Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31332e302f32342d3234203d3e203338343936.roa
File:                     3131372e3130332e31332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          IHYZqvgbuS4Bt74DdUBSTFPh4xWnAurDd4R0qQagOQM=
Subject key identifier:   0F:8A:B5:B2:17:34:1D:F0:A2:F4:25:1F:C7:63:C0:0D:C7:34:12:30
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       7A4639E7FBD2CE0274EFA7AE76E3E09DB5E6FFE3
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31332e302f32342d3234203d3e203338343936.roa
Signing time:             Wed 19 Mar 2025 06:00:02 +0000
ROA not before:           Wed 19 Mar 2025 05:55:02 +0000
ROA not after:            Wed 18 Mar 2026 06:00:02 +0000
asID:                     38496
IP address blocks:        117.103.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:46:39:e7:fb:d2:ce:02:74:ef:a7:ae:76:e3:e0:9d:b5:e6:ff:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Mar 19 05:55:02 2025 GMT
            Not After : Mar 18 06:00:02 2026 GMT
        Subject: CN=0F8AB5B217341DF0A2F4251FC763C00DC7341230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:ed:a2:58:58:a6:5d:59:d4:a7:b3:ec:56:
                    87:83:42:87:92:b4:42:75:8f:0f:5f:72:96:a1:8c:
                    fd:5f:88:68:9e:c0:d1:48:a1:0c:8a:82:05:be:57:
                    42:e2:bf:92:32:9b:2f:5f:68:b5:4e:df:ae:d8:14:
                    6e:7d:09:e1:91:35:91:02:d4:18:2f:aa:11:a9:2b:
                    f3:91:a7:ab:36:87:14:c2:4d:ca:c1:1c:e1:12:93:
                    df:2c:93:23:f6:48:e1:a1:7a:bb:9c:b5:ea:5b:2d:
                    aa:59:b8:b6:e8:d0:95:ab:f3:d9:ec:07:1f:dc:5a:
                    73:17:96:7d:b1:91:e2:a1:ef:f0:2a:db:7a:b3:8e:
                    53:e7:59:0c:f6:f8:66:c6:94:ee:02:3e:1f:7d:a6:
                    cc:34:cf:77:f4:3e:69:3a:18:44:01:40:48:15:7c:
                    61:ee:9c:d5:62:8a:db:bc:b6:d0:49:ad:c4:a5:3b:
                    23:e6:3c:96:fa:df:21:c2:39:50:c5:41:a8:39:14:
                    2e:18:46:34:c5:5b:d4:8e:1d:22:dc:4b:d9:b1:c8:
                    4c:02:76:9b:15:90:6a:d8:a0:75:56:0c:46:c9:10:
                    3d:fa:04:09:28:e9:1b:5e:04:11:22:7c:5a:bc:0a:
                    96:81:c9:ab:2e:79:ab:88:a2:72:91:f2:81:9a:44:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:B5:B2:17:34:1D:F0:A2:F4:25:1F:C7:63:C0:0D:C7:34:12:30
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31332e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:1f:5a:d2:9e:da:07:3f:fa:03:42:c2:ce:b6:94:95:c3:d9:
         94:1c:ad:ab:b8:8a:c1:74:40:8a:07:a9:5c:47:26:10:a5:4c:
         8a:79:dc:aa:ab:ae:a9:88:61:68:4f:c4:09:f8:8b:d6:6a:5b:
         9a:b6:9e:6e:26:d6:8e:17:c9:ac:1f:a1:60:5b:82:58:5d:09:
         c7:94:0e:79:b9:f2:10:32:ad:0b:3e:49:54:01:a1:7e:e6:52:
         b2:b9:57:d2:e6:5c:b2:ce:1b:8d:01:db:65:5f:a5:fc:13:8e:
         cb:6f:b2:7e:da:4c:43:e0:d1:d7:cd:5f:08:94:33:4b:27:a2:
         01:4f:7c:b6:39:36:74:cb:7a:f6:0c:69:cc:b2:17:ac:eb:a2:
         fe:b8:fb:f4:8f:89:d2:f0:62:74:9d:9f:16:9e:74:10:8f:fa:
         5c:3d:36:14:6d:65:8d:bb:87:18:5c:68:58:73:f6:df:ec:e7:
         38:70:81:77:aa:b7:2a:df:3e:6d:55:ab:55:ae:5f:91:66:8e:
         3b:43:b7:25:cc:72:b6:c7:d0:ec:8b:aa:88:b3:5f:3e:04:ed:
         0c:2f:f3:3e:29:2b:01:c0:39:8e:d3:ba:e8:24:f5:f3:f3:f9:
         7d:f0:71:e6:be:73:43:92:a3:2e:88:73:b6:45:67:4c:7d:27:
         9f:2e:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:27 2025 by rpki-client