19:00:01 +0000
asID: 6939
IP address blocks: 103.162.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:bb:db:1b:cf:46:f9:04:c7:c5:8f:51:34:2a:b5:dd:9b:6e:6f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
Validity
Not Before: Mar 21 18:55:01 2025 GMT
Not After : Mar 20 19:00:01 2026 GMT
Subject: CN=4EF4BFF01048164B6DFE4CE3E89B4E1C56695A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:79:f4:27:b1:70:18:49:56:5a:3c:78:08:
4c:d8:3d:1e:eb:75:7f:69:a7:d0:8b:19:8d:45:e7:
27:8b:99:48:bb:30:b0:c6:ca:07:9a:0e:fb:64:66:
23:91:b0:dd:9b:85:8f:c4:45:c3:3a:9a:a2:49:15:
ca:07:02:a6:3a:e1:2a:59:fe:84:4f:d3:21:44:82:
fb:b4:18:f1:ab:88:e7:c9:2a:7e:01:a2:7d:26:20:
b8:52:18:e4:a5:2a:12:d1:07:4e:22:55:b7:49:d8:
33:78:4e:a1:84:7f:3c:e3:39:6d:c7:0a:37:a3:54:
10:49:2d:df:45:8d:9c:bd:df:78:78:cf:40:32:9e:
26:98:72:b5:1d:c1:3d:0b:c4:0b:ff:31:0f:12:a1:
4c:2c:1e:2d:ac:4e:65:0b:11:6a:03:28:22:8e:54:
56:9b:0c:dc:77:f3:0f:f5:91:13:84:05:88:40:02:
4f:bd:77:82:2b:c7:f3:06:40:2d:ec:bd:df:37:7d:
49:d7:84:e9:20:4c:0d:bc:40:05:03:2d:32:69:d5:
25:96:77:52:79:46:a9:02:a6:b7:04:3a:58:3e:80:
f1:34:7f:9c:7d:d3:c9:b1:7a:69:23:16:60:72:5c:
57:6f:44:45:67:62:9a:eb:7f:e2:d4:21:24:35:fe:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:BF:F0:10:48:16:4B:6D:FE:4C:E3:E8:9B:4E:1C:56:69:5A:7E
X509v3 Authority Key Identifier:
keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:12:08:02:ec:96:21:ac:db:42:f3:8a:dd:54:a1:87:df:1a:
06:dc:3e:0c:02:55:29:7e:d0:ea:55:b5:6e:a1:1f:5c:24:50:
17:1e:88:87:bb:84:88:ed:22:41:f3:c1:9e:5b:bd:c0:dc:c6:
53:dd:92:49:8e:0b:f4:8f:ea:f9:c1:b6:e2:85:1e:37:8e:d4:
cc:75:93:bc:11:f1:f7:fa:3a:35:6a:9b:26:54:11:ee:54:23:
35:43:e0:6e:c2:d4:ba:85:45:3e:80:85:58:6f:fd:92:61:bf:
d2:21:31:e9:2a:f5:8a:93:21:1f:47:b3:40:e4:a9:cd:68:9a:
44:be:f9:04:94:0f:f1:22:bb:b3:36:d6:c0:40:36:f4:a8:ea:
01:25:b9:6c:33:de:ce:14:ee:c7:8d:72:a7:57:2f:51:cb:ba:
e4:37:31:b1:19:e7:a0:70:53:36:f3:e4:a3:2b:4c:82:39:79:
9b:b0:48:d4:d3:93:2d:b9:56:72:39:4a:1b:f5:b0:9a:1e:a2:
7d:87:f2:c4:cc:11:d1:98:88:1c:83:01:6e:43:ca:ac:a1:90:
ba:fb:81:60:2e:19:47:6a:5b:60:90:50:fa:83:46:ab:81:9d:
be:f6:2f:38:67:7d:88:dd:e9:2f:b5:e5:7f:9c:21:7e:32:21:
3f:83:8e:84
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUK7vbG89G+QTHxY9RNCq13Ztub+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy
ODlBQkZGOTAeFw0yNTAzMjExODU1MDFaFw0yNjAzMjAxOTAwMDFaMDMxMTAvBgNV
BAMTKDRFRjRCRkYwMTA0ODE2NEI2REZFNENFM0U4OUI0RTFDNTY2OTVBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5nn0J7FwGElWWjx4CEzYPR7r
dX9pp9CLGY1F5yeLmUi7MLDGygeaDvtkZiORsN2bhY/ERcM6mqJJFcoHAqY64SpZ
/oRP0yFEgvu0GPGriOfJKn4Bon0mILhSGOSlKhLRB04iVbdJ2DN4TqGEfzzjOW3H
CjejVBBJLd9FjZy933h4z0AyniaYcrUdwT0LxAv/MQ8SoUwsHi2sTmULEWoDKCKO
VFabDNx38w/1kROEBYhAAk+9d4Irx/MGQC3svd83fUnXhOkgTA28QAUDLTJp1SWW
d1J5RqkCprcEOlg+gPE0f5x908mxemkjFmByXFdvREVnYprrf+LUISQ1/rt/AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUTvS/8BBIFktt/kzj6JtOHFZpWn4wHwYDVR0j
BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB
MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB
QkZGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx
ZDAtMWI1Y2UzMmU0MjBiLzAvMzEzMDMzMmUzMTM2MzIyZTMxMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzYzOTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnogEwDQYJKoZIhvcNAQEL
BQADggEBAEoSCALsliGs20Lzit1UoYffGgbcPgwCVSl+0OpVtW6hH1wkUBceiIe7
hIjtIkHzwZ5bvcDcxlPdkkmOC/SP6vnBtuKFHjeO1Mx1k7wR8ff6OjVqmyZUEe5U
IzVD4G7C1LqFRT6AhVhv/ZJhv9IhMekq9YqTIR9Hs0Dkqc1omkS++QSUD/Eiu7M2
1sBANvSo6gEluWwz3s4U7seNcqdXL1HLuuQ3MbEZ56BwUzbz5KMrTII5eZuwSNTT
ky25VnI5Shv1sJoeon2H8sTMEdGYiByDAW5DyqyhkLr7gWAuGUdqW2CQUPqDRquB
nb72LzhnfYjd6S+15X+cIX4yIT+DjoQ=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:23 2025 by rpki-client